Re: icat and ifind - Which thread was hijacked?

> Ah, that explains it.  Looking at the full headers for Al's original
> message, I see that it contains the following header:
>
> In-Reply-To: <A8D7CA96-20E0-49CF-BB8E-A48AE7D21777@...>
>
> I assume this is because he looked at the old thread to find the
> mailing list address, then hit Reply in his MUA.
>
> Once in the actual new draft, he would have had to change the Subject
> and may have trimmed out other recipient addresses if his MUA included
> them when he hit Reply.  Not many MUA's I know of display the
> In-Reply-To header as part of the GUI so it likely went along for the
> ride without his knowing.
>
> Gmail and the list archiving software at Sourceforge don't seem to use
> the In-Reply-To header for threading, they seem to require that the
> Subject line not have been changed.  Based upon what you have said,
> Thunderbird appears to use the In-Reply-To regardless of the Subject
> line.

> Interesting.  At least I learned something new today :)
>
> On Fri, Nov 20, 2009 at 8:22 PM, Paul D. Bain <paulbain@...> wrote:
>> Theodore Pham wrote:
>>> I think I've reviewed all the recent threads and I don't see where Al
>>> hijacked someone else's thread.
>>>
>>> Care to point out which thread he hijacked?
>>        I am using Thunderbird (TB) 2.0.0.23 as my MUA. TB's threading module
>> indicates that Al's email was made in reply to the 19 Nov. email from Simson
>> Garfinkel whose subject line was thus: "Re: [sleuthkit-users] No mactime."
>> IOW, when I view the emails from this mailing list in TB's threaded mode,
>> Al's email appears directly underneath the email from S. Garfinkel and
>> indented with respect to Garfinkel's email. Al's email does not appear as a
>> separate ToD, at least not in TB.
>>
>>
>>> On Fri, Nov 20, 2009 at 6:29 PM, Paul D. Bain <paulbain@...> wrote:
>>>> BigAl.NZ@... wrote:
>>>>>> Hello all,
>>>>>>
>>>>>> I am very new to this field.
>>>>>>
>>>>>> Would there be someone willing to help me with some questions, mainly
>>>>>> around icat and ifind. I dont mind doing it on list,
>>>>       Well, if you are going to do it on this list, then I suggest that
>>>> you
>>>> start a new thread of discussion (ToD) rather than hijack an existing
>>>> email ToD.
>>>>
>>>>       Folks, I am extremely disappointed to see ToD hijacking on a list
>>>> comprised of sophisticated IT professionals, people who ought to know
>>>> better than to do so. Please DO NOT hijack email ToD's.
>>>>
>>>> Sincerely,
>>>> Paul Bain
>>>>
>>>>>> but I am likely to
>>>>>> get my head around it faster through a IM session on MSN or Skype or
>>>>>> the
>>>>>> like.
>>>>>>
>>>>>> Thansk in advance
>>>>>>
>>>>>> -Al
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>