Update on this rule.  Hits started at ~9:20am ET.  We saw 365 hits in 40 
minutes before we added the rule panic, of which ~5% were FPs. We pulled it 
since that is a large number of FPs for a single rule.

In the next 20 minutes there were another 158 hits logged, but with the rule 
panic in place.

Darin.


----- Original Message ----- 
From: Darin Cox 
To: Message Sniffer Community 
Sent: Wednesday, February 03, 2010 9:02 AM
Subject: [sniffer] RulePanic on 2908567


We're noticing a lot of FPs on this rule, and have added a RulePanic entry.

Pete, is there a problem with it?

Darin.

Reply via email to