### [sniffer] snf plugin regions question

```Hey Pete,

Regarding the regions section in the SNF Plugin, we're currently using the
defaults (see below).

Could you give us a refresher:  Why are there 2 entry's for each (white /
caution / black)?

For example:

edge probability='-1.0' confidence='0.4'/

edge probability='-0.8' confidence='1.0'/

__  __  __  __  __  __  __  __

regions

white on-off='on' symbol='0'

edge probability='-1.0' confidence='0.4'/

edge probability='-0.8' confidence='1.0'/

panic on-off='on' rule-range='1000'/

/white

caution on-off='on' symbol='40'

edge probability='0.4' confidence='0.0'/

edge probability='0.8' confidence='0.5'/

/caution

black on-off='on' symbol='63'

edge probability='0.8' confidence='0.2'/

edge probability='0.8' confidence='1.0'/

truncate on-off='on' probability='0.9' peek-one-in='5'
symbol='20'/

sample on-off='on' probability='0.8' grab-one-in='5'
passthrough='no' passthrough-symbol='0'/

/black

/regions

__  __  __  __  __  __  __  __

Thanks,

--Paul

```

### [sniffer] Re: snf plugin regions question

```

On 2013-09-10 11:15, Peer-to-Peer
(Spam-Filter.com) wrote:

Regarding the regions section in the
SNF Plugin, were currently using the defaults (see below).
Could you give us a refresher: Why are there
2 entrys for each (white / caution / black)?
For example:
edge
probability='-1.0' confidence='0.4'/
edge
probability='-0.8' confidence='1.0'/

They define corner points on a parallelogram that maps the region in
the x,y space:

http://www.armresearch.com/support/articles/software/snfServer/config/node/gbudb/regions/

The points you listed above define the white region with two points.
These points essentially define a line in the graph.
Everything to the left of that line (in the white region) is
considered to be "inside" the region.

Please let us know if there is more we can do.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010

#

This message is sent to you because you are subscribed to

the mailing list sniffer@sortmonster.com.

This list is for discussing Message Sniffer,

Anti-spam, Anti-Malware, and related email topics.

To unsubscribe, E-mail to: sniffer-...@sortmonster.com

To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com

To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com

```

### [sniffer] Re: snf plugin regions question

```

On 2013-09-10 17:02, Peer-to-Peer
(Spam-Filter.com) wrote:

Is
that the right direction?

That would open up the black range a bit.
Use caution :-), but have fun.

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010

#

This message is sent to you because you are subscribed to

the mailing list sniffer@sortmonster.com.

This list is for discussing Message Sniffer,

Anti-spam, Anti-Malware, and related email topics.

To unsubscribe, E-mail to: sniffer-...@sortmonster.com

To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com

To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com

```

### [sniffer] Re: snf plugin regions question

```Way cool.  So just to be sure I've got this right, if I wanted to experiment
with getting more aggressive, I could try the following:

DEFAULT:

black on-off='on' symbol='63'

edge probability='0.8' confidence='0.2'/

edge probability='0.8' confidence='1.0'/

NEW CHANGES:

black on-off='on' symbol='63'

edge probability='0.8' confidence='0.1'/

edge probability='0.7' confidence='1.0'/

Is that the right direction?

--Paul

From: Message Sniffer Community [mailto:sniffer@sortmonster.com] On Behalf
Of Pete McNeil
Sent: Tuesday, September 10, 2013 11:32 AM
To: Message Sniffer Community
Subject: [sniffer] Re: snf plugin regions question

On 2013-09-10 11:15, Peer-to-Peer (Spam-Filter.com) wrote:

Regarding the regions section in the SNF Plugin, we're currently using the
defaults (see below).

Could you give us a refresher:  Why are there 2 entry's for each (white /
caution / black)?

For example:

edge probability='-1.0' confidence='0.4'/

edge probability='-0.8' confidence='1.0'/

They define corner points on a parallelogram that maps the region in the x,y
space:

http://www.armresearch.com/support/articles/software/snfServer/config/node/g
budb/regions/

The points you listed above define the white region with two points.
These points essentially define a line in the graph.
Everything to the left of that line (in the white region) is considered to
be inside the region.

Please let us know if there is more we can do.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
#

This message is sent to you because you are subscribed to

the mailing list sniffer@sortmonster.com.

This list is for discussing Message Sniffer,

Anti-spam, Anti-Malware, and related email topics.