[Snort-sigs] Active Response in what version?

Shane Smith shane at ...1839...
Mon Oct 27 15:06:21 EST 2003


Hey Snort Team,

Reading through the snort manuals, ( http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.3.22 ) it appears as active response is available starting in the 2.0.0 version.  But, I am getting the error "Unknown keyword 'resp' in rule!".  Did I forget to activate something important, or am I just not running the correct version?  (I'm running 2.0.0 in my test environment)

Thanks,
Shane Smith
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20031027/5ea82f29/attachment.html>


More information about the Snort-sigs mailing list