Hi Pete,
Would you mind sharing your calculations of confidence and probability? I'm
looking at the stats for p=1.0 and curious about the low confidence values.
I would have expected high confidence where there were no good samples and a
lot of bad... or do I have something backwards?
Also, while it's easy to parse, it might be nice if the output had one
delimiter between fields instead of being both tab and comma delimited.
Makes importing into a database for analysis much easier.
Appreciate it,
Darin.
-----Original Message-----
From: Pete McNeil
Sent: Friday, November 23, 2012 3:43 PM
To: Message Sniffer Community
Subject: [sniffer] GBUdb Tool
Hello Sniffer Folks,
We have been playing with a new utility that some of you may enjoy.
http://www.armresearch.com/message-sniffer/download/GBUDBTool-V0.1.zip
GBUDB Tool allows you to create a list of IP addresses from your GBUdb
snapshots (.gbx files). You can select IPs that are "blacker" or
"whiter" than a provided probability figure and confidence figure. It
outputs one IP per line, optionally with details about the statistics
for the IP. This can be useful for feeding-forward blacklists to block
at your firewall or for other research purposes.
Run GBUDBTool without any parameters and it will tell you about it's
command line options.
Please let us know if there is more we can do.
Best,
_M
--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller
#############################################################
This message is sent to you because you are subscribed to
the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to <sniffer-requ...@sortmonster.com>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to <sniffer-requ...@sortmonster.com>
