[Snort-devel] maybe bug?
bilnar at ...2605...
Mon Aug 16 08:03:13 EDT 2004
snort service crash, if use this rules:
alert tcp any any -> $HOME_NET any (msg: "test rst_all"; resp: rst_all;)
alert tcp any any -> $HOME_NET any (msg: "test icmp_all"; resp: icmp_all;)
alert tcp any any -> $HOME_NET any (msg: "test react"; react: block;)
I wirte this in experimental.rules and try to ping my host. snort
service offen fails.
Win2k sp4, snort 2.1.3
# Sorry for my english
ICL KME CS, Kazan
mailto:bilnar at ...2605...
More information about the Snort-devel