Question about Spear.Phishing.Rules script

[Ralph Bornefeld-Ettmann]

Julian Field schrieb:
> 
> 
> On 03/08/2009 10:35, Ralph Bornefeld-Ettmann wrote:
>>
>> Jules Field schrieb:
>>>
>>>
>>> On 02/08/2009 16:46, Mark Sapiro wrote:
>>>> Jules Field wrote:
>>>>
>>>>> Wipe the cache (under /var/cache somewhere, it's in the script), 
>>>>> and run
>>>>> it again.
>>>>
>>>> I did that and it retrieved all the files
>>>> http://www.mailscanner.tv/emails.2009-30.1 through
>>>> http://www.mailscanner.tv/emails.2009-30.232 and rebuilt the cache,
>>>> but I still get
>>>>
>>>> Failed to retrieve http://www.mailscanner.tv/emails.2009-30.227 at ...
>>>>
>>>> Note that this file really doesn't exist. As I said, if I try to get it
>>>> in a browser, I get a 404 - not found.
>>> Interesting. If the script continues to get the files after this one, 
>>> then I wouldn't worry about it too much, the .227 will probably reset 
>>> to .1 tomorrow anyway! :-)
>>>>
>>>>> On 02/08/2009 15:27, Mark Sapiro wrote:
>>>>>> I am running the Spear.Phishing.Rules.v2.04 script.
>>>>>>
>>>>>> Recently I noticed a message:
>>>>>>
>>>>>> Failed to retrieve http://www.mailscanner.tv/emails.2009-30.227 at 
>>>>>> ...
>>>>>>
>>>>>> in the script output. If I try to visit that URL with a browser, I 
>>>>>> get
>>>>>> a "not found". I noticed this once before; I think the URL may have
>>>>>> been<http://www.mailscanner.tv/emails.2009-28.227>   (from my browser
>>>>>> history), but I can't verify this as all the week 28 files seem to be
>>>>>> gone now.
>>>>>>
>>>>>> My questions are:
>>>>>>
>>>>>> Is it normal for a file to be missing or does this indicate a 
>>>>>> problem?
>>>>>>
>>>>>> If the other time really was emails.2009-28.227, is the 227 
>>>>>> significant
>>>>>> or a coincidence?
>>>
>>> Jules
>>>
>>
>> It seems the .227 is the problem.
>> As suggested in some answer above I am using a mirror for my systems.
>> Starting with 2009-24 I found on my mirror :
>> 24.1 - 24.252
>> 25.1 - 25.236
>> 26.1 - 26.254
>> 27.1 - 27.183
>> 28.1 - 28.242 -> no .227! (missing between 2009-07-19 04:21 and 07:11)
>> 29.1 - 29.249 -> no .227! (missing between 2009-07-25 00:22 and 06:54)
>> 30.1 - 30.237 -> no .227! (missing between 2009-08-02 08:22 and 09:43)
>>
>> When I did a wget on these files I received a 404 error.
> Weird. I've changed it to restart every day instead of every week. 
> Should avoid the problem.
> 
> Jules
> 
possibly new issue :

emails.2009-325 on 2009-08-14
emails.2009-326 on 2009-08-15
emails.2009-320 on 2009-08-16

seems to be a jump back in numbers ....

Ralph