|Bill, Pete - | <snip>
|accuracy. eg: false positives. Sniffer is a very good tool |however it scores - at least with the demo rulebase on my |system - false positives. I score it with 3 points. SA on the |other hand has *very* few false positives so it gets an 8. No |question if I had the registered version of sniffer I would |have a better picture of its true capabilities. One thing you should definitely do with sniffer is to weight group 60 lower than the others. Group 60 is the gray hosting group which will cause many false positives if not countered with appropriate white rules. If you make this adjustment you should see very few false positives. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
