If they are high and you are also showing other instances w/ message traffic then that would indicate that the persistent instance is not running in the same working directory with the others - that would also cause you to see no real effect.
If you are seeing small numbers (30, 60, 90, and so forth) then it is definitely working and should be making a difference.
I'd like to continue this off-list until I understand your setup better. Please send me a note (support@) with a short segment (a few pages) of your current sniffer log. I would also like to know about your hardware, your current CPU %, and your typical CPU%.
Thanks! _M
At 11:41 AM 3/19/2004, you wrote:
Yes it should be running I see the window with the Polled waited: ----- Original Message ----- From: "Pete McNeil" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 19, 2004 11:33 AM Subject: Re: [sniffer] RunExeSvc for Persistent sniffer.
> That is unusual. You should see a marked drop in the "queue time" in the > sniffer logs and generally a drop in overall system loads. > > If the persistent instance is running then it will be the only instance > that loads the rule-base - and that will happen infrequently. The other > instances will still load, but they will always be clients - so they will > post their job and then go to sleep waiting for it to be completed. > > Are you sure the persistent instance is running? > > _M > > At 10:35 AM 3/19/2004, you wrote: > >When I installed it in a persistence mode I notice very little improvement. > > > >When my server is busy it can load 30 or more instances of the program. > > > >Is it loading from the drive or is it taking off the persistence one. > > > >Fred > >----- Original Message ----- > >From: "Pete McNeil" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Friday, March 19, 2004 9:01 AM > >Subject: Re: [sniffer] RunExeSvc for Persistent sniffer. > > > > > > > Matt, > > > > > > You're right. It's pretty hard to tell from those images. Rush hour will > > > prove out though - I'm sure. When I installed the persistent engine on our > > > NT test bed we were pegged at 100% with a few dips. (It's not always that > > > way, but it was when I tested it because I wanted harsh conditions.) After > > > installing it the cpu graph dropped well below 50%. I'm sure there are > >some > > > exponential load dynamics going on there too - but none the less it was > > > inpressive. > > > > > > I think you will see a more accurate picture in your sniffer logs. The > >left > > > column of timing figures should drop significantly. > > > > > > We shall see - it's a marathon not a sprint :-) > > > > > > _M > > > > > > At 02:13 AM 3/19/2004, you wrote: > > > >Pete, > > > > > > > >Although inconclusive, some screen caps of Task Manager seems to show a > > > >dramatic reduction in many of the peaks with the service turned on. > > > >It's hard to tell the exact impact due to the virus scanners not always > > > >being called, and SKIPIFWEIGHT settings disabling a mountain of custom > > > >Declude filters which both are processor hogs, but the smaller peaks. I > > > >believe the following before and after screen caps are representative of > > > >the impact (I looked for similar E-mail hit frequencies): > > > > > > > > Before > > > > http://www.mailpure.com/no_service.gif > > > > > > > > After (with service) > > > > http://www.mailpure.com/service.gif > > > > > > > >The real test will have to wait for rush hour though. > > > > > > > >Thanks, > > > > > > > >Matt > > > > > > > > > > > > > > > > > > > >Pete McNeil wrote: > > > > > > > >>The service definition takes care of the persistence. Your Declude > >config > > > >>should not be changed. > > > >> > > > >>_M > > > >> > > > >>At 01:05 AM 3/19/2004, you wrote: > > > >> > > > >>>I'm going to give this one a try right now since I have the Resource > >Kit > > > >>>installed already. Just one question...do I need to change the > > > >>>arguments in my Declude config, or will the service definition take > >care > > > >>>of the 'persistence'? > > > >>> > > > >>>Thanks, > > > >>> > > > >>>Matt > > > >>> > > > >>> > > > >>> > > > >>>Bill Boebel wrote: > > > >>> > > > >>>>We've been using svrany for years with several custom applications and > >it > > > >>>>works great. This utility has been around since the NT4 Resource > >Kit... > > > >>>> > > > >>>> http://www.pyeung.com/pages/win2k/userdefinedservice.html > > > >>>> > > > >>>>Bill > > > >>>> > > > >>>> > > > >>>>-----Original Message----- > > > >>>>From: [EMAIL PROTECTED] > > > >>>>[mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil > > > >>>>Sent: Friday, March 19, 2004 12:25 AM > > > >>>>To: [EMAIL PROTECTED] > > > >>>>Subject: [sniffer] RunExeSvc for Persistent sniffer. > > > >>>> > > > >>>> > > > >>>>Hello folks, > > > >>>> > > > >>>>We've been continuing to test the new persistence enabled sniffer > >engine > > > >>>>and some utilities that will allow it to run as a service. > > > >>>> > > > >>>>We found a free utility that seems to be very solid, and very simple. > > > >>>> > > > >>>>http://www.judoscript.com/goodies/RunExeSvc/runexesvc.html > > > >>>> > > > >>>>One of the scripts we used is: > > > >>>> > > > >>>>debug=false > > > >>>>cmdline=c:\Projects\sniffer2-3\TestBed\snfrv2r2.exe xnk05x5vmipeaof7 > > > >>>>persistent > > > >>>>home=c:\Projects\sniffer2-3\TestBed > > > >>>> > > > >>>>(Note: The mismatch between the sniffer2-3 directory and the > >snfrv2r2.exe > > > >>>>is not a type-o. We re-branded the 2-3 to use the snfrv2r2 license in > >our > > > >>>>example - it was easier that than creating a new license. Note also > >that > > > >>>>the cmdline parameter includes the full path to the executable - you > >will > > > >>>>need to do this also. We could not get the service to start on our NT > >test > > > >>>>bed without including the full path to the .exe) > > > >>>> > > > >>>>We've tested this on our XP based Toshiba laptop, and on our NT4 based > > > >>>>IMail test bed. Both seem to setup and work fine. Auto-start works > >fine, so > > > >>>>does logging out and logging in. > > > >>>> > > > >>>>Once you've set up a persistent sniffer instance as a service, go into > >your > > > >>>>services control panel (usually via administrative tools), set the > >service > > > >>>>to start automatically, and start it. > > > >>>> > > > >>>>A window will appear for the program - do not close the window! > > > >>>>Minimize it. > > > >>>> > > > >>>>When you log out sniffer will continue to run in the background. When > >you > > > >>>>log in the window will be visible again - it's harmless. If you close > >it > > > >>>>though you will have ended the sniffer.exe out from under the service. > >This > > > >>>>won't cause you any trouble, but you won't get the benefit of the > > > >>>>persistent server until you stop and start the service again to > >relaunch > > > >>>>the program. > > > >>>> > > > >>>>Using RunExeSvc, the actual service is the RunExeSvc program. That > >program > > > >>>>launches sniffer as a client and stands in as a service stub for your > >OS. > > > >>>>You can use this to run all sorts of things... The developer uses it > >to run > > > >>>>Java based web servers, for example. > > > >>>> > > > >>>>Eventually we will build a win32 service version of Message Sniffer, > >but > > > >>>>for now this is the fastest way we can bring you the features you > >need. > > > >>>> > > > >>>>Please give this a try and let us know how it works for you. > > > >>>> > > > >>>>If you find a different utility that you like better then please let > >us > > > >>>>know. > > > >>>> > > > >>>>Thanks! > > > >>>>_M > > > >>>> > > > >>>> > > > >>>>This E-Mail came from the Message Sniffer mailing list. For > >information and > > > >>>>(un)subscription instructions go to > > > >>>>http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > >>>> > > > >>>> > > > >>>>This E-Mail came from the Message Sniffer mailing list. For > >information > > > >>>>and (un)subscription instructions go to > > > >>>>http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > >>>> > > > >>>> > > > >>> > > > >>>-- > > > >>>===================================================== > > > >>>MailPure custom filters for Declude JunkMail Pro. > > > >>>http://www.mailpure.com/software/ > > > >>>===================================================== > > > >>> > > > >>> > > > >>> > > > >>>This E-Mail came from the Message Sniffer mailing list. For information > > > >>>and (un)subscription instructions go to > > > >>>http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > >> > > > >> > > > >> > > > >>This E-Mail came from the Message Sniffer mailing list. For information > > > >>and (un)subscription instructions go to > > > >>http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > >> > > > > > > > >-- > > > >===================================================== > > > >MailPure custom filters for Declude JunkMail Pro. > > > >http://www.mailpure.com/software/ > > > >===================================================== > > > > > > > > > > > > > > > >This E-Mail came from the Message Sniffer mailing list. For information > > > >and (un)subscription instructions go to > > > >http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > > > > > This E-Mail came from the Message Sniffer mailing list. For information > >and (un)subscription instructions go to > >http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > > > > >This E-Mail came from the Message Sniffer mailing list. For information > >and (un)subscription instructions go to > >http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html >
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
