Re: [sleuthkit-users] icat and ifind - Which thread was hijacked?

[Theodore P. <te...@gm...>]

Ah, that explains it.  Looking at the full headers for Al's original
message, I see that it contains the following header:

In-Reply-To: <A8D...@ac...>

I assume this is because he looked at the old thread to find the
mailing list address, then hit Reply in his MUA.

Once in the actual new draft, he would have had to change the Subject
and may have trimmed out other recipient addresses if his MUA included
them when he hit Reply.  Not many MUA's I know of display the
In-Reply-To header as part of the GUI so it likely went along for the
ride without his knowing.

Gmail and the list archiving software at Sourceforge don't seem to use
the In-Reply-To header for threading, they seem to require that the
Subject line not have been changed.  Based upon what you have said,
Thunderbird appears to use the In-Reply-To regardless of the Subject
line.

So you see, he didn't mean any offense.  Hell I'm sure I've done the
exact same thing on occasion.

Interesting.  At least I learned something new today :)

On Fri, Nov 20, 2009 at 8:22 PM, Paul D. Bain <pau...@po...> wrote:
> Theodore Pham wrote:
>>
>> I think I've reviewed all the recent threads and I don't see where Al
>> hijacked someone else's thread.
>>
>> Care to point out which thread he hijacked?
>
>        I am using Thunderbird (TB) 2.0.0.23 as my MUA. TB's threading module
> indicates that Al's email was made in reply to the 19 Nov. email from Simson
> Garfinkel whose subject line was thus: "Re: [sleuthkit-users] No mactime."
> IOW, when I view the emails from this mailing list in TB's threaded mode,
> Al's email appears directly underneath the email from S. Garfinkel and
> indented with respect to Garfinkel's email. Al's email does not appear as a
> separate ToD, at least not in TB.
>
>
>> On Fri, Nov 20, 2009 at 6:29 PM, Paul D. Bain <pau...@po...> wrote:
>>>
>>> Big...@gm... wrote:
>>>>>
>>>>> Hello all,
>>>>>
>>>>> I am very new to this field.
>>>>>
>>>>> Would there be someone willing to help me with some questions, mainly
>>>>> around icat and ifind. I dont mind doing it on list,
>>>
>>>       Well, if you are going to do it on this list, then I suggest that
>>> you
>>> start a new thread of discussion (ToD) rather than hijack an existing
>>> email ToD.
>>>
>>>       Folks, I am extremely disappointed to see ToD hijacking on a list
>>> comprised of sophisticated IT professionals, people who ought to know
>>> better than to do so. Please DO NOT hijack email ToD's.
>>>
>>> Sincerely,
>>> Paul Bain
>>>
>>>>> but I am likely to
>>>>> get my head around it faster through a IM session on MSN or Skype or
>>>>> the
>>>>> like.
>>>>>
>>>>> Thansk in advance
>>>>>
>>>>> -Al
>