[Snort-users] Snort with PulledPork and Ubuntu 12.04 Server

Christian Gebler geblerchristian at ...14012...
Tue Jul 22 02:31:09 EDT 2014


That was just a test. I changed it back in "
https://www.snort.org/rules/$rule_file/$oinkcode", but same result.


2014-07-22 2:08 GMT+02:00 Joel Esler (jesler) <jesler at ...589...>:

>  I’ll have this fixed on the site asap.
>
>
>  On Jul 21, 2014, at 8:03 PM, JJC <cummingsj at ...11827...> wrote:
>
>  looks like your rule_url value is incorrect.  just remove the ?oinkcode=
> part of your rule_url in the pulledpork.conf
>
>  JJC
>
>
> On Mon, Jul 21, 2014 at 6:11 AM, Joel Esler (jesler) <jesler at ...589...>
> wrote:
>
>>  Can you write me offlist with your oinkcode or email address your
>> account is under?
>>
>> --
>> Joel Esler
>> Sent from my iPhone
>>
>> On Jul 21, 2014, at 7:43, "Christian Gebler" <
>> geblerchristian at ...14012...> wrote:
>>
>>   Hi,
>>
>>  I'm using Snort 2.9.6.2 with PulledPork 0.7.0 on an Ubuntu Server 12.04
>> LTS.
>>
>>  Since last week it is not possible to download the new VRT Snort
>> 2.9.6.2 Ruleset (now with https):
>>
>>  Checking latest MD5 for snortrules-snapshot-2962.tar.gz....
>> Fetching md5sum for: snortrules-snapshot-2962.tar.gz.md5
>> ** GET
>> https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5?oinkcode=<my
>> oinkcode> ==> 501 Not Implemented
>> Error 501 when fetching
>> https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5 at ./
>> pulledpork.pl line 463
>> main::md5file('<oinkcode>', 'snortrules-snapshot-2962.tar.gz',
>> '/etc/snort/rules/tmp/', 'https://www.snort.org/rules/') called at ./
>> pulledpork.pl line 1847
>>
>>
>>
>>  Any suggestions?
>>
>>  thx
>>
>>
>> ------------------------------------------------------------------------------
>> Want fast and easy access to all the code in your enterprise? Index and
>> search up to 200,000 lines of code with a free copy of Black Duck
>> Code Sight - the same software that powers the world's largest code
>> search on Ohloh, the Black Duck Open Hub! Try it now.
>> http://p.sf.net/sfu/bds
>>
>>  _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>
>> Please visit http://blog.snort.org to stay current on all the latest
>> Snort news!
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Want fast and easy access to all the code in your enterprise? Index and
>> search up to 200,000 lines of code with a free copy of Black Duck
>> Code Sight - the same software that powers the world's largest code
>> search on Ohloh, the Black Duck Open Hub! Try it now.
>> http://p.sf.net/sfu/bds
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>
>> Please visit http://blog.snort.org to stay current on all the latest
>> Snort news!
>>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140722/454c1044/attachment.html>


More information about the Snort-users mailing list