Re: REACT and RESP problems.

[Chris Green <cmg () uab edu>]

"Jason Ziemba" <jason () ziemba net> writes:

> I am attempting to configure a few SNORT rules that will make use of the
> RESP and/or REACT functions.
> However, when I add either RESP or REACT to the rule-set SNORT reports
> that they are unknown keywords and proceeds to shut down..

You need to compile snort with flexresp enabled.

./configure --enable-flexresp

>  I have reviewed the documentation on syntax and even attempted to
> add the examples listed in the documentation as a basic test, no go.
>  
> Has anybody had this problem before? 
> Any ideas on how to get around the problem without sacrifice the
> functionality these items provide?
>  
> Jason Ziemba

-- 
Chris Green <cmg () uab edu>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users