GBUdb

Is it possible to have sniffer NOT automatically input data into GBUdb with each sniffer scan?

You could create "header directives" to selectively disable GBUdb training.

You can also disable GBUdb training for all messages.

<training on-off='off'>

Please note that the command line tools always work. When you report a "good" or "bad" hit it has the same effect as GBUdb learning from a message scan. The information will be stored and shared in exactly the same way.

When you turn off training you are only disabling the system's ability to learn automatically from scanned messages. Inputs from the command line utility are still retained.