Column 7 is the one that contains the rule that was hit. In this case, it was 1100444.
Column 8 is the one that contains the group. In this case, it was 60 "Ungrouped Black Rules" (Sniffer General). Andrew 8) > -----Original Message----- > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Wednesday, August 23, 2006 12:24 PM > To: Message Sniffer Community > Subject: [sniffer] Re: Paypal failing SNIFFER-GENERAL > > Hi Pete, > > I'm not sure which column is which, but here are the log > lines for the message (minus the authorization code) > > xxxxxxxx 20060823163449 D83a20d3001502962.SMD 0 32 Match > 1100444 60 1502 > 1551 98 > xxxxxxxx 20060823163449 D83a20d3001502962.SMD 0 32 Final > 1100444 60 0 3798 > 98 > > The FP was submitted at 1:34pm ET. > > Darin. > > > ----- Original Message ----- > From: "Pete McNeil" <[EMAIL PROTECTED]> > To: "Message Sniffer Community" <sniffer@sortmonster.com> > Sent: Wednesday, August 23, 2006 2:22 PM > Subject: [sniffer] Re: Paypal failing SNIFFER-GENERAL > > > Hello Darin, > > I may be behind... but I don't see an FP report on this. Do you have > the rule id? > > _M > > Wednesday, August 23, 2006, 1:36:08 PM, you wrote: > > > > > > > FYI... I just reported one of these, so watch out. > > > > > Darin. > > > > > > > > > > > > > > -- > Pete McNeil > Chief Scientist, > Arm Research Labs, LLC. > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
