[Snort-users] REACT and RESP problems.

Chris Green cmg at ...671...
Fri Feb 22 11:41:04 EST 2002

"Jason Ziemba" <jason at ...5055...> writes:

> I am attempting to configure a few SNORT rules that will make use of the
> RESP and/or REACT functions.
> However, when I add either RESP or REACT to the rule-set SNORT reports
> that they are unknown keywords and proceeds to shut down..

You need to compile snort with flexresp enabled.

./configure --enable-flexresp

>  I have reviewed the documentation on syntax and even attempted to
> add the examples listed in the documentation as a basic test, no go.
> Has anybody had this problem before? 
> Any ideas on how to get around the problem without sacrifice the
> functionality these items provide?
> Jason Ziemba

Chris Green <cmg at ...671...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx

More information about the Snort-users mailing list