Re: [sniffer] Downloads are slow...
Quick question if when you have a sucessful download if abcdef.new is renamed than what is wget comparing on the next run of the script? Darrell Jim Matuska writes: So far it seems to be working, at least it doesn't seem to be downloading the rulebase yet, I'll have to see if it does later when there is an updated rulebase. My script uses a copy at the end rather than a move. It's listed below for reference. Do you see any issues? wget -N http://www.sortmonster.net/Sniffer/Updates/fp0o4jye.snf -O abcdefg.new --http-user=* --http-passwd=* if exist abcdefg.new goto Replace goto Done :Replace rename abcdefg.new abcdefg.tst snf2check.exe abcdefg.tst abcdefg if errorlevel 1 goto Done echo New File Tested GOOD! if exist abcdefg.old del abcdefg.old rename abcdefg.snf abcdefg.old rename abcdefg.tst abcdefg.snf copy /V /Y abcdefg.snf C:\sniffer\abcdefg.snf :Done if exist abcdefg.tst del abcdefg.tst Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Jim Matuska sniffer@SortMonster.com Sent: Tuesday, December 28, 2004 11:12 AM Subject: Re[2]: [sniffer] Downloads are slow... On Tuesday, December 28, 2004, 12:49:21 PM, Jim wrote: JM I agree that something needs to be done about the update scripts that are JM inadvertently downloading the full rulebase all the time. I didn't even JM know it but we were doing this until I went through our update script again JM this morning and found it didn't have the -N option in Wget, so we were Watch out - you may still have not fixed it. One of the tricks with the -N option is that the file downloaded previously must still be in it's place for the comparison. If it has been moved then the -N will not matter. This make things a little bit more complex since you can't download a rulebase file on top of the one that is running. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: Re[2]: [sniffer] Update! Version 2-3.1i2 is now avaliable, Also MDaemon Plugin v0.53b is now available!
I went to the site earlier today and it would not load at all ~11am est, but its loading fine now. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Jerry Freund [EMAIL PROTECTED] Sent: Thursday, November 18, 2004 12:36 PM Subject: Re[2]: [sniffer] Update! Version 2-3.1i2 is now avaliable, Also MDaemon Plugin v0.53b is now available! On Thursday, November 18, 2004, 10:56:55 AM, Jerry wrote: JF www.sortmonster.com is very very slow, I'm not seeing any issues at the moment. I will check into it. Thanks! This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Version 2-3.1 Official Release
Hi, I have a support contract. Can you tell me what I need to do to upgrade? Is there a step by step somewhere? Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Thursday, October 28, 2004, 1:28:21 AM, you wrote: Hello Sniffer Folks, This is the official release of version 2-3.1 which has the following key features: * Improved stability and performance under heavy loads - especially on over-stressed servers or during uncharacteristically heavy peaks. * Persistent-Server timing enhancements significantly improve Message Sniffer's throughput when running under MDaemon's content filter. * Persistent-Server now produces a real-time status file for performance monitoring. The .stat file serves a dual purpose. First it is used by the Persistent-Server to publish performance specifications to client-peers. This allows a very tight coordination of timing events between client and server instances and reduces coordination overhead significantly. Second it provides for a ready monitor for current server throughput. Here is an example of the current status of our NT test bed as I write this: TicToc: 1098926268 Loop: 472 Poll: 356 Jobs: 158102 Secs: 389065 Msg/Min: 24.3818 Current-Load: 9.80392 Average-Load: 10.0682 * Diagnostics mode now available by modifying the .cfg file. The diagnostics log shows the activity of the peer-server swarm to aid in debugging if needed. * X-Header File option is now available by modifying the .cfg file. This produces a .xhdr file for each message processed. The file contains the x-headers that Message Sniffer would add to the message so that they can be picked up by compatible software and/or scripting (such as on *nix systems) and added to the message or interpreted for greater detail. The headers stubs are configurable and come in two forms that can be used together or separately. One header shows the final result of the scan. The other shows all of the pattern matches that were identified. These headers can be extremely valuable when processing false positives since they travel along with the message - (no more hunting for log file snips). --- The software calling Message Sniffer is responsible for deleting the .xhdr file once it has been used! * This version also includes some minor bug fixes and other minor enhancements. * The distribution file is now available in both .zip and .tar.gz formats from our Try-It page. http://www.sortmonster.com/MessageSniffer/Try-It.html * This version is a drop-in replacement for all 2.x versions. Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[5]: [sniffer] Version 2-3.1 Official Release
Hi, I have no .cfg in the sniffer directory. Would it be located anywhere else? I'm really behind here...can you get me up to speed as to what the .cfg file does and what changes I would want to make to it if I decide to use it? Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Thursday, October 28, 2004, 5:38:20 PM, you wrote: On Thursday, October 28, 2004, 5:20:43 PM, Scott wrote: SF Does the cfg file need to be renamed with your license id also? Yes, sorry I missed that step. The program identifies all of it's important files by the license ID, so yes, the .cfg file must also be named for the license ID as in [licensid.cfg]. Thanks for the catch! _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: Re[2]: [sniffer] 2-3.0i9 looks good to me... How about you?
Does anyone have a little dissertation on how they have this setup. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. - Original Message - From: Landry William [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 26, 2004 7:29 PM Subject: RE: Re[2]: [sniffer] 2-3.0i9 looks good to me... How about you? Aren't you using the compression option to gzip your files before downloading them? This compresses a 14mb file down to about 4mb, which greatly helps in the download times and reduces the bandwidth requirements on the SortMonster end. Also, are you downloading on some fixed schedule or when update notifications are sent out? If downloading by schedule, then use the wget -N flag so that you only actually download the file if it has changed: -N, --timestampingdon't re-retrieve files unless newer than local. Bill -Original Message- From: Nick Justice [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 26, 2004 4:03 PM To: [EMAIL PROTECTED] Subject: RE: Re[2]: [sniffer] 2-3.0i9 looks good to me... How about you? Do we have a timetable for this new release Sorry cant afford time to beta test! I do get alarmed at the huge .snf file at around 14 meg for my personal rule base.. Is this optimised in any way or will continue to grow? _Nick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Tuesday, October 26, 2004 3:29 PM To: Glenn Brooks Subject: Re[2]: [sniffer] 2-3.0i9 looks good to me... How about you? On Tuesday, October 26, 2004, 11:03:45 AM, Glenn wrote: GB can you send the link to this again http://www.sortmonster.com/MessageSniffer/Betas/MessageSniffer2- 3.0i9-Distribution.zip There you go, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html [This E-mail scanned for viruses by Declude Version 1.81 using the F-Prot Antivirus engine] [This E-mail scanned for viruses by Declude Version 1.81 using the F-Prot Antivirus engine] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html -- - This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Keith Ortego Vacation Loop - sorry, fixed now.
Hi, Thank YOU! Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Sunday, September 12, 2004, 8:27:56 PM, you wrote: Hello Sniffer folks, Sorry for not capturing the loop sooner. I've dropped Keith from the list for now to stop the loop. I took a few hours off to watch football. Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
