Hello Shawn,
Friday, February 29, 2008, 6:25:45 PM, you wrote:
|
> |
Hello, I am using the latest beta of Message Sniffer. Can you please tell me what all of the #''s are on the status screen when SNFServer is running? Obviously M/min is messages per minute, but what do the following mean? SP: |
Spam Percentage
|
> |
LR: |
Latest matching rule ID (fine grained indicator of rulebase freshness.
|
> |
[0/13 / 0 ] (the slash spins clockwise here) |
Messages last second / polling events last second (checking for messages to scan)
The last number indicates the number of scan jobs queued up and not yet completed.
|
> |
W: |
White events / min - Messages per minute that match spam rules but GBUdb forces through.
|
> |
C: |
Caution events / min - Messages that did not match pattern rules but were blocked by GBUdb with the caution result based on IP statistics. The IP source is in the Caution range.
|
> |
B: |
Black events / min - Messages that did not match pattern rules but were blocked by GBUdb with the black result based on IP statistics. The IP source is in the Black range.
|
> |
T: |
Truncate events / min - Messages where the GBUdb halted the scan as soon as the source IP was identified because the IP has such bad statistics that it's not worth the extra CPU cycles to scan the rest of the message. The IP is bad enough statistically that we can be sure the message is spam based just on it's source.
|
> |
S: |
Samples / min - Virtual spamtrap activity. Messages that came from known spam sources but did not match pattern rules are sampled at random and sent to our virtual spam trap facility. (This feature can be turned off if desired).
_M
--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.
############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
