[Snort-users] (no subject)

Maciek Szarpak M.Szarpak at ...137...
Sun Jul 23 04:28:20 EDT 2000


You should configure snort with flexresp option during the installation,
see below:

./configure --enable-flexresp

and then the "resp" rule option is enabled.

To do that you should have libnet library installed. You can get it


Best wishes,


StrmShdw wrote:
> Has anyone been able to get the resp: to work in snort, I`ve tried it on
> numerous versions and have yet to get it to work..
> example with the last one I tried it with, this is with snort 1.6.3
> ERROR: smtp-lib (2) => Unknown keyword "resp" in rule!
> alert tcp !$HOME_NET any -> $HOME_NET 25 (msg:"IDS032 -
> SMTP-expn-decode";flags:PA; resp:rst_snd; content:"expn decode";)
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

More information about the Snort-users mailing list