[Snort-users] activate/dynamic rules problem

Mark Greenman mark.greenman.014 at ...11827...
Sun Jan 11 08:21:52 EST 2015


Hi. Do you know the reason for this warning after using activate/dynamic
rules:

WARNING: an activation rule with no dynamic rules matched.

The set of rules that I have used in the experiment are:

activate tcp 192.168.5.32 80 -> 192.168.4.22 50444 (msg:"adc!";
content:"Tree"; activates:1; sid:1000001;)
dynamic tcp 192.168.5.32 80 -> 192.168.4.22 50444 (msg:"dyn!";
activated_by:1; count:3; sid:1000002;)

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150111/623fc613/attachment.html>


More information about the Snort-users mailing list