[Snort-devel] react problem

Mario Alberto Ramirez Moreno mramirez at ...2045...
Tue Jun 17 05:46:23 EDT 2003


Hi!, i have installed snort 2.0.0rc1 for win32, it work´s really good, but
when i try to activate reac it doesn´t work 

when i start snort in line command 
Snort -c d:\snort\etc\snort.conf -l d:\Snort\log -i1 

it generate a warning like this at the end

database: schema version = 106
database: using the "log" facility
Warning: d:/snort/rules/experimental.rules(14) => Unknown keyword 'react' in
rule!
1558 Snort rules read...
1558 Option Chains linked into 205 Chain Headers
0 Dynamic rules
+++++++++++++++++++++++++++++++++++++++++++++++++++

Rule application order: ->activation->dynamic->alert->pass->log

        --== Initialization Complete ==--

-*> Snort! <*-
Version 2.0.0-ODBC-MySQL-WIN32 (Build 72)
By Martin Roesch (roesch at ...402..., www.snort.org)
1.7-WIN32 Port By Michael Davis (mike at ...27...,
www.datanerds.net/~mike)
1.8 - 2.0 WIN32 Port By Chris Reid (chris.reid at ...583...)

my experimental rule is:

alert tcp any any <> any 80 (content:"www.playboy.com";\
react:block,msg;msg:"Not for childrens!";)


Regard´s and thanks.


Bestel México
Sistemas
Conmutador 5354-2100 ext 2258
Directo 5354-2139
Cel. 04455-2699-3919





More information about the Snort-devel mailing list