[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
A question on GBUDB utilization. I show a current utilization of 95% (from the log file) which I assume means the amount of memory used from what is set aside for gbudb entries. Is that correct? What happens when more entries are added? Does the GBUdb grow or does it get pruned out? Will

[sniffer] Re: xci scanner command

2009-02-17 Thread Pete McNeil
Richard Stupek wrote: A question on GBUDB utilization. I show a current utilization of 95% (from the log file) which I assume means the amount of memory used from what is set aside for gbudb entries. Is that correct? Yes. What happens when more entries are added? Does the GBUdb grow or

[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
Thanks for the info. Is there any diagnostic information available when a gbudb sync occurs? On Tue, Feb 17, 2009 at 4:35 PM, Pete McNeil madscient...@armresearch.comwrote: Richard Stupek wrote: A question on GBUDB utilization. I show a current utilization of 95% (from the log file) which

[sniffer] Re: xci scanner command

2009-02-17 Thread Pete McNeil
Richard Stupek wrote: Thanks for the info. Is there any diagnostic information available when a gbudb sync occurs? You can always see the current status of GBUdb in your status.* files. If you append these logs you can follow the state of the system through time using pre-compiled statistics

[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
A question about using the XCI bad command. Assume an email passes through sniffer and does not trigger any rules, I then run it through and determine it is in fact spam. I send a bad command to let sniffer know the IP address had a bad event. Won't the good event that would occur due the spam