[Snort-users] (no subject)

Maciek Szarpak M.Szarpak at ...137...
Sun Jul 23 04:28:20 EDT 2000


Hi,

You should configure snort with flexresp option during the installation,
see below:

./configure --enable-flexresp

and then the "resp" rule option is enabled.

To do that you should have libnet library installed. You can get it
from:

http://www.packetfactory.net/libnet

Best wishes,

Maciek.

StrmShdw wrote:
> 
> Has anyone been able to get the resp: to work in snort, I`ve tried it on
> numerous versions and have yet to get it to work..
> 
> example with the last one I tried it with, this is with snort 1.6.3
> 
> ERROR: smtp-lib (2) => Unknown keyword "resp" in rule!
> 
> alert tcp !$HOME_NET any -> $HOME_NET 25 (msg:"IDS032 -
> SMTP-expn-decode";flags:PA; resp:rst_snd; content:"expn decode";)
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users




More information about the Snort-users mailing list