react

[Ramin Alidousti <ramin () cannon eng us uu net>]

Hi,

# cat tt
alert udp any any <> any 53 (react: block, msg;)
# snort -c tt

        --== Initializing Snort ==--
Checking PID path...
PATH_VARRUN is set to /var/run/ on this operating system

Initializing Network Interface eth1
Decoding Ethernet on interface eth1
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
Parsing Rules file tt

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...

ERROR: tt (1) => Unknown keyword "react" in rule!
Fatal Error, Quitting..


Can someone explain what I'm doing wrong and why snort says Unknown keyword "react"?

Ramin

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users