[Snort-users] 2.9.0.5, react works only for the first rule

Hatim Alghamdi hat_gh at ...131...
Thu Jun 23 11:11:56 EDT 2011


Hi,

I just installed 2.9.0.5 on CentOS 5.4 using Vincent Cojot’s RPMS and it works fine. I tried to use the react option with multiple alert rules but only the first rule do the reset/redirect and the first are only alerting but the react option doesn't work. Is this a normal behavior or is something wrong with my setup?


Regards,
Hatim




More information about the Snort-users mailing list