[Snort-users] Snort Rule Downloading - Working now! (NOT!!!)

McCash, John John.McCash at ...10979...
Mon May 3 13:30:00 EDT 2004


Guys,
	I just ran oinkmaster to download new rules, and thought it worked. Unfortunately, upon closer examination, only the .map files were updated, not the .rules files... I'm running 2.1.2, and had downloaded the -2_1 rules file. I also downloaded the -CURRENT file, and verified that it DOES contain the rules updates.
		John

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Snortty
Sent: Monday, May 03, 2004 10:51 AM
To: snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort Rule Downloading - Working now!


I just ran this oinkmaster.pl, it worked for me also!
thanks for who ever fixed this - the unknown hero!
SW. 

--- "Rowland, Krisa W ERDC-ITL-MS Contractor"
<Krisa.W.Rowland at ...3768...> wrote:
> I ran my oinkmaster today and it updated for the
> first time in a while - try
> it.
> 
> -----Original Message-----
> From: M. Morgan [mailto:mikemorgan at ...468...]
> Sent: Monday, May 03, 2004 9:19 AM
> To: Gus Fritschie; snort-users at lists.sourceforge.net
> Subject: RE: [Snort-users] Snort Rule Downloading -
> No Updates Since
> 4/15?
> 
> 
> FYI: Snortcenter has the same problem and requires
> the .conf to be edited
> with the new download URL for sigs. Even then if
> fails to update "some" of
> the rules but it gets alot of them.
> 
> -----Original Message-----
> From: Gus Fritschie <gfritschie at ...125...>
> Sent: Apr 30, 2004 3:12 PM
> To: snort-users at lists.sourceforge.net
> Subject: RE: [Snort-users] Snort Rule Downloading -
> No Updates Since 4/15?
> 
> That is correct, I posted about this subject a
> couple of weeks ago and it 
> does not appear that either the 2.0 or 2.1 rules are
> being updated..........
> 
> >From: "Rowland, Krisa W ERDC-ITL-MS Contractor" 
> ><Krisa.W.Rowland at ...3768...>
> >To: 'Snortty' <cwcwcwg at ...131...>, Matt Kettler
> <mkettler at ...4108...>, 
> >"Shaffer, Paul D" <paul.d.shaffer at ...178...>, 
> >snort-users at lists.sourceforge.net
> >Subject: RE: [Snort-users] Snort Rule Downloading -
> No Updates Since 4/15?
> >Date: Fri, 30 Apr 2004 13:55:24 -0500
> >
> >This has been a major topic of conversation - no
> one has gotten updates in 
> >a
> >really long time.  Seems that the only sig updates
> that are coming out are
> >for CURRENT.
> >
> >-----Original Message-----
> >From: Snortty [mailto:cwcwcwg at ...131...]
> >Sent: Friday, April 30, 2004 1:30 PM
> >To: Matt Kettler; Shaffer, Paul D;
> snort-users at lists.sourceforge.net
> >Subject: [Snort-users] Snort Rule Downloading - No
> Updates Since 4/15?
> >
> >
> >
> >Hi, All,
> >
> >I did snort rules downloading/updating to my rules
> >files, using oinkmaster.pl, It did run ok, but no
> new
> >rules updated, which seems to be impossible. Last
> time
> >I ran this was 4/15.
> >
> >I'm running snort 2.0.6. In the oinkmaster.conf,
> the
>
>url:http://www.snort.org/dl/rules/snortrules-snapshot-2_0.tar.gz
> >
> >Which seems to correct.
> >
> >Anyone has some clues please?
> >
> >Thank you in advance.
> >Snortty.
> >
> >
> >
> >
> >
> >
> >
> >__________________________________
> >Do you Yahoo!?
> >Win a $20,000 Career Makeover at Yahoo! HotJobs
> >http://hotjobs.sweepstakes.yahoo.com/careermakeover
> >
> >
>
>-------------------------------------------------------
> >This SF.Net email is sponsored by: Oracle 10g
> >Get certified on the hottest thing ever to hit the
> market... Oracle 10g.
> >Take an Oracle 10g class now, and we'll give you
> the exam FREE.
>
>http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> >_______________________________________________
> >Snort-users mailing list
> >Snort-users at lists.sourceforge.net
> >Go to this URL to change user options or
> unsubscribe:
>
>https://lists.sourceforge.net/lists/listinfo/snort-users
> >Snort-users list archive:
>
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
>
_________________________________________________________________
> Watch LIVE baseball games on your computer with
> MLB.TV, included with MSN 
> Premium! 
>
http://join.msn.com/?page=features/mlb&pgmarket=en-us/go/onm00200439ave/dire
> ct/01/
> 
> 
> 
>
-------------------------------------------------------
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the
> market... Oracle 10g. 
> Take an Oracle 10g class now, and we'll give you the
> exam FREE. 
>
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or
> unsubscribe:
>
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> 
> 
>
-------------------------------------------------------
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the
> market... Oracle 10g. 
> Take an Oracle 10g class now, and we'll give you the
> exam FREE. 
>
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or
> unsubscribe:
>
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
>
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 



	
		
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs  
http://hotjobs.sweepstakes.yahoo.com/careermakeover 


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information.  
If you have received it in error, please notify the sender
immediately and delete the original.  Any unauthorized use of
this email is prohibited.
------------------------------------------------------------------------------------------------
[mf2]




More information about the Snort-users mailing list