[Snort-users] 2.9.0.5, react works only for the first rule

Russ Combs rcombs at ...1935...
Thu Jun 23 11:17:57 EDT 2011


Thanks Hatim.  That is a bug fixed in 2.9.1.  The beta is available now.

On Thu, Jun 23, 2011 at 11:11 AM, Hatim Alghamdi <hat_gh at ...131...> wrote:

> Hi,
>
> I just installed 2.9.0.5 on CentOS 5.4 using Vincent Cojot’s RPMS and it
> works fine. I tried to use the react option with multiple alert rules but
> only the first rule do the reset/redirect and the first are only alerting
> but the react option doesn't work. Is this a normal behavior or is something
> wrong with my setup?
>
>
> Regards,
> Hatim
>
>
> ------------------------------------------------------------------------------
> Simplify data backup and recovery for your virtual environment with
> vRanger.
> Installation's a snap, and flexible recovery options mean your data is
> safe,
> secure and there when you need it. Data protection magic?
> Nope - It's vRanger. Get your free trial download today.
> http://p.sf.net/sfu/quest-sfdev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please see http://www.snort.org/docs for documentation
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110623/0e447e19/attachment.html>


More information about the Snort-users mailing list