[Snort-users] using "react" on w32 snort ...

Erek Adams erek at ...950...
Thu Jun 19 20:00:04 EDT 2003


On Thu, 19 Jun 2003, Jon Baer wrote:

> i was attempting to test the react keyword on W32 and it spit out
> "PacketSendPacket failed" and then bailed out the win xp error sig is listed
> below (if it helps any) ...
>
> AppName: snort.exe AppVer: 0.0.0.0 ModName: ntdll.dll
> ModVer: 5.1.2600.1217 Offset: 00033adb
>
> is it just not supported @ this time?

It works just fine.

You need to install libnet package so that you can create packets.  React
builds a packet and then sends it.  That's what you'd need to make that
work.

http://www.securiteam.com/tools/5MP000A1YU.html

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list