[Snort-users] Help with oinkmaster

Andreas Östling andreaso at ...236...
Wed Feb 22 10:12:11 EST 2006

Look close and you'll see that it first downloads the 2.3 tarball and 
then the 2.2 tarball. You have for some reason specified two URLs in 
oinkmaster.conf (or multiple -u <url> arguments), where the second one 
points to a non-existent file. Remove the snortrules-snapshot-2_2.tar.gz 
URL and it should work.

I'd also strongly recommend that you make sure you run the latest 
version of Snort and use the 2.4 rules instead, although that has 
nothing do to with this issue.


On Wed, 22 Feb 2006, CasperLinux wrote:

> I have tried using oinkmaster (v1.2) to get latest Snort rules but I'm
> encountering the error at the end of the post when run from Cron or command
> line.  It finds the file and downloads it (or appears to) but then it begins
> downloading a file again?
> Is this a configuration issue within oinkmaster itself?  I'm presuming that
> the latter part is telling me that it is finding the web page but when
> sending the request for the file its coming back as not found.
> Any ideas?
> Don
> Loading /etc/oinkmaster.conf
> Downloading file from http://www.snort.org/pub-bin/oinkmaster.cgi/[oink
> code]/snortrules-snapshot-2.3.tar.gz... done.
> Archive successfully downloaded, unpacking... done.
> Downloading file from
> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz...
> /usr/sbin/oinkmaster: Error: could not download from
> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz. Output from
> wget follows:

More information about the Snort-users mailing list