[Snort-users] Oinkmaster fails to download rules

Joel Esler jesler at ...1935...
Fri Mar 9 10:49:27 EST 2012


When you login to Snort.org, on your "Account" or "Oinkcode" page there are instructions on how to configure PulledPork (which we recommend over Oinkmaster) and Oinkmaster on how to pull the correct rulepack.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


On Mar 9, 2012, at 9:43 AM, Jeronimo L. Cabral wrote:

> Sorry.....I had an error in the URL, this is mine:
> 
> http://www.snort.org/dl/rules/snortrules-snapshot-2921.tar.gz
> 
> I've installed snort 2.9.2.1 but the Oinkmaster error appears.
> 
> What can be the problem ???
> 
> On Fri, Mar 9, 2012 at 11:39 AM, Joel Esler <jesler at ...1935...> wrote:
>> On Fri, Mar 09, 2012 at 11:35:00AM -0300, Jeronimo L. Cabral wrote:
>>> Dear, I use Oinkmaster to download rules as registered user through a
>>> proxy server I'veconfigred in /etc/wgetrc. But I fail, look:
>>> 
>>> root at ...15536...:/etc# oinkmaster -o /usr/local/snort/rules
>>> Loading /etc/oinkmaster.conf
>>> Downloading file from
>>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz...
>>> /usr/sbin/oinkmaster: Error: could not download from
>>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz. Output
>>> from wget follows:
>>> 
>>>  --2012-03-09 11:29:21--
>>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz
>>> Connecting to 10.4.133.106:4900... connected.
>>> Proxy request sent, awaiting response... 403 Forbidden
>>> 2012-03-09 11:29:22 ERROR 403: Forbidden.
>>> Oink, oink. Exiting...
>> 
>> We haven't distributed rules for 2.2.0 for about...  8 years?  At least?
>> 
>> 
>> I suggest updating to Snort 2.9.2.2 and downloading 2.9.2.2 rules.
>> 
>> --
>> Joel Esler
>> Senior Research Engineer, VRT
>> OpenSource Community Manager
>> Sourcefire
>> 
> 
> ------------------------------------------------------------------------------
> Virtualization & Cloud Management Using Capacity Planning
> Cloud computing makes use of virtualization - but cloud computing 
> also focuses on allowing computing to be delivered as a service.
> http://www.accelacomm.com/jaw/sfnl/114/51521223/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!





More information about the Snort-users mailing list