[Snort-devel] [ snort-Bugs-461016 ] problem with react

noreply at ...12... noreply at ...12...
Tue Nov 6 21:50:02 EST 2001


Bugs item #461016, was opened at 2001-09-12 13:59
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=461016&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 3
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Fyodor Yarochkin (fygrave)
Summary: problem with react

Initial Comment:
I have a sentence like "alert tcp any any <>
my_host_ip_address any (content: "GET"; msg "Stop!";
react: block, msg;)"

I recive an error "Critical: SendTCP: libnet_write_ip". 

The most strange thing is that with another sentences
like "alert tcp any any <> my_host_ip_address any (
content: "GET"; resp: icmp_net;)" It works

What happend?

----------------------------------------------------------------------

>Comment By: Fyodor Yarochkin (fygrave)
Date: 2001-11-06 21:37

Message:
Logged In: YES 
user_id=60781

1. did you forget ':' after msg :) (also any reason to use
double 'msg')
2. I'd love to see output with --enable-debug (also if you
could mail us your snort.conf as-is for testing, would be
great!

----------------------------------------------------------------------

Comment By: Martin Roesch (roesch)
Date: 2001-09-27 22:44

Message:
Logged In: YES 
user_id=18573

React is still beta code.  Can you read the BUGS file and
please send us the information that we need to make an
accurate diagnosis?  Thanks.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=461016&group_id=3357




More information about the Snort-devel mailing list