[sniffer] RulePanic on 3741490

2011-01-07 Thread Darin Cox
Hi guys, We're seeing a lot of FPs on 3741490 this morning. I've added a RulePanic for it in our systems. Roughly 150 FPs from 6:55am until a few minutes ago... Darin.

[sniffer] Re: RulePanic on 3741490

2011-01-07 Thread Pete McNeil
On 1/7/2011 10:19 AM, Darin Cox wrote: Hi guys, We're seeing a lot of FPs on 3741490 this morning. I've added a RulePanic for it in our systems. The rule was created at 0539 and removed at 0853 when it was

[sniffer] Re: RulePanic on 3741490

2011-01-07 Thread Darin Cox
Hmmm... so 70 minutes after the rule was released we were notified of the rule update for auto-update of rulebase, but at 10:11ET we still hadn't gotten the update for the 8:53am removal. Anything we can do to speed up the rulebase update notifications? Also, for rules identified as

[sniffer] Re: RulePanic on 3741490

2011-01-07 Thread Pete McNeil
On 1/7/2011 12:33 PM, Darin Cox wrote: Hmmm... so 70 minutes after the rule was released we were notified of the rule update for auto-update of rulebase, but at 10:11ET we still hadn't gotten the update for the 8:53am removal.

[sniffer] Re: RulePanic on 3741490

2011-01-07 Thread Darin Cox
H Update notifications happen as soon as the rulebase compilers have created a new rulebase. I don't know what your internal processes are, but if I understand this correctly the rule was created at 5:39am ET, and was compiled into the rulebase somewhere just before 8:53am ET, at

[sniffer] Re: RulePanic on 3741490

2011-01-07 Thread Pete McNeil
On 1/7/2011 2:00 PM, Darin Cox wrote: H "Update notifications happen as soon as the rulebase compilers have created a new rulebase." I don't know what your internal processes are, butif I understand