Yes.  The rule is inert.  However, according to the logs the rule would have 
been hit 27 more times had we not added the rule panic.

Darin.


----- Original Message ----- 
From: Pete McNeil 
To: Message Sniffer Community 
Sent: Friday, July 18, 2008 12:16 PM
Subject: [sniffer] Re: Problem with Sniffer-Porn rule this morning


Hello Darin,




Friday, July 18, 2008, 11:39:47 AM, you wrote:




      >
     We had 18 hits on it from ~6:40-9:30am EDT before putting in the rule 
panic, 5 of which reached our hold weight.  We've had 27 more hits since adding 
the rule panic.
     




When a rule panic is in place the rule should be inert.




Please check your snf_engine_cfg.log to see if the rule panic was picked up in 
your configuration.




Best,




_M













-- 

Pete McNeil

Chief Scientist,

Arm Research Labs, LLC.


#############################################################

This message is sent to you because you are subscribed to

  the mailing list <sniffer@sortmonster.com>.

To unsubscribe, E-mail to: <[EMAIL PROTECTED]>

To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>

To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>

Send administrative queries to  <[EMAIL PROTECTED]>


Reply via email to