[Snort-users] 403 Error from PulledPork

Rick Darsey rdarsey at ...16831...
Wed Apr 30 17:58:02 EDT 2014

I am attempting to configure my Snort server to use pulledpork.  I am a
registered user.  When I run pulledpork I receive a 403 error not matter
how long I wait.  See the output below. 

      _____ ____
     `----,\    )
      `--==\\  /    PulledPork v0.7.0 - Swine Flu!
     .-~~~~-.Y|\\_  Copyright (C) 2009-2013 JJ Cummings
  @_/        /  66\_  cummingsj at ...11827...
    |    \   \   _(")
     \   /-| ||'--'  Rules give me wings!
      \_\  \_\\

Config File Variable Debug
        snort_path = /usr/local/snort/bin/snort
        black_list = /usr/local/snort/rules/black_list.rules
        distro = FreeBSD-8.1
        temp_path = /tmp
        version = 0.7.0
        sorule_path = /usr/local/snort/so_rules
        IPRVersion = /usr/local/snort/rules/
        rule_path = /usr/local/snort/rules/snort.rules
        ignore = deleted.rules,experimental.rules,local.rules
        rule_url = ARRAY(0x903e43c)
        sid_msg_version = 1
        sid_changelog = /var/log/sid_changes.log
        sid_msg = /usr/local/snort/sid-msg.map
        local_rules = /usr/local/snort/rules/local.rules
        config_path = /usr/local/snort/etc/snort.conf MISC (CLI and
Autovar) Variable Debug:
        arch Def is: i386
        Config Path is: /usr/local/snort/pulledpork/etc/pulledpork.conf
        Distro Def is: FreeBSD-8.1
        Disabled policy specified
        local.rules path is: /usr/local/snort/rules/local.rules
        Rules file is: /usr/local/snort/rules/snort.rules
        sid changes will be logged to: /var/log/sid_changes.log
        sid-msg.map Output Path is: /usr/local/snort/sid-msg.map
        Snort Version is:
        Snort Config File: /usr/local/snort/etc/snort.conf
        Snort Path is: /usr/local/snort/bin/snort
        SO Output Path is: /usr/local/snort/so_rules/
        Will process SO rules
        Extra Verbose Flag is Set
        Verbose Flag is Set
        Base URL is:
Checking latest MD5 for snortrules-snapshot-2961.tar.gz....
        Fetching md5sum for: snortrules-snapshot-2961.tar.gz.md5
** GET
deb7de7f9ed0b3311a45278cd5aaba818130 ==> 403 Forbidden (2s)
        A 403 error occurred, please wait for the 15 minute timeout
        to expire before trying again or specify the -n runtime switch
        You may also wish to verfiy your oinkcode, tarball name, and
other configuration options
        Error 403 when fetching
http://www.snort.org/reg-rules/snortrules-snapshot-2961.tar.gz.md5 at
/usr/local/snort/pulledpork/pulledpork.pl line 463
'snortrules-snapshot-2961.tar.gz', '/tmp/',
'http://www.snort.org/reg-rules/') called at
/usr/local/snort/pulledpork/pulledpork.pl line 1847

I have checked everything that I know of and cannot find the cause of
the 403 error.

Thank you,

Rick Darsey
Director of Network Operations

More information about the Snort-users mailing list