Snort mailing list archives

Re: Resp: and react: don't work on w2k and XP ?


From: "Troll" <Troll () AsylumChat Net>
Date: Mon, 19 Aug 2002 21:08:02 +0200

Hi

Thats my Problem I get the pre compiled Version binarie for win32 version
1.8.7-win32.exe
At the INstallation I made custom installation and flexsep and all other
choices are marked. (made a full installation)
Thats why I'm wondering
I'm using XP prof. and winpcap 3.0 alpha


----- Original Message -----
From: "Matt Kettler" <mkettler () evi-inc com>
To: "Troll" <Troll () asylumchat net>; <snort-users () sourceforge net>
Sent: Monday, August 19, 2002 8:25 PM
Subject: Re: [Snort-users] Resp: and react: don't work on w2k and XP ?


Did you use the proper build of snort? flexresp is an OPTIONAL part of
snort which needs to be configured at compile time.

If your downloading binaries, get the flexresp version from whoever is
compiling snort for you. If you're compiling your own, use
--enable-flexresp as a parameter to configure.

This question is actually in the FAQ, Please Read The Fine FAQ in the
future :)

http://www.snort.org/docs/faq.html#5.6


At 04:16 PM 8/17/2002 +0200, Troll wrote:
Hello

I installt the newest versions from snort and winpcap my OS is XP prof.

now I want use the keywords resp: and react in snort rules but everytime
I
get the error Keyword in rule xyz is unknown.
Don't they work on XP and how can I else make an found packet to an lost
packet or kill the connect to this ip that found ?

greetz Troll



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: