[Snort-users] Pulledpork Returning 403 on snortrules-snapshot

JJ Cummings cummingsj at ...11827...
Sun Feb 3 19:49:14 EST 2013


Most likely you can just update to the latest version of snort (PP reads what you have and attempts to retrieve the supporting rule set version)

Sent from the iRoad

On Feb 3, 2013, at 16:55, Joel Esler <jesler at ...1935...> wrote:

> You are attempting to download 2852.  Which had been eol'ed for years.  
> 
> Change that to 2940 and you'll get the latest ruleset. 
> 
> --
> Joel Esler
> Sent from my iPhone 
> 
> On Feb 3, 2013, at 6:39 PM, Dan Rossiter <dan.rossiters at ...11827...> wrote:
> 
>> In running pulledpork, I'm getting a 403 error downloading the snortrules-snapshot tarball. All the other files (opensource & emerging.rules) download without a problem after I comment out the snapshot line.
>> 
>> Is this a known issue? Any suggestions on how to resolve? Obviously the oinkcode is correct since the other files worked and the tarball name is simply the name pre-included in the config file.
>> 
>> The specific error being throws is the following:
>> 
>> Checking latest MD5 for snortrules-snapshot-2852.tar.gz....
>>         A 403 error occurred, please wait for the 15 minute timeout
>>         to expire before trying again or specify the -n runtime switch
>>         You may also wish to verfiy your oinkcode, tarball name, and other configuration options
>>         Error 403 when fetching https://www.snort.org/reg-rules/snortrules-snapshot-2852.tar.gz.md5 at pulledpork/pulledpork.pl line 453
>>         main::md5file('<oinkcode here>', 'snortrules-snapshot-2852.tar.gz', '/tmp/', 'https://www.snort.org/reg-rules/') called at pulledpork/pulledpork.pl line 1758
>> 
>> -Dan
>> ------------------------------------------------------------------------------
>> Everyone hates slow websites. So do we.
>> Make your web apps faster with AppDynamics
>> Download AppDynamics Lite for free today:
>> http://p.sf.net/sfu/appdyn_d2d_jan
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>> 
>> Please visit http://blog.snort.org to stay current on all the latest Snort news!
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_jan
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130203/2aff3f7f/attachment.html>


More information about the Snort-users mailing list