[Snort-users] active response

amin Salehi seyedamin_salehi at ...131...
Mon Jul 29 06:41:36 EDT 2013


hi.i edit snort.conf like this :
i write a rule in local.rules:


i start snort like this:
snort -q -c /etc/snort/snort.conf -A console

but when i enter target url in browser nothing happend and i can see the home page of target site.why active response dont work?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130729/b347a3e2/attachment.html>


More information about the Snort-users mailing list