"Jason Ziemba" <jasonziemba.net> writes:

> I am attempting to configure a few SNORT rules that will make use of the
> RESP and/or REACT functions.
> However, when I add either RESP or REACT to the rule-set SNORT reports
> that they are unknown keywords and proceeds to shut down..

You need to compile snort with flexresp enabled.

./configure --enable-flexresp

> I have reviewed the documentation on syntax and even attempted to
> add the examples listed in the documentation as a basic test, no go.
>
> Has anybody had this problem before?
> Any ideas on how to get around the problem without sacrifice the
> functionality these items provide?
>
> Jason Ziemba

-- 
Chris Green <cmguab.edu>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]