[Snort-devel] maybe bug?

Ильнар Борханов bilnar at ...2605...
Mon Aug 16 08:03:13 EDT 2004


Hello snort-devel,

snort service crash, if use this rules:
alert tcp any any -> $HOME_NET any (msg: "test rst_all"; resp: rst_all;)
alert tcp any any -> $HOME_NET any (msg: "test icmp_all"; resp: icmp_all;)
alert tcp any any -> $HOME_NET any (msg: "test react"; react: block;)

I wirte this in experimental.rules and try to ping my host. snort
service offen fails.

Win2k sp4, snort 2.1.3


# Sorry for my english

-- 
  Ilnar Borkhanow
  ICL KME CS, Kazan
  mailto:bilnar at ...2605...






More information about the Snort-devel mailing list