On Wed, 26 Jul 2017 17:15:43 +0200 Michael Storz <michael.st...@lrz.de> wrote:
[...] > /boundary="-{4}=_NextPart_000_[0-9A-F]{4}_[0-9A-F]{8}\.[0-9A-F]{8}"/ You may get FPs. See for example https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105578 I am guessing that boundary is generated by a library that's also used for legitimate purposes. Regards, Dianne.