[sniffer] Re: IP Change on rulebase delivery system

2013-05-24 Thread Richard Stupek
Pete I thought the local gbudb got updates from the service or was that a future enhancement? > Original message > Subject: [sniffer] Re: IP Change on rulebase delivery system > From: Richard Stupek 'rstu...@gmail.com');>> > To: Message Sniffer

[sniffer] Re: IP Change on rulebase delivery system

2013-05-23 Thread Richard Stupek
Thanks for the info. Mine can speak XCI, its custom. On Thu, May 23, 2013 at 4:31 PM, Pete McNeil wrote: > On 2013-05-23 17:21, Richard Stupek wrote: > >> Would this: http://armresearch.com/**support/articles/software/** >> snfServer/xci/gbudb.jsp<http://armresearch

[sniffer] Re: IP Change on rulebase delivery system

2013-05-23 Thread Richard Stupek
Would this: http://armresearch.com/support/articles/software/snfServer/xci/gbudb.jsp yield the same results as using the ip4 blocklist? On Thu, May 23, 2013 at 4:11 PM, Pete McNeil wrote: > On 2013-05-23 16:41, Richard Stupek wrote: > >> Can you point me at the documentation for

[sniffer] Re: IP Change on rulebase delivery system

2013-05-23 Thread Richard Stupek
Can you point me at the documentation for the truncate blacklist and its usage? On Thu, May 23, 2013 at 3:36 PM, Pete McNeil wrote: > On 2013-05-23 15:22, Richard Stupek wrote: > >> Looks like I have this issue again (pegging 4 core cpu) and resetting the >> process doesn&#

[sniffer] Re: IP Change on rulebase delivery system

2013-05-23 Thread Richard Stupek
27 PM, Pete McNeil wrote: > On 2013-03-29 12:59, Richard Stupek wrote: > >> well when all else fails restarting snf seems to have corrected the issue >> for now. >> > > In that case, it is likely that RAM fragmentation was involved. Dropping > the process allowed th

[sniffer] Re: IP Change on rulebase delivery system

2013-03-29 Thread Richard Stupek
poor performing. > > Darin. > > > *From:* Richard Stupek > *Sent:* Thursday, March 28, 2013 12:10 PM > *To:* Message Sniffer Community > *Subject:* [sniffer] Re: IP Change on rulebase delivery system > > Ok looking at the log I see quite a few

[sniffer] Re: IP Change on rulebase delivery system

2013-03-28 Thread Richard Stupek
:16, Richard Stupek wrote: > >> The spikes aren't as prolonged at the present. >> > > Interesting. A short spike like that might be expected if the message was > longer than usual, but on average SNF should be very light-weight. > > One thing you can check is the pe

[sniffer] Re: IP Change on rulebase delivery system

2013-03-27 Thread Richard Stupek
te McNeil wrote: > On 2013-03-27 16:49, Richard Stupek wrote: > >> Its odd because the number of messags snf is processing isn't more than >> usual and the % of spam being detected through snf is actually lower than >> typical yet is is routinely maxing out 4 processo

[sniffer] Re: IP Change on rulebase delivery system

2013-03-27 Thread Richard Stupek
Its odd because the number of messags snf is processing isn't more than usual and the % of spam being detected through snf is actually lower than typical yet is is routinely maxing out 4 processors at 100%. On Wed, Mar 27, 2013 at 3:20 PM, Pete McNeil wrote: > On 2013-03-27 14:38, Darin Cox wrote

[sniffer] Re: IP Change on rulebase delivery system

2013-03-27 Thread Richard Stupek
Not sure if its related but since yesterday SNFserver CPU utilization has been inordinately high (>50%) for the middle of the day with not any additional volume in mail being received. On Mon, Mar 25, 2013 at 9:13 AM, Pete McNeil wrote: > Hi Sniffer Folks, > > We are about to change the IP of the

[sniffer] Re: 3 million rules and counting.

2010-03-17 Thread Richard Stupek
Congratulations. Keep up the good work!

[sniffer] Re: curl couldn't connect to host

2009-07-06 Thread Richard Stupek
adn't noticed. > > Checking my ping times and traceroutes show that I have no packet loss but > there is random extra lag of zero to 85ms on AboveNet, which sits between my > provider and RackSpace where the updates server is. > > > Andrew. > > > -- > *From:* Message Sniffer Community [mailto:snif...@sortmonster.com] *On > Behalf Of *Richard Stupek > *Sent:* Monday, July 06, 2009 11:16 AM > *To:* Message Sniffer Community > *Subject:* [sniffer] curl couldn't connect to host > > I just started seeing this error for the getrulebase.cmd script. Is there > an issue going on? >

[sniffer] curl couldn't connect to host

2009-07-06 Thread Richard Stupek
I just started seeing this error for the getrulebase.cmd script. Is there an issue going on?

[sniffer] Re: New getRulebase.cmd and CURL utility for Windows

2009-03-09 Thread Richard Stupek
If we have a up to date snf file, will the script cause snf2check to print out "ERROR_RULE_FILE!"? On Mon, Mar 9, 2009 at 11:16 AM, Pete McNeil wrote: > Hello Sniffer Folks, > > We have determined that using the latest getRulbase.cmd script w/ CURL does > resolve the DST problem. > Please update

[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
ssing through nullify the bad event? Should I post 2 bad events for each mail that is caught after sniffer? On Tue, Feb 17, 2009 at 5:02 PM, Pete McNeil wrote: > Richard Stupek wrote: > >> Thanks for the info. Is there any diagnostic information available when a >> gbudb sync occu

[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
Thanks for the info. Is there any diagnostic information available when a gbudb sync occurs? On Tue, Feb 17, 2009 at 4:35 PM, Pete McNeil wrote: > Richard Stupek wrote: > >> A question on GBUDB utilization. I show a current utilization of 95% >> (from the log file) which

[sniffer] Re: xci scanner command

2009-02-17 Thread Richard Stupek
gbudb XCI commands (like ) show up in a log file? On Fri, Feb 13, 2009 at 3:27 PM, Pete McNeil wrote: > Richard Stupek wrote: > >> So there would not be a real benefit to passing the IP over when it is the >> is already in the mail having been added by the mail server? >>

[sniffer] Re: xci scanner command

2009-02-13 Thread Richard Stupek
So there would not be a real benefit to passing the IP over when it is the is already in the mail having been added by the mail server? On Fri, Feb 13, 2009 at 2:56 PM, Pete McNeil wrote: > Richard Stupek wrote: > >> Which of the 2 scan commands should we use to scan a message? Doe

[sniffer] xci scanner command

2009-02-13 Thread Richard Stupek
Which of the 2 scan commands should we use to scan a message? Does sending the IP address help improve scanning? OR

[sniffer] GBUdb

2008-12-31 Thread Richard Stupek
Does the snf XML command interface for GBUdb work? I was considering pumping in bad IPs as I find them into the GBUdb and also short-circuiting spam processing by calling the GBUdb to determine the status of an IP to reduce workload. Is this something that sounds like a workable idea?

[sniffer] Re: GBUdb

2008-12-04 Thread Richard Stupek
Ok. We are seeing a large amount of spam lately that is not being picked up through snf and most of it has the "from" and the "to" set the same. Are you seeing anything similar? On Thu, Dec 4, 2008 at 2:37 PM, Pete McNeil <[EMAIL PROTECTED]>wrote: > Hello Richard, > > > Thursday, December 4, 20

[sniffer] GBUdb

2008-12-04 Thread Richard Stupek
Is the GBUdb currently sharing information as described in the documentation? Do the GBUdb XCI commands detailed within snf_xci.xml work through the tcp interface?