[sniffer] declude tests

2006-03-07 Thread Harry Vanderzand



at the moment I run 
the following test in declude

SNIFFERexternal nonzero 
"D:\IMail\Declude\sniffer\xx.exe persistent"13 
0

I have seen a more 
detailed setup before and am interested in doing that here also. Is there 
a comprehensive list somewhere along with instructions?

If I want to apply 
separate weighting using only some of the detailed test and then a catchall test 
for the rest, is that possible?

thank 
you

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222



RE: [sniffer] declude tests

2006-03-07 Thread Harry Vanderzand



thank you

I put in the detailed tests as 
below.

When the nonsero single test runs I get items trapped 
with a score of 7 by sniffer however when I turn it off and activate4 the 
detailed once I do not get a hit at all on the detailed tests even though it is 
the exact same item. What did I miss here?


change from:
#SNIFFER external nonzero 
"D:\IMail\Declude\sniffer\xx.exe xx persistent" 7 0to:
#SNIFFER-TRAVEL 
external 047 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-INSURANCE external 
048 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-AV-PUSH external 
049 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-WAREZ 
external 050 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 15 
0#SNIFFER-SPAMWARE external 
051 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 19 
0#SNIFFER-SNAKEOIL external 
052 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 19 
0#SNIFFER-SCAMS 
external 053 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 19 
0#SNIFFER-PORN 
external 054 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 19 
0#SNIFFER-MALWARE external 
055 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 20 
0#SNIFFER-INKPRINTING external 
056 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-SCHEMES external 
057 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 15 
0#SNIFFER-CREDIT 
external 058 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 15 
0#SNIFFER-GAMBLING external 
059 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 15 
0#SNIFFER-EXP-IP 
external 063 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-OBFUSCATION external 
062 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 15 
0#SNIFFER-EXP-ABST external 
061 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 10 
0#SNIFFER-GENERAL external 
060 "D:\IMail\Declude\sniffer\xx.exe xx 
persistent" 12 
0
Harry Vanderzand inTown Internet  Computer Services 519-741-1222


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Scott 
  FisherSent: Tuesday, March 07, 2006 5:06 PMTo: 
  sniffer@SortMonster.comSubject: Re: [sniffer] declude 
  tests
  
  Here's a list of the return codes:
  http://www.sortmonster.com/MessageSniffer/Help/ResultCodesHelp.html
  
----- Original Message ----- 
From: 
Harry 
Vanderzand 
To: sniffer@SortMonster.com 
Cc: Pete McNeil 
Sent: Tuesday, March 07, 2006 3:58 
PM
Subject: [sniffer] declude tests

at the moment I 
run the following test in declude

SNIFFERexternal nonzero 
"D:\IMail\Declude\sniffer\xx.exe 
persistent"13 0

I have seen a 
more detailed setup before and am interested in doing that here also. 
Is there a comprehensive list somewhere along with 
instructions?

If I want to 
apply separate weighting using only some of the detailed test and then a 
catchall test for the rest, is that possible?

thank 
you

Harry Vanderzand inTown Internet  Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222



Re: [sniffer] declude tests

2006-03-07 Thread Pete McNeil
On Tuesday, March 7, 2006, 4:58:35 PM, Harry wrote:

HV   
HV  
HV at the moment I run  the following test in declude
HV
HV SNIFFER  external nonzero 
HV D:\IMail\Declude\sniffer\xx.exe  persistent 13  0
HV

THIS IS WRONG!

You should not have the persistent command line option in your Declude
configuration. You should only run your persistent instance outside of
Declude. Run only peer instances (without the persistent keyword) from
inside Declude.

HV I have seen a more  detailed setup before and am interested in
HV doing that here also.  Is there  a comprehensive list somewhere along with 
instructions?
HV
HV If I want to apply  separate weighting using only some of the
HV detailed test and then a catchall test  for the rest, is that possible?

Sure. The easiest way I know of is to leave your existing line in
place and then add an additional test (using SNF) that adjusts the
specific result code you want to tune.

For example, if you wanted to back down group 63 you might add a line:

SNF63 external 63 D:\IMail\Declude\sniffer\xx.exe  -3 0

Declude will recognize that the command line is identical and will
simply reuse the result with the new test name SNF63 instead of
running SNF again.

Hope this helps,

_M



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: Re[2]: [sniffer] declude tests

2006-03-07 Thread Harry Vanderzand
Thanks so much Pete

I got it all sorted out

Phew

It's humming along just fine with each individual test.

I look forward to the day that there are more gui's in products like this.

That way I can choose what I want done but the software does the configuring
for me and thus eliminates syntax errors and other misunderstandings.

Both declude and sniffer would benefit greatly from that.

I future wish

Thanks again



Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
 Sent: Tuesday, March 07, 2006 6:28 PM
 To: Harry Vanderzand
 Subject: Re[2]: [sniffer] declude tests
 
 On Tuesday, March 7, 2006, 6:20:04 PM, Harry wrote:
 
 HV I guess I am not understanding something here after all this time
 
 HV So as I understand I leave the persistent word out of the declude 
 HV config and just run the service?
 
 YES. :-)
 
 The instances launched by Declude will recognize that the 
 service is running and will elect to be peer-client instances 
 automatically.
 
 Also, if the service fails for any reason then they will 
 automatically adopt peer-server mode.
 
 (In Peer-Server mode, instances take turns acting as a 
 service for short periods to improve performance.)
 
 Hope this helps,
 
 _M
 
 
 
 This E-Mail came from the Message Sniffer mailing list. For 
 information and (un)subscription instructions go to 
 http://www.sortmonster.com/MessageSniffer/Help/Help.html
 
 



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html