On 10/24/2011 3:20 PM, Colbeck, Andrew wrote:
<header name='X-Telus-Outbound-IP:' received='.telus.net [' ordinal='0'
/>
Which is in the GBUDB/Training/Source section as per:
http://www.armresearch.com/support/articles/software/snfServer/config/no
de/gbudb/training/source-header.jsp
That appears to be correct and appears to have worked correctly.
Top Received header would have been picked as source IP (unless you
already have it ignored).
It appears that you have successfully told SNF to find the source IP in
the X-Telus-Outbound-IP: header in this case.
_M
--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044
x7010
#############################################################
This message is sent to you because you are subscribed to
the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to <sniffer-requ...@sortmonster.com>
