thank you
 
I put in the detailed tests as below.
 
When the nonsero single test runs I get items trapped with a score of 7 by sniffer however when I turn it off and activate4 the detailed once I do not get a hit at all on the detailed tests even though it is the exact same item.  What did I miss here?
 
 
change from:
#SNIFFER   external nonzero "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 7 0
to:
#SNIFFER-TRAVEL          external 047     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-INSURANCE       external 048     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-AV-PUSH         external 049     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-WAREZ           external 050     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 15          0
#SNIFFER-SPAMWARE        external 051     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 19          0
#SNIFFER-SNAKEOIL        external 052     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 19          0
#SNIFFER-SCAMS           external 053     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 19          0
#SNIFFER-PORN            external 054     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 19          0
#SNIFFER-MALWARE         external 055     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 20          0
#SNIFFER-INKPRINTING     external 056     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-SCHEMES         external 057     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 15          0
#SNIFFER-CREDIT          external 058     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 15          0
#SNIFFER-GAMBLING        external 059     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 15          0
#SNIFFER-EXP-IP          external 063     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-OBFUSCATION     external 062     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 15          0
#SNIFFER-EXP-ABST        external 061     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 10          0
#SNIFFER-GENERAL         external 060     "D:\IMail\Declude\sniffer\xxxxxx.exe xxxxxx persistent" 12          0

Harry Vanderzand
inTown Internet & Computer Services
519-741-1222

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Tuesday, March 07, 2006 5:06 PM
To: [email protected]
Subject: Re: [sniffer] declude tests

Here's a list of the return codes:
----- Original Message -----
Sent: Tuesday, March 07, 2006 3:58 PM
Subject: [sniffer] declude tests

at the moment I run the following test in declude
 
SNIFFER  external nonzero "D:\IMail\Declude\sniffer\xxxxxxxxxx.exe xxxxxxxxxxxx persistent" 13 0
 
I have seen a more detailed setup before and am interested in doing that here also.  Is there a comprehensive list somewhere along with instructions?
 
If I want to apply separate weighting using only some of the detailed test and then a catchall test for the rest, is that possible?
 
thank you
 

Harry Vanderzand
inTown Internet & Computer Services
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

Reply via email to