Way cool. So just to be sure I've got this right, if I wanted to experiment with getting more aggressive, I could try the following:
DEFAULT: <black on-off='on' symbol='63'> <edge probability='0.8' confidence='0.2'/> <edge probability='0.8' confidence='1.0'/> NEW CHANGES: <black on-off='on' symbol='63'> <edge probability='0.8' confidence='0.1'/> <edge probability='0.7' confidence='1.0'/> Is that the right direction? --Paul From: Message Sniffer Community [mailto:sniffer@sortmonster.com] On Behalf Of Pete McNeil Sent: Tuesday, September 10, 2013 11:32 AM To: Message Sniffer Community Subject: [sniffer] Re: snf plugin <regions> question On 2013-09-10 11:15, Peer-to-Peer (Spam-Filter.com) wrote: Regarding the <regions> section in the SNF Plugin, we're currently using the defaults (see below). Could you give us a refresher: Why are there 2 entry's for each (white / caution / black)? For example: <edge probability='-1.0' confidence='0.4'/> <edge probability='-0.8' confidence='1.0'/> They define corner points on a parallelogram that maps the region in the x,y space: http://www.armresearch.com/support/articles/software/snfServer/config/node/g budb/regions/ The points you listed above define the white region with two points. These points essentially define a line in the graph. Everything to the left of that line (in the white region) is considered to be "inside" the region. Please let us know if there is more we can do. Best, _M -- Pete McNeil Chief Scientist ARM Research Labs, LLC www.armresearch.com 866-770-1044 x7010 twitter/codedweller ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> Send administrative queries to <sniffer-requ...@sortmonster.com>