[Snort-users] activate/dynamic rules problem

Mark Greenman mark.greenman.014 at ...11827...
Sun Jan 11 08:21:52 EST 2015

Hi. Do you know the reason for this warning after using activate/dynamic

WARNING: an activation rule with no dynamic rules matched.

The set of rules that I have used in the experiment are:

activate tcp 80 -> 50444 (msg:"adc!";
content:"Tree"; activates:1; sid:1000001;)
dynamic tcp 80 -> 50444 (msg:"dyn!";
activated_by:1; count:3; sid:1000002;)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150111/623fc613/attachment.html>

More information about the Snort-users mailing list