I have been installing the persistent sniffer module on each of our servers. The 1st server I placed it on I saw very little decrease in CPU, however, it is only taking in about 30K messages and sending out about 3K. However, last night I was installing it on one of our busiest servers (140K in / 20K out) and had very odd results. Before placing it on, I took note of the CPU over a 30 min. period and it was averaging about 35% load with spikes to 55% at times. I installed the sniffer service using the Win 2K Resource Tools (instsrv and srvany) and configured the appropriate Paramaters Key and Application entries. I then stopped the Queue Mgr and SMTP service. Then I started the new Sniffer service, checked it was running by going to the Taskmgr and seeing the srvany.exe and mysnifffile.exe was there. I then went to the Sniffer folder to see I had the appropriate .stat and .svr files. Once done, I restarted the Queue Mgr and SMTP service and immediately my server shot to 100% and was pegged there for over 30 min. before I stopped the new Sniffer service. During this time, I noticed a tremendous backlog of .wrk and .que files in the Sniffer folder. It is almost as if it could not keep up. When looking at the .stat file it was showing about 120 msg/min. with a current load of 95. After I stopped the sniffer service, within less than a min. my server returned to 35% cpu and the .stat and .svr files were removed from the sniffer directory. I have read forum results that this behavior is the reverse of what should happen, I should get a reduction in CPU. I did this around 11pm last night, usually during peak times this server would stay at 65% load. Is there anything I can tweak to install the Sniffer persistent server and achieve desired results? Thanks for the aid. Keith
<<winmail.dat>>
