[Snort-users] Intermittent Pulled Pork Error
jesler at ...1935...
Wed Feb 16 22:03:35 EST 2011
We shouldn't. We've notified the web-team. How often are you trying to pull rule updates? Just out of curiosity.
Sent from my iPad
Please excuse the brevity
On Feb 16, 2011, at 4:04 PM, "Weir, Jason" <jason.weir at ...14916...> wrote:
> I changed the rules file name to snortrules-snapshot-edge.tar.gz as
> indicated below and I'm intermittently still getting the 500 error..
> "Error 500 when fetching
> https://www.snort.org/reg-rules/snortrules-snapshot-2904.tar.gz.md5 at
> /usr/local/bin/pulledpork.pl line 390"
> Just tried it manually and it worked fine... You guys having a delivery
>> -----Original Message-----
>> From: Nigel Houghton [mailto:nhoughton at ...1935...]
>> Sent: Wednesday, February 16, 2011 1:38 PM
>> To: Weir, Jason
>> Cc: Snort Users
>> Subject: Re: [Snort-users] Intermittent Pulled Pork Error
>> On Wed, 16 Feb 2011 13:32:45 -0500, Nigel Houghton wrote:
>>> On Wed, 16 Feb 2011 13:05:09 -0500, Weir, Jason wrote:
>>>> Doesn't happen all of the time...
>>>> Error 500 when fetching
>> https://www.snort.org/reg-rules/snortrules-snapshot-2904.tar.gz.md5 at
>>>> /usr/local/bin/pulledpork.pl line 390
>>> That's not a PulledPork error, that's a website error. The
>> file isn't
>>> there, which strictly speaking shouldn't be a 500 server error, but
>>> since the application that handles looking for the file
>> can't find it,
>>> the server will return the application error instead of a
>> 404 not found.
>>> With that said, I'll forward this to our Snort web team for
>> Actually, no I won't. After looking at snort.org I see that
>> the 126.96.36.199
>> rule set is not yet available for registered users. So, you'll get a
>> 404 (or 500) for the rules file too.
>> You can fix this for future use by using
>> snortrules-snapshot-edge.tar.gz as the name of your rules file. That
>> way, you will get the latest version of rules for either
>> registered or
>> subscriber rules automatically. Right now, for registered users this
>> will be a 188.8.131.52 rule set. Which should work with 184.108.40.206.
>> Now, per the rules of the drinking game, I will be taking a
>> shot or two
>> for replying to my own email.
>> Nigel Houghton
>> Head Mentalist
>> SF VRT Department of Intelligence Excellence
>> http://vrt-blog.snort.org/ && http://labs.snort.org/
> Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
> The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
> Pinpoint memory and threading errors before they happen.
> Find and fix more than 250 security defects in the development cycle.
> Locate bottlenecks in serial and parallel code that limit performance.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users