Hi Ron. Can you post the headers from a message where Sniffer triggered as a FP? I would like to have a look to see if I can help you. Thanks!

Ron, I reached out to ST support today to ask how FPs with the OEM Sniffer should be handed. If you are using a reseller, report the FP to your reseller and they will report it to ST. If you are a direct customer of ST without a reseller, you would need to contact sales@smartertools.com or open a support ticket with them and submit the FP. Either way, they would need to submit the following info:

 

Provide a copy of the original .EML file, along with the rule that was triggered. This information can be found
in the Message Sniffer logs, and would reference the .EML file name.

Example:

 

I hope this helps.