[Snort-users] Pulled Pork error

SnortFan SnortFan at ...131...
Wed Dec 18 16:32:45 EST 2013


Hi Onno,
    Nope with the -S 2.9.5.5 I get the same error on the 2.9.5.5 rules as well. Also, I think we do have a subscription. I can wget the 2.9.5.6 rules. 

Thanks. 
Ed

Sent from a mobile device. 

> On Dec 18, 2013, at 4:13 PM, "onno at ...16627..." <onno at ...16627...> wrote:
> 
> Hi Ed,
> 
> I did, and it was because 2959 was only for subscribed users. As "only" registered user you have to download 2955. I solved it by running pulledpork with option "-S 2.9.5.5" (or with -s , not sure at the moment.)
> 
> Greetz,
> Onno.
> 
> Sent from my HTC
> 
> ----- Reply message -----
> From: "SnortFan" <SnortFan at ...131...>
> To: "snort-users at lists.sourceforge.net" <snort-users at ...3893...t>
> Subject: [Snort-users] Pulled Pork error
> Date: Wed, Dec 18, 2013 21:47
> 
> Hi everyone,
>      Has anyone ran across this error?
> 
>    Error 400 when fetchinghttp://www.snort.org/reg-rules/snortrules-snapshot-2956.tar.gz.md5 at /usr/local/etc/pulledpork/pulledpork.pl line 463
>    main::md5file('xxxxxxxmyoinkcodexxxxxxxxxxxxxx', 'snortrules-snapshot-2956.tar.gz', '/tmp/', 'http://www.snort.org/reg-rules/') called at /usr/local/etc/pulledpork/pulledpork.pl line 1847
> 
> I'm on centos 6.4 and I have updated my by running cpan Mozilla::CA IO::Socket::SSL
> 
> If I do a wget using --no-check-certificate. I can download the files. Is there a way to force pulled pork to not use SSL?
> 
> Thanks,
> Ed
> 
> Sent from a mobile device. 
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT 
> organizations don't have a clear picture of how application performance 
> affects their revenue. With AppDynamics, you get 100% visibility into your 
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20131218/6f4b2874/attachment.html>


More information about the Snort-users mailing list