[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Pete McNeil
Hello Andrew, Thursday, June 8, 2006, 11:32:47 AM, you wrote: > Ditto. > I advise people to use Insert, Item. Far easier than explaining how to > drag and drop (or tie shoelaces). It might be nice to have a SnagIt of that process to share w/ users. > I've noticed that whether the headers surv

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Matt
Darin, Thunderbird allows you to choose the default forwarding method as either inline or as attachment.  It might actually default to inline, I can't remember, but whenever it does message/rfc822 attachments, it is as a whole unlike some other clients that edit it down to the bare minimum of

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Colbeck, Andrew
TED] On Behalf Of Darin Cox > Sent: Thursday, June 08, 2006 6:45 AM > To: Message Sniffer Community > Subject: [sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions] > > >Thunderbird and Netscape just takes the full original source and > >attaches it as a message/rfc82

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Darin Cox
>Thunderbird and Netscape just takes the full original source and >attaches it as a message/rfc822 attachment. I forwarded this message >back to the list by just pressing "Forward". Interesting that they include the headers with a simple forward, without specifying forward as attachment. I haven

[sniffer]AW: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Markus Gufler
> Please excuse me for wanting more detail about the Outlook > attachment trick, but would you mind attaching this message > to a response so that I could look at the headers and such? The full headers are a usefull thing if a customer ask me why he has received a certain message that he doesn'

[sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-07 Thread Matt
, or, at the very least, within 24 hours. Darin.     - Original Message - From: Matt To: Message Sniffer Community Sent: Wednesday, June 07, 2006 11:46 PM Subject: Re: [sniffer]FP suggestions Darin,Outlook will strip many of the headers when forwarding.  Outlook Express needs to forward the m

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
from same day, or, at the very least, within 24 hours. Darin.     - Original Message - From: Matt To: Message Sniffer Community Sent: Wednesday, June 07, 2006 11:46 PM Subject: Re: [sniffer]FP suggestions Darin,Outlook will strip many of the headers when forwarding.  Outlook Express nee

Re: [sniffer]FP suggestions

2006-06-07 Thread Matt
Darin, Outlook will strip many of the headers when forwarding.  Outlook Express needs to forward the messages using "Forward As Attachment" in order to insert the full original headers.  Thunderbird/Netscape Mail will work just by forwarding.  If you paste the full source in a message, you sho

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
n the report. Darin.     - Original Message - From: Scott Fisher To: Message Sniffer Community Sent: Wednesday, June 07, 2006 10:08 AM Subject: Re: [sniffer]FP suggestions For me the pain of false positives submissions is the research that happens when I get a "no rule found" return.   I the

Re: [sniffer]FP suggestions

2006-06-07 Thread Scott Fisher
For me the pain of false positives submissions is the research that happens when I get a "no rule found" return.   I then need to find the queue-id of the original message and then find the appropriate Sniffer log and pull out the log lines from there and then submit it. Almost always in thes

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
06 12:59 AM Subject: Re: [sniffer]FP suggestions Pete,Regarding suggestions for easing the reporting process, I would recommend the following possible modifications: 1) An E-mail submission tool similar to the one now, but replies would be automated2) Send back links or rather an HTML form

Re: [sniffer]FP suggestions

2006-06-06 Thread Matt
Pete, Regarding suggestions for easing the reporting process, I would recommend the following possible modifications: 1) An E-mail submission tool similar to the one now, but replies would be automated 2) Send back links or rather an HTML form with checkboxes in an E-mail auto-response allowin