Re[2]: [sniffer] Running sniffer as a service

2006-02-24 Thread Pete McNeil
On Friday, February 24, 2006, 7:13:47 AM, Jeff wrote: JP Do I need to modify anything in my Declude configuration file where it calls JP the SNIFFER test in order for this to function ?? No. You set up a persistent instance outside of Declude and the other SNF instances adapt automatically. _M

[sniffer] False positive processing

2006-02-24 Thread Darin Cox
Pete, Thanks for the quicker turnaround in the last few days for false positive processing. We're seeing abouthalf day now. Much appreciated! Darin.

RE: Re[4]: [sniffer] When to go persistent

2006-02-24 Thread Goran Jovanovic
Hi, I just got my service up and running using Matt's post http://www.mail-archive.com/sniffer@sortmonster.com/msg00169.html It was simple especially since I already the resource kit installed. Now I know that this I supposed to work to get the persistent instance to load the new rulebase

RE: Re[4]: [sniffer] When to go persistent

2006-02-24 Thread Colbeck, Andrew
Goran, When you issue a reload you can tell that the new rulebase is being used because the *.svr file's date and time will change to the current time. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday,

Re[6]: [sniffer] When to go persistent

2006-02-24 Thread Pete McNeil
On Friday, February 24, 2006, 10:31:25 AM, Goran wrote: GJ Hi, GJ I just got my service up and running using Matt's post GJ http://www.mail-archive.com/sniffer@sortmonster.com/msg00169.html GJ It was simple especially since I already the resource kit installed. GJ Now I know that this I

RE: [sniffer] IP Blacklist rules

2006-02-24 Thread Andy Schmidt
Hi, Thanks. I will treat result code 63 with a combo filter so that any parallel hit with a regular RBL won't end up counting twice. That should take care of it. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL