Ken,
>Is there a way to make a single line only be able to match a certain
number
>of times?
no, we count/score one time per result of the regex, not per regex. Each
result is scored only once - it does not matter which line of a regex file
has matched - this is per design, because the complete file is merged in
to a single regex and possibly optimized, which makes it impossible to
reflect to a line in the source regex.
So if
'1000.000 million' is found multiple times, assp will score a single time
but if
1000.000 million
and
2000.000 million
is found, assp scores for each match
If two equal matching results have different weights, because the source
regex was a different one, the highest weight will be used.
for example
\$\d{1,5}\.\d{1,3}\smillion=>0.10
\$\d{1,4}\.\d{1,3}\smillion=>0.20
Thomas
Von: K Post <nntp.p...@gmail.com>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum: 20.07.2011 14:47
Betreff: [Assp-test] BombRe option to only match a given line once?
I have a line in my BombRe:
\$\d{1,5}\.\d{1,3}\smillion=>0.10
This is my attempt to give a slightly negative score to emails that match,
which is added with other negatives would hopefully cause a rejection. It
seems to work well when there's only 1 match.
However, if an email talks about a budget and is legitimate and has
several
lines in it with $x.x million, it gets scored multiple times.
Is there a way to make a single line only be able to match a certain
number
of times? I know that there's the bombReMaxHits, but I am talking about
allowing other lines in BombRe to match again, but only scoring the
specific
one above once or twice.
Thanks!
------------------------------------------------------------------------------
10 Tips for Better Web Security
Learn 10 ways to better secure your business today. Topics covered
include:
Web security, SSL, hacker attacks & Denial of Service (DoS), private keys,
security Microsoft Exchange, secure Instant Messaging, and much more.
http://www.accelacomm.com/jaw/sfnl/114/51426210/
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
10 Tips for Better Web Security
Learn 10 ways to better secure your business today. Topics covered include:
Web security, SSL, hacker attacks & Denial of Service (DoS), private keys,
security Microsoft Exchange, secure Instant Messaging, and much more.
http://www.accelacomm.com/jaw/sfnl/114/51426210/
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
