Update on this rule. Hits started at ~9:20am ET. We saw 365 hits in 40
minutes before we added the rule panic, of which ~5% were FPs. We pulled it
since that is a large number of FPs for a single rule.
In the next 20 minutes there were another 158 hits logged, but with the rule
panic in
Darin Cox wrote:
We're noticing a lot of FPs on this rule, and have added a RulePanic
entry.
Pete, is there a problem with it?
The rule was for passport.com -- it has already been removed.
_M
#
This message is sent to you because
Darin Cox wrote:
Update on this rule. Hits started at ~9:20am ET. We saw 365 hits in
40 minutes before we added the rule panic, of which ~5% were FPs. We
pulled it since that is a large number of FPs for a single rule.
In the next 20 minutes there were another 158 hits logged, but with
the
Community sniffer@sortmonster.com
Sent: Wednesday, February 03, 2010 9:41 AM
Subject: [sniffer] Re: RulePanic on 2908567
Darin Cox wrote:
We're noticing a lot of FPs on this rule, and have added a RulePanic
entry.
Pete, is there a problem with it?
The rule was for passport.com -- it has
Darin Cox wrote:
We're still seeing hits. I assume the rule removal hasn't propagated to our
rulebase yet?
BTW, we were seeing hits on the rule across a broad range of emails that
related to passport.com.
The rule will be missing from your next update if it's not already gone
when you
