Yes. The rule is inert. However, according to the logs the rule would have
been hit 27 more times had we not added the rule panic.
Darin.
----- Original Message -----
From: Pete McNeil
To: Message Sniffer Community
Sent: Friday, July 18, 2008 12:16 PM
Subject: [sniffer] Re: Problem with Sniffer-Porn rule this morning
Hello Darin,
Friday, July 18, 2008, 11:39:47 AM, you wrote:
>
We had 18 hits on it from ~6:40-9:30am EDT before putting in the rule
panic, 5 of which reached our hold weight. We've had 27 more hits since adding
the rule panic.
When a rule panic is in place the rule should be inert.
Please check your snf_engine_cfg.log to see if the rule panic was picked up in
your configuration.
Best,
_M
--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
