Re: [sniffer] Changes - Heavy lifting is complete...
Pete McNeil wrote: Hello sniffer, Will anyone who is not still alive please raise your hand anyone? All joking aside: We are finished with all of the heavy parts of our move now and as far as I can tell everything important is working as it should. Please let us know how we did. IMHO you did excellent!! It looks like the new facilities have *greatly* increased my download speed. I was sometimes seeing as slow as 10KB/s previously, and usually around 80KB/s. Now I'm seeing about 1.6MB/s Huge increase, and yes that's 1.6 MegaBytes not MegaBits!! Thanks, Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Sniffer Downloads
Good point... I don't know why I didn't think of that... As soon as I get in in the morning, I'm gonna change that... That's also one of the reasons I posted to the list :) I'm always trying to make things harder for myself ;) Thanks, Russ Landry William wrote: Russ, why go through all of the additional steps? I just pointed my program alias directly to my snfupd.cmd file and it works just fine. Bill -Original Message- From: Russ Uhte [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 28, 2004 12:33 PM To: Daniel Ivey Cc: sniffer@SortMonster.com Subject: Re: [sniffer] Sniffer Downloads Daniel Ivey wrote: Russ, My name is Daniel Ivey with GCR Company. I am interested in your use of the program alias for the Sniffer updates. Could you please email me with more information about the program alias, WGET that is used and what type of OS is on your server? We currently use NT4 SP6a. The more details the better, as I am a bit rusty at programming and scripts. Thanks in advance. I'm also copying the list just because someone else my find the info useful. This is running on a windows 2000 server. I won't claim to be a "scripter or programmer" either, and this is going to be the quick and dirty because I'm getting ready to take off for the day :) Download the update script http://www.sortmonster.com/MessageSniffer/Help/UserScripts/david_snifferUpda teMethod.zip this file actually has the code that has to be copied and pasted in a new document... I called the document snfupd.vbs, and change the .snf to "your licsence id.snf", change the line that says Shell.Run to "path to your sniffer directory\snfupd.cmd" you'll also need to comment out the lines of ... with a ' Now download the cmd file which does the actual updating from http://www.sortmonster.com/MessageSniffer/Help/UserScripts/Bill_Landry_snfup d.zip and here are the changes I made: 1. changed LiscenseID to my licsenceid 2. changed AuthCode to my AuthCode 3. changed IMailDir to my IMailDir 4. changed SnifferDir to my SnifferDir 5. changed MailTo to my email address 6. changed FromDom to my domain 7. I removed the -N from the wget command because it will always be new because you're doing it from a trigger. 8. I removed the rem in front of the command that sends out notifications Then create a batch file, I created on in c:\batch\ called snfupd.bat with the following lines, note that you may have to change the drive and path to suit your environment: d: cd d:\Imail\Declude\Sniffer cscript snfupd.vbs %1 Make sure you have the snfupd.vbs and snfupd.cmd, snf2check.exe and the wget.exe files all in the sniffer directory, then in Imail create a new alias, type is program, the command to run is c:\batch\snfupd.bat, and then test it by forwarding a couple of the notifications to that alias address. Once you know it's working, notify [EMAIL PROTECTED] to change your notification address. If you have any questions let me know. I'll be happy to help just as quickly as I can. Thanks, Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Sniffer Downloads
Daniel Ivey wrote: Russ, My name is Daniel Ivey with GCR Company. I am interested in your use of the program alias for the Sniffer updates. Could you please email me with more information about the program alias, WGET that is used and what type of OS is on your server? We currently use NT4 SP6a. The more details the better, as I am a bit rusty at programming and scripts. Thanks in advance. I'm also copying the list just because someone else my find the info useful. This is running on a windows 2000 server. I won't claim to be a "scripter or programmer" either, and this is going to be the quick and dirty because I'm getting ready to take off for the day :) Download the update script http://www.sortmonster.com/MessageSniffer/Help/UserScripts/david_snifferUpdateMethod.zip this file actually has the code that has to be copied and pasted in a new document... I called the document snfupd.vbs, and change the .snf to "your licsence id.snf", change the line that says Shell.Run to "path to your sniffer directory\snfupd.cmd" you'll also need to comment out the lines of ... with a ' Now download the cmd file which does the actual updating from http://www.sortmonster.com/MessageSniffer/Help/UserScripts/Bill_Landry_snfupd.zip and here are the changes I made: 1. changed LiscenseID to my licsenceid 2. changed AuthCode to my AuthCode 3. changed IMailDir to my IMailDir 4. changed SnifferDir to my SnifferDir 5. changed MailTo to my email address 6. changed FromDom to my domain 7. I removed the -N from the wget command because it will always be new because you're doing it from a trigger. 8. I removed the rem in front of the command that sends out notifications Then create a batch file, I created on in c:\batch\ called snfupd.bat with the following lines, note that you may have to change the drive and path to suit your environment: d: cd d:\Imail\Declude\Sniffer cscript snfupd.vbs %1 Make sure you have the snfupd.vbs and snfupd.cmd, snf2check.exe and the wget.exe files all in the sniffer directory, then in Imail create a new alias, type is program, the command to run is c:\batch\snfupd.bat, and then test it by forwarding a couple of the notifications to that alias address. Once you know it's working, notify [EMAIL PROTECTED] to change your notification address. If you have any questions let me know. I'll be happy to help just as quickly as I can. Thanks, Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Downloads are slow...
Brian Gregory wrote: Does anyone have some simple instructions on how to setup to use a program alias? I'm using Bill Landry's script, have not had the time to look in to using a program alias to download upon receipt of notifications. I just setup a program alias about 2 weeks ago using this as the script http://www.sortmonster.com/MessageSniffer/Help/UserScripts/david_snifferUpdateMethod.zip that IMail calls, and this as the actual updater http://www.sortmonster.com/MessageSniffer/Help/UserScripts/Bill_Landry_snfupd.zip I did have to do some customizations, and also I had to have all the files in the sniffer directory, but it wasn't too bad. I'd be glad to help you with any specific questions, either on or off list... -Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Sniffer Updates
Kevin Stanford wrote: Our updates seem to be taking a very long time. I am 85% updated and the ETA shows 07:00. Is it me? I see stuff like this come and go... Our updates are (finally) triggered from the email notifications... Below is a snippet of the last update that shows exactly what speeds we saw, which ran at 10:45 EST this morning... Every once in a while, I will see it slow down to about 8KB/s, but rarely slower than that... Thanks, Russ (This will probably wrap and look real ugly, but the last number is the average download speed for that part of the download...) 0K .. .. .. .. .. 0% 110.38 KB/s 50K .. .. .. .. .. 1% 160.26 KB/s 100K .. .. .. .. .. 2% 71.12 KB/s 150K .. .. .. .. .. 3% 110.13 KB/s 200K .. .. .. .. .. 4% 118.76 KB/s 250K .. .. .. .. .. 5% 145.35 KB/s 300K .. .. .. .. .. 6% 168.35 KB/s 350K .. .. .. .. .. 7% 168.35 KB/s 400K .. .. .. .. .. 8% 168.35 KB/s 450K .. .. .. .. .. 9% 160.26 KB/s 500K .. .. .. .. .. 10% 159.74 KB/s 550K .. .. .. .. .. 11% 188.68 KB/s 600K .. .. .. .. .. 12% 177.30 KB/s 650K .. .. .. .. .. 13% 168.35 KB/s 700K .. .. .. .. .. 14% 177.94 KB/s 750K .. .. .. .. .. 15% 168.35 KB/s 800K .. .. .. .. .. 16% 177.94 KB/s 850K .. .. .. .. .. 17% 168.35 KB/s 900K .. .. .. .. .. 18% 168.35 KB/s 950K .. .. .. .. .. 19% 168.35 KB/s 1000K .. .. .. .. .. 20% 168.92 KB/s 1050K .. .. .. .. .. 21% 159.74 KB/s 1100K .. .. .. .. .. 22% 168.35 KB/s 1150K .. .. .. .. .. 23% 177.94 KB/s 1200K .. .. .. .. .. 24% 177.94 KB/s 1250K .. .. .. .. .. 25% 159.74 KB/s 1300K .. .. .. .. .. 26% 177.94 KB/s 1350K .. .. .. .. .. 27% 168.35 KB/s 1400K .. .. .. .. .. 28% 168.35 KB/s 1450K .. .. .. .. .. 29% 168.35 KB/s 1500K .. .. .. .. .. 30% 168.35 KB/s 1550K .. .. .. .. .. 31% 177.94 KB/s 1600K .. .. .. .. .. 32% 168.35 KB/s 1650K .. .. .. .. .. 33% 168.35 KB/s 1700K .. .. .. .. .. 34% 168.92 KB/s 1750K .. .. .. .. .. 35% 168.35 KB/s 1800K .. .. .. .. .. 36% 159.74 KB/s 1850K .. .. .. .. .. 37% 177.94 KB/s 1900K .. .. .. .. .. 38% 91.41 KB/s 1950K .. .. .. .. .. 39% 86.51 KB/s 2000K .. .. .. .. .. 40% 86.51 KB/s 2050K .. .. .. .. .. 41% 81.97 KB/s 2100K .. .. .. .. .. 42% 97.09 KB/s 2150K .. .. .. .. .. 43% 86.51 KB/s 2200K .. .. .. .. .. 44% 81.97 KB/s 2250K .. .. .. .. .. 45% 61.58 KB/s 2300K .. .. .. .. .. 46% 60.39 KB/s 2350K .. .. .. .. .. 47% 40.00 KB/s 2400K .. .. .. .. .. 48% 159.74 KB/s 2450K .. .. .. .. .. 49% 88.97 KB/s 2500K .. .. .. .. .. 50% 80.00 KB/s 2550K .. .. .. .. .. 51% 88.81 KB/s 2600K .. .. .. .. .. 52% 86.51 KB/s 2650K .. .. .. .. .. 53% 86.51 KB/s 2700K .. .. .. .. .. 54% 86.51 KB/s 2750K .. .. .. .. .. 55% 84.18 KB/s 28
Re: [sniffer] Download server is really slow..
Pete McNeil wrote: On Monday, December 20, 2004, 7:58:57 AM, Alexander wrote: HA> Hello, HA> I'm trying at the moment, Wget says 50-90 K/s (started at 40, went quick up HA> to 90 and now going down to 50K/s) There are times - especially at the top of the hour - where there are quite a few downloads going on at once - and this will slow things down a bit. At 0100 - where this thread started - there were more than 100 connections allocated to a single client. I have adjusted this server's settings to prevent that from happening. We have plans in place to mitigate these issues over the next 6 months. Until then there will be occasional slowdowns, particularly while systems that run scheduled rather than triggered updates continue to congregate at the top of the hour. Avoiding that time period and following the staggered schedule we have suggested will help quite a bit. Even better if updates can be triggered by our update notifications since this allows our system to pace downloads and use the available resources most efficiently. Pete, Since I've moved to an automatic update system, I've seen my downloads speed up dramatically most of the time. On average, I'm seeing about 800kbps, sometimes that number jumps as high as 1.5Mbps, and at other times it is 90kbps, so I'm pretty sure it's just load... Any way, I just thought I'd interject my .02... -Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] New Version 2-3.2 has been officiallyreleased.
System Administrator wrote: on 11/24/04 12:19 PM, Colbeck, Andrew wrote: p.s. More favourite acronyms: RGE (Resume Generating Event) TLA (Three Letter Acronym) PEBKAC (problem exist between keyboard and chair) My personal favorite is the good 'ole ID ten T error... Are we off topic yet... ;-) -Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] test
At 02:49 PM 5/4/2004, Vivek Khera wrote: On May 4, 2004, at 3:42 PM, Pete McNeil wrote: Every rulebase is potentially a different size & composition, plus sizes typically change with each update. I'm glad to hear all the positive reports on this. :-) Forgive me... What is the URL for the zipped version of the file... :( Thanks, Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Spam storm?
At 10:34 AM 3/26/2004, Pete McNeil wrote: At 09:31 AM 3/26/2004, you wrote: On Mar 26, 2004, at 7:42 AM, Russ Uhte (Lists) wrote: downloads are coming from. However, I too have noticed really slow download speeds. I use wget, and I've never had a single problem, other than occasionally it is extremely slow sometimes. Once it does actually download, it's always a "clean" download. I haven't seen a single instance of the error_bad_matrix. I haven't been monitoring my d/l speeds, but the last few weeks or so I get about 3 to 4 check failures from snf2check. My pipe is a quite underutilized 100Mbit at a uunet co-lo (Pete, right near ya in Ashburn -- you should think about co-lo there :-) ) I don't recall getting those errors before the big network switch at microneil earlier this year. I've not seen a single bad matrix. But then I'm not on windows... so perhaps it is related to windows. It's starting to come together now. Wget on windows + errors on the Sprint line since the move = corrupted downloads for folks who end up routing through sprint along the way? I think that's probably it. Me sending you a traceroute output really wouldn't do a lot of good because I use BGP, and have a local weight set such that all outbound traffic will leave via ATT, but feel free to traceroute to me for testing. You should be able to hit 12.161.104.2 if you would like. I also just did a manual download, and my average speed during the entire transfer was 1.3 Mbps, with a max at 1.4 Mbps. I can't recreance the difference, because I didn't monitor it all that well previously, I just new it was taking a lot longer. I hope this helps a little, and if there is anything else we can do for ya, let us know. You guys always do so much for us, it's about time we can do something for you!! Thanks, Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Spam storm?
At 03:31 AM 3/26/2004, Pete McNeil wrote: Thanks for the insight. You're also sharing a maxed out T1 so I'm not sure how to interpret that data - I suppose that 10K isn't awful if 10 other systems are hitting it at once. I have to stop my testing now. I've got Sprint queued up to do some intrusive testing so I have to bring the line back up. Hopefully we'll get to the bottom of things though. Pete, Just wanted to interject a couple observations. I'm connected to the Internet through a 15Mb frac ds/3 from ATT and a T1 from Sprint. I of course of no way of telling which pipe our automated downloads are coming from. However, I too have noticed really slow download speeds. I use wget, and I've never had a single problem, other than occasionally it is extremely slow sometimes. Once it does actually download, it's always a "clean" download. I haven't seen a single instance of the error_bad_matrix. I also wanted to pass on a tool that I've heard a lot about. It's called Matt's Traceroute. I've never actually used it myself, but I'm told it's excellent for detecting flaky T circuits and such. Here is the link to the program. http://www.bitwizard.nl/mtr/ I don't no if it will help with what you're doing or not, but thought I'd suggest it! Hope one of these days everything gets back to normal, and you can finally get some sleep!! -Russ --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
