[Snort-users] (no subject)

StrmShdw sectech at ...136...
Sat Jul 22 20:53:11 EDT 2000

Has anyone been able to get the resp: to work in snort, I`ve tried it on
numerous versions and have yet to get it to work..

example with the last one I tried it with, this is with snort 1.6.3

ERROR: smtp-lib (2) => Unknown keyword "resp" in rule!

alert tcp !$HOME_NET any -> $HOME_NET 25 (msg:"IDS032 -
SMTP-expn-decode";flags:PA; resp:rst_snd; content:"expn decode";)

More information about the Snort-users mailing list