Re: [sniffer] Rash of false positives

[Scott Fisher]

I don't know if I would call it a rash, but over the last week, I've submitted about 30 false positives. That's far more than average. I've developed a feeling that Message Sniffer has become "too tight".   ----- Original Message ----- From: Darin Cox To: sniffer@SortMonster.com Sent: Tuesday, November 08, 2005 8:54 AM Subject: Re: [sniffer] Rash of false positives We're seeing a continual stream of false positives.  It's taking all of our time just to keep up with it at the moment.  If something isn't done soon, we're going to have to disable sniffer. Darin.     ----- Original Message ----- From: Computer House Support To: sniffer@SortMonster.com Sent: Tuesday, November 08, 2005 9:34 AM Subject: Re: [sniffer] Rash of false positives Dear Darin,   Thanks for the heads up.  It's going to take me about 45 minutes to check the 9000 messages that were blocked by Sniffer last night, but I'll let you know if we experienced the same thing.     Michael Stein Computer House www.computerhouse.com   ----- Original Message ----- From: Darin Cox To: sniffer@SortMonster.com Sent: Tuesday, November 08, 2005 8:45 AM Subject: [sniffer] Rash of false positives Hi Pete,   What's going on over there?  We had somewhere between 5 and 10 times the usual number of Sniffer false positives this morning.  They are across the board, so it's not just one rule that's catching them, or a particular set of senders or receivers.   Hopefully you can get it under control soon.   It would also be extremely helpful if you could speed up the false positive processing.  Lately it seems to take 2-4 days for the rules to be adjusted, which usually means more of the same are caught and submitted over that time.  I believe speeding up that process would result in fewer to process all around.   Thanks, Darin.