Snort mailing list archives

Re: Resp and React keywords don't work?


From: Scott Nursten <scottn () s2s ltd uk>
Date: Thu, 28 Mar 2002 08:56:05 +0000

Ditto this :) Nice one Erek. :)


You may want to also check that you used the --enable-flexresp when doing
your ./configure...! You will need to have libnet installed.

Regards,

Scott 

On 28/3/02 1:37 am, "Erek Adams" <erek () theadamsfamily net> wrote:

On Wed, 27 Mar 2002, Sheahan, Paul (PCLN-NW) wrote:


Just upgraded to Snort 1.8.4 and I'm running on RH Linux 7.0.

I noticed the new keywords resp and react, but so far when I've tried them,
I get an error such as:

"ERROR: /etc/snort/test.rules(10) => Unknown keyword "resp" in rule!"

Can someone tell me what I'm doing wrong? Every other keyword I tried seemed
to work fine.

They aren't new.  They've been around for quite awhile.

http://www.snort.org/docs/faq.html#5.6

Use the FAQ, Luke.  Use the FAQ, for it will guide you on your journey.

:)

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-- 



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: