Hi there,
Thanks a lot for your message.
The rule that is causing the problem is : 40102.
qdq1414z 20040915192710 fileuJgh6T 20 0 Match 40102 52 142 156 53
qdq1414z 20040915192710 fileuJgh6T 20 0 Final 40102 52 0 1220 53
I stopped the problem by blocking the rule 40102 in the cfg
When can I unblock the rule?
Yes, I sent two emails to [EMAIL PROTECTED] before this one.
Regards,
fausto.
This is a rulebase panic situation. We need to identify the rule and
correct it. Your log file should indicate the rule ID. If you can find
that then you can enter it in your sniffer config file to stop the
problem immediately by temporarily blocking the rule at your sniffer
engine.
Then you should submit a false positive to us, include the rule ID if
you know it, and we will adjust the rulebase.
Here is a link to the rulebase panic procedure on our web site:
<http://www.sortmonster.com/MessageSniffer/Help/FAQ.html#FP>
FB> I have been sending this email to [EMAIL PROTECTED] but I didn't receive any answer.
Hmm... I don't see the messages. I'll look into it.
_M
FB> Regards,
FB> fausto.
FB> This E-Mail came from the Message Sniffer mailing list. For
FB> information and (un)subscription instructions go to
FB> http://www.sortmonster.com/MessageSniffer/Help/Help.html
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
