Hi Pete,
 
I haven't looked at the Sniffer logs, as cross referencing from the Declude logs is a bit of a pain, but many of the FPs did have images, so that probably accounts for most of them if it was an Experimental rule.

Darin.
 
 
----- Original Message -----
Sent: Monday, October 16, 2006 8:46 PM
Subject: [sniffer] Re: Significant increase in false positives

Hello Darin,


Monday, October 16, 2006, 5:17:26 PM, you wrote:


>

Anyone else seeing a sudden increase in FPs?  We normally report a few each day, but we're seeing a 10x increase in FPs for the past three days.


Not sure if this is it, but there was an image segment rule that went in over the weekend and resulted in an unusual number of false positives today. The rule was removed. IIRC the rule id was: 1174356


Hope this helps,


_M


-- 

Pete McNeil

Chief Scientist,

Arm Research Labs, LLC.

#############################################################

This message is sent to you because you are subscribed to

  the mailing list <sniffer@sortmonster.com>.

To unsubscribe, E-mail to: <[EMAIL PROTECTED]>

To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>

To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>

Send administrative queries to  <[EMAIL PROTECTED]>


Reply via email to