Features

What is Message Sniffer?

Message Sniffer (SNF), from ARM Research Labs, is a high performance message scanning engine that uses advanced pattern recognition and collaborative machine learning technologies to accurately identify spam and email borne security threats (viruses, malware) at your email server or gateway (before it gets to your inbox). The engine is designed for high-speed, high-availability applications on many platforms including Windows, Linux and BSD based systems. A professionally managed rulebase is provided via subscription and is updated frequently throughout the day (24×7) by analysts and intelligent monitoring systems.

Message Sniffer is about raw power, reliability, and effectiveness. The Message Sniffer engine requires no “training period” and does not rely on DNS based spam blocking lists (DNSBLs) or external database lookups which can be slow to respond and can introduce heavy loads to critical network infrastructures.

Message Sniffer’s adaptive, comprehensive scanning engine examines an entire message and its structure searching for combinations of spam, virus, and malware characteristics including unusual headers, structural artifacts, message source behaviors, obfuscation techniques, email and url targets, binary and image signatures, unusual code fragments, and even coding styles.

While training is not required, the Message Sniffer engine does become more accurate and more efficient over time by learning new patterns from your system and sharing pattern rule and IP reputation data with other SNF nodes. Each SNF instance is a small part of a much larger “brain” that constantly learns about new spam, viruses, and malware.