[Snort-users] Pulledpork Returning 403 on snortrules-snapshot

Joel Esler jesler at ...1935...
Sun Feb 3 18:55:07 EST 2013


You are attempting to download 2852.  Which had been eol'ed for years.  

Change that to 2940 and you'll get the latest ruleset. 

--
Joel Esler
Sent from my iPhone 

On Feb 3, 2013, at 6:39 PM, Dan Rossiter <dan.rossiters at ...11827...> wrote:

> In running pulledpork, I'm getting a 403 error downloading the snortrules-snapshot tarball. All the other files (opensource & emerging.rules) download without a problem after I comment out the snapshot line.
> 
> Is this a known issue? Any suggestions on how to resolve? Obviously the oinkcode is correct since the other files worked and the tarball name is simply the name pre-included in the config file.
> 
> The specific error being throws is the following:
> 
> Checking latest MD5 for snortrules-snapshot-2852.tar.gz....
>         A 403 error occurred, please wait for the 15 minute timeout
>         to expire before trying again or specify the -n runtime switch
>         You may also wish to verfiy your oinkcode, tarball name, and other configuration options
>         Error 403 when fetching https://www.snort.org/reg-rules/snortrules-snapshot-2852.tar.gz.md5 at pulledpork/pulledpork.pl line 453
>         main::md5file('<oinkcode here>', 'snortrules-snapshot-2852.tar.gz', '/tmp/', 'https://www.snort.org/reg-rules/') called at pulledpork/pulledpork.pl line 1758
> 
> -Dan
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_jan
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130203/46613e1a/attachment.html>


More information about the Snort-users mailing list