[Snort-devel] problem with react, resp.

chiba4mail chiba4mail at ...2440...
Tue Apr 27 05:23:10 EDT 2004


 --- jvarlet at ...2497... ha scritto: > 
> Hi, 
>
> I created a snort rule (just to test) to have some
reaction
> with an attack. 
> This rule works good when i do not add "react" or
"resp" in the rule. 

> my snort version : 2.1.1 (build 24)


> ma regle :
> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS
$HTTP_PORTS (msg:"TEST"; content:"SEARCH";
classtype:attempted-admin;depth:8; nocase;
react:block, msg; sid:62354; rev:8;)


> In /var/log/messages :
> FATAL ERROR : ....=> Unknown keyword ' react'
> Snort does not boot.....

> Can you help me ?

Did you use the --enable-flexresp option with
configure script?

Bye,
Alex




	

	
		
____________________________________________________________
Yahoo! Companion - Scarica gratis la toolbar di Ricerca di Yahoo! 
http://companion.yahoo.it




More information about the Snort-devel mailing list