[sniffer] Re: Beta

Pete, I am attempting to get caught on the latest beta and just have a few questions. I noticed Sniffer is now called a different way in the Declude config files, is that correct? On the last release (running persistent), we have numerous entries in the declude.cfg file labeled: SNIFFER-TRAVEL

[sniffer] Re: Error Messages since WeightGate

Integration, and Log Parsers. Keith Johnson wrote: Darrell, You are right, a reboot will take care of it for a season, then it comes back out of the blue. Very strange indeed. Keith _ From: Message Sniffer Community on behalf of Darrell ([EMAIL PROTECTED]) Sent: Sat 6/9/2007 9:36 PM

[sniffer] Re: Error Messages since WeightGate

?scid=kb;EN-US;q142676 and changing the registry entry to use a value of 256 or 2048 (NOTE: Microsoft recommends 512 in that article; if you use 512, make sure not to have IMail's MaxQueProc registry entry set to more than 30). Matt Keith Johnson wrote: Darrell, Did you alter your heap size

[sniffer] Re: Configuring Sniffer in declude....

Pete, If you don't mind, does WeightGate add any noticeable CPU cycles to run on top of running Sniffer? Thanks for the aid. Keith Johnson -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, November 29, 2006 4:57

RE: [sniffer] Forwarding Spam

Pete, Perfect. I will work on setting up this account for you. What email address can I use to send over the POP info? Keith From: [EMAIL PROTECTED] on behalf of Pete McNeil Sent: Tue 9/6/2005 11:00 PM To: Keith Johnson Subject: Re: [sniffer

[sniffer] Forwarding Spam

Pete, In the past, we have been processing missed spam ourselves by asking our end customers, those who can, forward us the header and we will adjust our filters. However, I notice on the sortmonster.com website that one can forward to an address missed spam and Sniffer can make

RE: [sniffer] false positives which catagories?

Scott, HS = Test says ham, final result was spam. This is an inaccurate ham result. 'False negative' How are you auto determining that an email that was ham was really spam? Are you keying in this info into your stats based on your viewing of the email or by user complaint? Obviously, if

RE: Re[2]: [sniffer] Persistent Sniffer

is 1 hop away (on switch backbone). I had to drop back to the non-persistent mode, thus the .stat file disappeared. I will run it again tonight and copy the file away and post it here tonight. Thanks again for the time and aid. Keith Johnson -Original Message- From: [EMAIL

RE: Re[4]: [sniffer] Persistent Sniffer

of results I get and post them here. It could be as you say, I am on the far side :) Thanks again, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, April 01, 2005 2:16 PM To: Keith Johnson Subject: Re[4]: [sniffer

RE: Re[8]: [sniffer] Persistent Sniffer

. Thanks again for taking the time to help out. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Pete McNeil Sent: Fri 4/1/2005 10:18 PM To: Keith Johnson Cc: Subject: Re[8]: [sniffer] Persistent Sniffer

[sniffer] Persistent Sniffer

I noticed in the archives about a .cfg file one can configure for use when running Persistent sniffer. How do you download it or obtain it? Thanks for the aid. Keith This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

[sniffer] Determine Version

Is there a easy way to determine the Sniffer version you are running (i.e. command line or the like)? Thanks for the aid. Keith winmail.dat

RE: [sniffer] New Version 2-3.2 has been officially released.

We run Sniffer in the normal way (non-persistent), is there an extra file that we must copy into the Sniffer directory in order for this version to work properly? I believe I read somewhere of a config file that contains needed settings. Thanks again, Keith -Original Message- From:

RE: Re[2]: [sniffer] New Version 2-3.2 has been officially released.

Pete, We plan to, working on the SrvAny service in beta right now. Thanks again for the aid and time. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Tuesday, November 23, 2004 5:07 PM To: Keith Johnson Subject: Re[2

RE: [sniffer] Your Sniffer Setup

Thanks Andy and Bill, will give this a go on our beta server. Thanks again for the time and expertise Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Monday, November 01, 2004 12:11 PM To: [EMAIL PROTECTED] Subject: RE:

RE: Re[4]: [sniffer] Version 2-3.0i8 published.

If we don't run the Mdaemon on our systems and just use the new download, will we also see a speed increase on processing. Thanks for the time. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, October 20, 2004 1:50 PM

RE: [sniffer] Version 2-3.0i2 release.

Pete, I take it this can be run without the persistent mode? Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Pete McNeil Sent: Mon 9/13/2004 9:15 PM To: [EMAIL PROTECTED] Cc: Subject: [sniffer]

[sniffer] FIN File

I found a .fin file in my sniffer directory and didn't know if anyone knew what it was and how it is produced. It is dated several days ago. Thanks for the aid. Keith This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

[sniffer] Rules Question

I am using Declude and have indiv. Sniffer Tests and lets say the following gets tripped in an email SNIFFER-WHTLIST result code 000 SNIFFER-PORNresult code 054 Which would take precedence over the other, as far as which would be the final code passed to Declude? Thanks, Keith This

RE: [sniffer] Rules Question

Thanks for the aid. One last question, you mentioned: In a case where a white rule is present and a black rule is present the white rule will always win So if the White Rule fired 000, it would override a Porn Rule of 54? If so, how are these White Rules entered? Thanks, Keith