[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pi-Web - Frank Jensen

Hi Pete,

Just for information, we renamed the msg folder again today, and again

SNFClient.exe.err only state: Could Not Connect!

/etc/init.d/snfilter stop + /etc/init.d/snfilter start helped.





Hello Pi-Web,

Sunday, January 27, 2008, 1:16:08 PM, you wrote:


Sorry, I might not have been clear.
It is on Linux with postfix.


I should have picked that out of the path. ;-)


Yes stop/start of the service did solve the problem.



Before start/stop pstree showed 14*SNFserver.exe



SNFClient.exe.err only state: Could Not Connect!
Last x.200801??.log.xml ends with:
i u='20080125234317' context='--INITIALIZING--' code='0' text='Success'/
Rest seems normal.


That also seems normal for a start-up.


So I have no clue why it stoped.


This is unusual. I've repeatedly had SNFServer run for weeks and
months on various platforms -- almost without exception it only stops
when I tell it to stop (including earlier test versions).

If you come across any new info please let me know.

If there is a bug I want it gone ;-)

Thanks!

_M




--
Mvh. Frank Jensen
[EMAIL PROTECTED]
www.pi.dk



Imponerende, fascinerende og kæmpe
Plakater f.eks. 149 x 149 = 629 kr
Vi kan også lave plakat fra dit digitale foto

www.plakatkunst.dk



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pete McNeil
Hello Pi-Web,

Saturday, February 2, 2008, 6:07:19 PM, you wrote:

 Hi Pete,

 Just for information, we renamed the msg folder again today, and again

 SNFClient.exe.err only state: Could Not Connect!

 /etc/init.d/snfilter stop + /etc/init.d/snfilter start helped.

When SNFClient cannot connect the SNFServer is either not accepting
new connections, or it is down.

If it is down then restarting it helps by starting it again.

If it is not down then restarting helps by abandoning all of the
existing connections -- many of them will re-try and succeed when the
SNFServer is active again.

This stalling effect is seen only when you rename the folder that
contains the message files --

I wonder if there is a quirk of the environment that causes the
SNFServer engine to be hung attempting to open and/or read the files
in the changed directory such that additional scan requests queue up
and are not serviced.

Since SNFServer is not giving any errors (or at least you're not
reporting any so it is likely that it is not) then I can only assume
the program has not seen any errors that it can report.

It is probably not a good idea to rename the folder while there is any
possibility of active scans in progress.

Instead I would suggest that you create a new folder with the correct
name for new scans (perhaps by date) and then abandon the older folder
in place. New scans would be done in the new folder and old or
existing scans would continue in the old folder until they were
complete. By the time you do anything with the old folder it will be
several generations behind and safe.

I do not completely understand your methodology -- but if I'm correct
about it then the above approach should work.

I might also recommend a different approach --

Use a single directory for scans and have them always performed there.
Then - depending upon the scan result move them into the appropriate
directory. This way you could always be assured that the scanner is
finished with a file before it is ever moved. This is an efficient
process on ext3 and most other modern *nix file systems since it only
requires the adjustment of a node and that operation will itself be
journalized first.

Thanks for keeping us posted.

Hope this helps,

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pi-Web - Frank Jensen


Sorry, I might not have been clear.
It is on Linux with postfix.

Yes stop/start of the service did solve the problem.

Before start/stop pstree showed 14*SNFserver.exe

SNFClient.exe.err only state: Could Not Connect!
Last x.200801??.log.xml ends with:
i u='20080125234317' context='--INITIALIZING--' code='0' text='Success'/
Rest seems normal.

So I have no clue why it stoped.




Hello Pi-Web,

Sunday, January 27, 2008, 6:31:15 AM, you wrote:


Hi



Not sure what we have done - but snfilter has stoped working.



The x.200801??.log.xml is not more created.



SNFClient.exe.err says:
/var/spool/snfilter/msg/20080127122626_4614.msg: Could Not Connect!



Messages are put in /var/spool/snfilter/msg/ but not checked.



I cant see what I have done wrong, but guess we did something around
here: Jan 26 00:43 x37l67rv.20080125.log.xml as this is the last log.



These are beeing created:
-rw-r--r--  1 root root   743591 Jan 27 12:29
x37l67rv.status.minute.20080127.log.xml
-rw-r--r--  1 root root 1079 Jan 27 12:30 
x37l67rv.status.second.log.xml


SNFServer has stopped --- if you had it set up as a service you should
be able to restart it and solve the problem. If you were running it in
a dos window -- start up a new dos window with it.

Please look for any errors in your logs that might indicate why the
SNFServer stopped.

_M




--
Mvh. Frank Jensen
[EMAIL PROTECTED]
www.pi.dk



Imponerende, fascinerende og kæmpe
Plakater f.eks. 149 x 149 = 629 kr
Vi kan også lave plakat fra dit digitale foto

www.plakatkunst.dk



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pete McNeil
Hello Pi-Web,

Sunday, January 27, 2008, 1:16:08 PM, you wrote:

 Sorry, I might not have been clear.
 It is on Linux with postfix.

I should have picked that out of the path. ;-)

 Yes stop/start of the service did solve the problem.

 Before start/stop pstree showed 14*SNFserver.exe

 SNFClient.exe.err only state: Could Not Connect!
 Last x.200801??.log.xml ends with:
 i u='20080125234317' context='--INITIALIZING--' code='0' text='Success'/
 Rest seems normal.

That also seems normal for a start-up.

 So I have no clue why it stoped.

This is unusual. I've repeatedly had SNFServer run for weeks and
months on various platforms -- almost without exception it only stops
when I tell it to stop (including earlier test versions).

If you come across any new info please let me know.

If there is a bug I want it gone ;-)

Thanks!

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]