[sniffer] gbudb source new

[John Tolmachoff]

Using Message Sniffer as part of Declude on a SmarterMail install, I want to 
add weight to a source new when gbudb indicates such. What is the best way to 
do that?

John T
eServices For You


#
This message is sent to you because you are subscribed to
  the mailing list .
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: 
To switch to the DIGEST mode, E-mail to 
To switch to the INDEX mode, E-mail to 
Send administrative queries to  

[sniffer] GBUdb Tool

[Pete McNeil]

Hello Sniffer Folks,

We have been playing with a new utility that some of you may enjoy.

http://www.armresearch.com/message-sniffer/download/GBUDBTool-V0.1.zip

GBUDB Tool allows you to create a list of IP addresses from your GBUdb 
snapshots (.gbx files). You can select IPs that are blacker or 
whiter than a provided probability figure and confidence figure. It 
outputs one IP per line, optionally with details about the statistics 
for the IP. This can be useful for feeding-forward blacklists to block 
at your firewall or for other research purposes.


Run GBUDBTool without any parameters and it will tell you about it's 
command line options.


Please let us know if there is more we can do.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller


#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com

[sniffer] GBUdb

[Richard Stupek]

Does the snf XML command interface for GBUdb work?  I was considering
pumping in bad IPs as I find them into the GBUdb and also short-circuiting
spam processing by calling the GBUdb to determine the status of an IP to
reduce workload.  Is this something that sounds like a workable idea?

[sniffer] GBUdb

[Richard Stupek]

Is the GBUdb currently sharing information as described in the
documentation?  Do the GBUdb XCI commands detailed within snf_xci.xml work
through the tcp interface?

[sniffer] GBUdb Memory Requirements

[Pete McNeil]

Hello Sniffer Folks,

In light of a recent discussion here about SNF memory usage I thought
I would post that I've completed the documentation for the
size-trigger mechanism in GBUdb. This feature allows you to limit
the amount of RAM that GBUdb will use by triggering condensation at a
specific size limit.

Here is a link:

http://www.armresearch.com/support/articles/software/snfServer/config/node/gbudb/database/condense/size-trigger.jsp

Best,

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] GBUdb dump

[Michael Jaworski]

Pete,

How soon should we expect to see a new gbx file after a dump?

Mike



If you do decide to dump your GBUdb then follow this procedure:
Stop SNFServer
Delete the .gbx file in the SNF working directory.
Restart SNFServer
That procedure will cause SNF to build a new GBUdb file from scratch
based on what it is learning from that point on.






#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]