Pete,
       If you don't mind, does WeightGate add any noticeable CPU cycles
to run on top of running Sniffer?  Thanks for the aid.

Keith Johnson

-----Original Message-----
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf Of Pete McNeil
Sent: Wednesday, November 29, 2006 4:57 PM
To: Message Sniffer Community
Subject: [sniffer] Re: Configuring Sniffer in declude....

Hello Chuck,

If I might jump in here -- you are basically correct but you'll have to
rename ShowMe.exe to the original weightgate name. When it is named
ShowMe.exe it only records the command line parameters in a log file as
a debugging aid.

Second, with that done this should work fine as long as each command
line is identical in Declude.

Third, I noticed that your group IDs are out of date (based on the names
you've used) and most likely you will want to revisit your weights also.

A reference to the current group IDs (result codes) can be found here:

http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetai
ls.ResultCodes

Hope this helps,

_M

Wednesday, November 29, 2006, 3:48:21 PM, you wrote:

> Darrell:

> If I want to use Weightgate I assume that I put it in for each 
> instance of sniffer. Such as -

> SNF external 063 "c:\tool\ShowMe.exe -50 %WEIGHT% 30 
> c:\SNF\sniffer.exe authenticationxx" 10 0


> Chuck Schick
> Warp 8, Inc.
> (303)-421-5140
> www.warp8.com



> -----Original Message-----
> From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On 
> Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Wednesday, November 29, 2006 12:33 PM
> To: Message Sniffer Community
> Subject: [sniffer] Re: Configuring Sniffer in declude....


> Chuck,

> Declude will only call Sniffer one time as long as the path and 
> executable are identical which they are.

> Darrell

> ----------------------------------------------------------------------
> -- Check out http://www.invariantsystems.com for utilities for Declude

> And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
> integration, MRTG

> Integration, and Log Parsers.

> ----- Original Message -----
> From: "Chuck Schick" <[EMAIL PROTECTED]>
> To: "Message Sniffer Community" <sniffer@sortmonster.com>
> Sent: Wednesday, November 29, 2006 2:16 PM
> Subject: [sniffer] Configuring Sniffer in declude....


> Several years ago when we first started using message sniffer I set it
up
> for in the following manner in my global.cfg file.


> SNIFFER-GENERAL        external    063
> "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode"     7
> SNIFFER-EXPERIMENTAL    external    062
> "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode"     12
0
> SNIFFER-OBFUSCATION    external    061
> "F:\IMail\Declude\sniffer2r32\licensecode.exe activationcode"    11

> So one and so forth.

> With the increase in spam and CPU load is there any advantage load
wise to
> just call sniffer once using nonzero instead of the return code.  It
seems
> like someone told me that sniffer was only called once and not
seperately
> for each return code.

> Could someone confirm that.

> Chuck Schick
> Warp 8, Inc.
> (303)-421-5140
> www.warp8.com



> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <sniffer@sortmonster.com>.
> To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
> To switch to the DIGEST mode, E-mail to
> <[EMAIL PROTECTED]> To
> switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send
> administrative queries to  <[EMAIL PROTECTED]>




> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <sniffer@sortmonster.com>.
> To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
> To switch to the DIGEST mode, E-mail to
> <[EMAIL PROTECTED]> To
> switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send
> administrative queries to  <[EMAIL PROTECTED]>




> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <sniffer@sortmonster.com>.
> To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
> To switch to the DIGEST mode, E-mail to
<[EMAIL PROTECTED]>
> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
> Send administrative queries to  <[EMAIL PROTECTED]>



-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to