Pete, If you don't mind, does WeightGate add any noticeable CPU cycles to run on top of running Sniffer? Thanks for the aid.
Keith Johnson -----Original Message----- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, November 29, 2006 4:57 PM To: Message Sniffer Community Subject: [sniffer] Re: Configuring Sniffer in declude.... Hello Chuck, If I might jump in here -- you are basically correct but you'll have to rename ShowMe.exe to the original weightgate name. When it is named ShowMe.exe it only records the command line parameters in a log file as a debugging aid. Second, with that done this should work fine as long as each command line is identical in Declude. Third, I noticed that your group IDs are out of date (based on the names you've used) and most likely you will want to revisit your weights also. A reference to the current group IDs (result codes) can be found here: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetai ls.ResultCodes Hope this helps, _M Wednesday, November 29, 2006, 3:48:21 PM, you wrote: > Darrell: > If I want to use Weightgate I assume that I put it in for each > instance of sniffer. Such as - > SNF external 063 "c:\tool\ShowMe.exe -50 %WEIGHT% 30 > c:\SNF\sniffer.exe authenticationxx" 10 0 > Chuck Schick > Warp 8, Inc. > (303)-421-5140 > www.warp8.com > -----Original Message----- > From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On > Behalf Of Darrell ([EMAIL PROTECTED]) > Sent: Wednesday, November 29, 2006 12:33 PM > To: Message Sniffer Community > Subject: [sniffer] Re: Configuring Sniffer in declude.... > Chuck, > Declude will only call Sniffer one time as long as the path and > executable are identical which they are. > Darrell > ---------------------------------------------------------------------- > -- Check out http://www.invariantsystems.com for utilities for Declude > And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI > integration, MRTG > Integration, and Log Parsers. > ----- Original Message ----- > From: "Chuck Schick" <[EMAIL PROTECTED]> > To: "Message Sniffer Community" <sniffer@sortmonster.com> > Sent: Wednesday, November 29, 2006 2:16 PM > Subject: [sniffer] Configuring Sniffer in declude.... > Several years ago when we first started using message sniffer I set it up > for in the following manner in my global.cfg file. > SNIFFER-GENERAL external 063 > "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode" 7 > SNIFFER-EXPERIMENTAL external 062 > "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode" 12 0 > SNIFFER-OBFUSCATION external 061 > "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode" 11 > So one and so forth. > With the increase in spam and CPU load is there any advantage load wise to > just call sniffer once using nonzero instead of the return code. It seems > like someone told me that sniffer was only called once and not seperately > for each return code. > Could someone confirm that. > Chuck Schick > Warp 8, Inc. > (303)-421-5140 > www.warp8.com > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> To > switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send > administrative queries to <[EMAIL PROTECTED]> > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> To > switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send > administrative queries to <[EMAIL PROTECTED]> > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]> ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>