On 10/05/2009 02:53 PM, Karsten Bräckelmann wrote:
On Mon, 2009-10-05 at 13:30 -0500, McDonald, Dan wrote:
On Mon, 2009-10-05 at 20:17 +0200, Karsten Bräckelmann wrote:
Just a minor nit, in case it isn't just different terminology. Installed
sounds like a one-time operation -- the Sought rule-set needs to be
updated using sa-update frequently, preferably more than once a day.
How often should I be running sa-update to pick up SOUGHT. I currently
run it automatically once a day, and ad-hoc whenever I tweak any other
rules. Should I run 4 times/day? 6? Inquiring minds want to know.
Well, the Sought rule-set (and thus Fraud sub-set) is being re-generated
every 4 hours -- with an exception of night-time, UTC.
You pretty much can run it as often as you want, but I'd recommend 4+
times a day. Just please be careful to spread the load, and don't run
your cron jobs at a full hour. (I know you do, Dan, this goes out to
everyone reading this post.)
guenther
They are really being generated every 4 hours when new patterns can be
tested for safety only during the nightly masscheck?
Warren Togami
wtog...@redhat.com
