[Snort-users] (no subject)
M.Szarpak at ...137...
Sun Jul 23 04:28:20 EDT 2000
You should configure snort with flexresp option during the installation,
and then the "resp" rule option is enabled.
To do that you should have libnet library installed. You can get it
> Has anyone been able to get the resp: to work in snort, I`ve tried it on
> numerous versions and have yet to get it to work..
> example with the last one I tried it with, this is with snort 1.6.3
> ERROR: smtp-lib (2) => Unknown keyword "resp" in rule!
> alert tcp !$HOME_NET any -> $HOME_NET 25 (msg:"IDS032 -
> SMTP-expn-decode";flags:PA; resp:rst_snd; content:"expn decode";)
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
More information about the Snort-users