[Snort-users] Problem Updating Rules with PulledPork

Michael Steele michaels at ...9077...
Wed Sep 18 16:51:47 EDT 2013

You understand if you are not paying for rule updates that you can only download or try the download once every 15 minutes. Even if the rule update fails, you must wait 15 minutes.


Clear the assigned PulledPork temp folder and give it another try. You can also assign the PulledPork temp to the c:\windows\temp folder. Could be a permission problem? 


Best regards,



WINSNORT.com Management…


****************** Established ~ 2001 *******************

*          Visit Us @  <http://www.winsnort.com/> http://www.winsnort.com           *

*      ~~ FREE WinIDS Snort installation guides ~~      *

*               ~~ FREE support forums ~~               *

* Snort: Open Source Network IDS -  <http://www.snort.org/> http://www.snort.org *



From: JJ Cummings [mailto:cummingsj at ...11827...] 
Sent: Wednesday, September 18, 2013 1:14 PM
To: Benjamin Lincoln
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Problem Updating Rules with PulledPork


Something is causing the download to not complete correctly....

Sent from the iRoad

On Sep 18, 2013, at 10:46, Benjamin Lincoln <BLincoln at ...15832... <mailto:BLincoln at ...15832...> > wrote:



I am currently running Snort and Pulled Pork 0.7.0 on Windows 2008R2. When using pulled pork to update the rules, it will just keep trying to download new rules over and over again. I see the rule file getting created in the tmp directory, and it will grow to 18 kb, but then shrink back down to 8 kb after pulled pork tries to grab the file again. Basically, it will just keep saying the MD5 doesn’t match and try to keep re downloading the file. Any Ideas on this?


Benjamin Lincoln
IT Security Analyst Support

Banner Bank

Internal Ext. 53274




LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151 <http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk> &iu=/4140/ostg.clktrk

Snort-users mailing list
Snort-users at lists.sourceforge.net <mailto:Snort-users at lists.sourceforge.net> 
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130918/c1f323ea/attachment.html>

More information about the Snort-users mailing list