[sniffer] GBUdb Tool

2012-11-23 Thread Pete McNeil

Hello Sniffer Folks,

We have been playing with a new utility that some of you may enjoy.

http://www.armresearch.com/message-sniffer/download/GBUDBTool-V0.1.zip

GBUDB Tool allows you to create a list of IP addresses from your GBUdb 
snapshots (.gbx files). You can select IPs that are blacker or 
whiter than a provided probability figure and confidence figure. It 
outputs one IP per line, optionally with details about the statistics 
for the IP. This can be useful for feeding-forward blacklists to block 
at your firewall or for other research purposes.


Run GBUDBTool without any parameters and it will tell you about it's 
command line options.


Please let us know if there is more we can do.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller


#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



[sniffer] SNFServer Interim Release E3.0.23

2012-11-23 Thread Pete McNeil

Hello Sniffer Folks,

Here is a link to an interim release of SNFServer for Win* boxen:
http://www.armresearch.com/message-sniffer/download/SNFServerV3.0.2-E3.0.23.zip

This interim release fixes a bug in the previous E3.0.19 interim where 
large messages might be corrupted during message header injection. This 
new version has been tested thoroughly against large messages.


If you don't recall, the E3.0.19 interim and above allows for up to 8 
messages to be scanned simultaneously when sufficient CPU cores are 
available.


If you are running *nix and would like to try the interim version then 
feel free to pull down the updated SNFMulti source code from the SVN server:


https://svn.microneil.com/websvn/filedetails.php?repname=SNFMultipath=%2Ftrunk%2FSNFMulti.cpp

It is not necessary to upgrade your SNF installation if you are not 
running one of the interim releases. If you are running a production 
release then you're good to go as you are.


Please let us know if there is more we can do.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller


#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com