Re: save resolved IP in bayes

2014-09-07 Thread RW
On Wed, 03 Sep 2014 15:47:05 -0600 Jesse Norell wrote: > Hmm, ok. Without "hapaxes" enabled, how many hits on a token do you > need for it to start being useful? Don't disable hapaxes without good empirical evidence that it provides you with a benefit. Typically it reduces accuracy without any

Re: save resolved IP in bayes

2014-09-03 Thread Jesse Norell
On Wed, 2014-09-03 at 23:36 +0200, Axb wrote: > On 09/03/2014 11:17 PM, Jesse Norell wrote: > > Hello, > > > >Looking at recent botnet spam, comparing messages from one day to the > > next, I see new URL's being advertised that resolve to the same IP > > address as ones in the past. Eg. some a

Re: save resolved IP in bayes

2014-09-03 Thread Axb
On 09/03/2014 11:17 PM, Jesse Norell wrote: Hello, Looking at recent botnet spam, comparing messages from one day to the next, I see new URL's being advertised that resolve to the same IP address as ones in the past. Eg. some at http://pastie.org/9525224 The first of those was already on UR

save resolved IP in bayes

2014-09-03 Thread Jesse Norell
Hello, Looking at recent botnet spam, comparing messages from one day to the next, I see new URL's being advertised that resolve to the same IP address as ones in the past. Eg. some at http://pastie.org/9525224 The first of those was already on URIBL/RBL lists when it hit, but the others were