[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Stefan Paege

Andy,

Stefan, Pete

Ok, thats one of two!... The LocalMachine makes total sense. the
thing I'm insterested in now is why it didn't pull up your MXGuard
installation.  When I got guidance from Greg @ MXGuard, he indicated
that IMail's SendName was the only key to detecting an older MXGuard
installation ( Short of searching the entire drive. )  And that its
key would be  pointing at the imailtomxguard.exe.

So what is the
HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Global\SendName pointing
at for your system, that it wouldn't detect the MXGuard call do
you have something in between IMail and MXGuard that would mask the
installer's detection. [ this is installer has become my own
private game of Spy-vs-Spy ]


SendName is pointing to d:\ics\imail\mxhook.exe

Regards

--


elektronik-labor CARLS GmbH & Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH & Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte


#
This message is sent to you because you are subscribed to
 the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Andrew Wallo
Stefan, Pete

Ok, thats one of two!... The LocalMachine makes total sense. the thing I'm 
insterested in now is why it didn't pull up your MXGuard installation.  When I 
got guidance from Greg @ MXGuard, he indicated that IMail's SendName was the 
only key to detecting an older MXGuard installation ( Short of searching the 
entire drive. )  And that its key would be  pointing at the imailtomxguard.exe. 
 

So what is the  HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Global\SendName
pointing at for your system, that it wouldn't detect the MXGuard call do 
you have something in between IMail and MXGuard that would mask the installer's 
detection. 
[ this is installer has become my own private game of Spy-vs-Spy ]

Thanks for the intel,
_Andy
  
- Original Message - 
From: "Stefan Paege" <[EMAIL PROTECTED]>
To: "Message Sniffer Community" 
Sent: Tuesday, August 05, 2008 9:58 AM
Subject: [sniffer] Re: Am I ready to upgrade to version 3?


> Pete,
> 
> see my comments inline...
> 
>>> I did install V3 this morning using the current Windows installer.
>> 
>>> Everything seems to work. Can you please check if you get good telemetry
>>> data?
>> 
>> I see good telemetry.
> 
> Now that's good.
> 
>> 
>> Andy and I will discuss the hiccup.
> 
> OK. Might well be related to that old mxGuard version.
> 
>>> - Question: I installed using Windows Remote Desktop and all looked 
>>> good. But on the real screen of that server I now see a command line 
>>> window related to Sniffer. The title contains the WGet command. Some 
>>> action seems to take place (a simulated rolling wheel in the last line).
>>> Must this process run? Why was it started on that other screen?
>> 
>> That's interesting. I don't think that happened in testing. If I
>> understand correctly, we're using XYNTService to run SNFServer.exe. In
>> theory it should run silently. It sounds like you are able to see it's
>> screen.
>> 
>> Your message rate is not high-- but you do usually have a message or
>> two running through. When that happens, the msg/minute number on that
>> line should change.
> 
> Yep, as mentioned before. We are just a small company with around 40 
> mail accounts.
> 
>> If it does then that is the live version of SNFServer so you'll want
>> to leave it running. Or, pheraps if you restart the service from the
>> console it will be invisible as it should be?
> 
> OK, more information...
> 
> Stopping the service from the console makes the window disappear.
> Restarting the service and viola - its back again.
> I checked the service properties and there I found the culprit 
> (translated from German): The service logs in as "Locale System" and 
> "Allow interaction between service and desktop" is checked. If you 
> uncheck that option and then stop/restart the service everything is 
> fine. So it looks like your automatic service setup needs a minor tweak.
> 
> Cheers
> 
> 
> -- 
> 
> 
> elektronik-labor CARLS GmbH & Co. KG
> 
>   Stefan Paege
> 
> Fon: +49 5973 9497-23
> Fax: +49 5973 9497-19
> 
> 
> 
> elektronik-labor CARLS GmbH & Co. KG
> Kommanditgesellschaft:
> Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310
> 
> Persönlich haftende Gesellschafterin:
> elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
> Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175
> 
> Geschäftsführer:
> Irmgard Carls, Joachim Schulte
> 
> 
> #
> This message is sent to you because you are subscribed to
>  the mailing list .
> To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
> Send administrative queries to  <[EMAIL PROTECTED]>
>

[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Pete McNeil
Hello Stefan,

Tuesday, August 5, 2008, 9:58:29 AM, you wrote:



> OK, more information...

> Stopping the service from the console makes the window disappear.
> Restarting the service and viola - its back again.
> I checked the service properties and there I found the culprit 
> (translated from German): The service logs in as "Locale System" and 
> "Allow interaction between service and desktop" is checked. If you 
> uncheck that option and then stop/restart the service everything is 
> fine. So it looks like your automatic service setup needs a minor tweak.

Excellent Thanks!

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Stefan Paege

Pete,

see my comments inline...


I did install V3 this morning using the current Windows installer.



Everything seems to work. Can you please check if you get good telemetry
data?


I see good telemetry.


Now that's good.



Andy and I will discuss the hiccup.


OK. Might well be related to that old mxGuard version.

- Question: I installed using Windows Remote Desktop and all looked 
good. But on the real screen of that server I now see a command line 
window related to Sniffer. The title contains the WGet command. Some 
action seems to take place (a simulated rolling wheel in the last line).

Must this process run? Why was it started on that other screen?


That's interesting. I don't think that happened in testing. If I
understand correctly, we're using XYNTService to run SNFServer.exe. In
theory it should run silently. It sounds like you are able to see it's
screen.

Your message rate is not high-- but you do usually have a message or
two running through. When that happens, the msg/minute number on that
line should change.


Yep, as mentioned before. We are just a small company with around 40 
mail accounts.



If it does then that is the live version of SNFServer so you'll want
to leave it running. Or, pheraps if you restart the service from the
console it will be invisible as it should be?


OK, more information...

Stopping the service from the console makes the window disappear.
Restarting the service and viola - its back again.
I checked the service properties and there I found the culprit 
(translated from German): The service logs in as "Locale System" and 
"Allow interaction between service and desktop" is checked. If you 
uncheck that option and then stop/restart the service everything is 
fine. So it looks like your automatic service setup needs a minor tweak.


Cheers


--


elektronik-labor CARLS GmbH & Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH & Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte


#
This message is sent to you because you are subscribed to
 the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Pete McNeil
Hello Stefan,

Tuesday, August 5, 2008, 6:35:14 AM, you wrote:

> Andy, Pete,

> I did install V3 this morning using the current Windows installer.

> Everything seems to work. Can you please check if you get good telemetry
> data?

I see good telemetry.

Andy and I will discuss the hiccup.



> - Question: I installed using Windows Remote Desktop and all looked 
> good. But on the real screen of that server I now see a command line 
> window related to Sniffer. The title contains the WGet command. Some 
> action seems to take place (a simulated rolling wheel in the last line).
> Must this process run? Why was it started on that other screen?

That's interesting. I don't think that happened in testing. If I
understand correctly, we're using XYNTService to run SNFServer.exe. In
theory it should run silently. It sounds like you are able to see it's
screen.

Your message rate is not high-- but you do usually have a message or
two running through. When that happens, the msg/minute number on that
line should change.

If it does then that is the live version of SNFServer so you'll want
to leave it running. Or, pheraps if you restart the service from the
console it will be invisible as it should be?

I'll let Andy work on that with you to understand it and come up with
a working solution.

Thanks for the detail!

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



[sniffer] Out of Office

2008-08-05 Thread rick
I'm currently out of the office until August 11, if you require immediate 
assistance please email Kevin Mahoney at [EMAIL PROTECTED] or call us at 
360.527.9111 

Thanks!





#
This message is sent to you because you are subscribed to
  the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



[sniffer] Re: Am I ready to upgrade to version 3?

2008-08-05 Thread Stefan Paege

Andy, Pete,

I did install V3 this morning using the current Windows installer.

Everything seems to work. Can you please check if you get good telemetry 
data?


What I did:
- Manually uninstall persistent Sniffer 2.3 service which was using 
XYNTService


- Save everything important (Of course)

- Started installer

- Hiccup: It seems the installer did not see my mxGuard 1.72 which is 
installed in D:\ICS\IMail\mxGuard. So I went with a default install 
which then installed to C:\MessageSniffer\SNF without asking for a 
directory. Hm, seems that is what I get with a default install...


- Rule base loaded fine and from what I see Sniffer works fine. I have 
related entries in my mxGuard log files.


- Question: I installed using Windows Remote Desktop and all looked 
good. But on the real screen of that server I now see a command line 
window related to Sniffer. The title contains the WGet command. Some 
action seems to take place (a simulated rolling wheel in the last line). 
Must this process run? Why was it started on that other screen?



--


elektronik-labor CARLS GmbH & Co. KG

  Stefan Paege

Fon: +49 5973 9497-23
Fax: +49 5973 9497-19



elektronik-labor CARLS GmbH & Co. KG
Kommanditgesellschaft:
Sitz Neuenkirchen, Registergericht Steinfurt HRA 3310

Persönlich haftende Gesellschafterin:
elektronik-labor CARLS, Beteiligungsgesellschaft mbH,
Sitz Neuenkirchen, Registergericht Steinfurt HRB 4175

Geschäftsführer:
Irmgard Carls, Joachim Schulte


#
This message is sent to you because you are subscribed to
 the mailing list .
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>