[Snort-users] Error rules update

Jeremy Hoel jthoel at ...11827...
Thu May 1 09:45:07 EDT 2014


Yes. Your snort is too old and no longer supported.  You need to upgrade
it.
On May 1, 2014 3:26 AM, "basant subba" <basantsubba at ...11827...> wrote:

> @Jeremy:: My snort version is  2.9.2 and I am using pulledpork
> version 0.7.0. Is that gonna be a problem?
>
>
> On Thu, May 1, 2014 at 11:29 AM, basant subba <basantsubba at ...11827...>wrote:
>
>> My snort User name and email are both basantsubba at ...12249... Thank you
>> for looking into this matter personally. And Jeremy pointed out that
>> there's a dependency between the snort and pulledpork versions.
>> My snort version is  2.9.2 and I am using pulledpork version 0.7.0. Is
>> that gonna be a problem. I am also using proxy server to connect to
>> internet. Once again thank you for all the help.
>>
>>
>> On Thu, May 1, 2014 at 1:03 AM, Joel Esler (jesler) <jesler at ...589...>wrote:
>>
>>>  Dear Basant,
>>>
>>> In order to look into this issue, I am going to need your Snort.orgusername and email address.  Please feel free to email me directly with
>>> that information.
>>>
>>>  --
>>> *Joel Esler*
>>> Open Source Manager
>>> Threat Intelligence Team Lead
>>> Vulnerability Research Team
>>>
>>>
>>>  On Apr 30, 2014, at 2:53 PM, Jeremy Hoel <jthoel at ...11827...> wrote:
>>>
>>>  pulledpork uses by default the version of snort that you have
>>> installed.  newer versions of the rulesets won't run on your old install.
>>>
>>>  If you mean that you manually set the snort version in the pulledpork
>>> config and you are still getting the errors, do you have your oink code set
>>> properly and/or are you using a http proxy?
>>>
>>>
>>>
>>>
>>> On Wed, Apr 30, 2014 at 6:24 PM, basant subba <basantsubba at ...11827...>wrote:
>>>
>>>> It doesn't work for snortrules-snapshot-2946.tar.gz<http://snort.org/downloads/2866>,
>>>> snortrules-snapshot-2956.tar.gz <http://snort.org/downloads/2866> and
>>>> snortrules-snapshot-2960.tar.gz <http://snort.org/downloads/2866>which are all listed in Registered User list in Snort home-page. Getting
>>>> the same error. How to get over this problem? Have been stuck up with this
>>>> problem for quite sometime now.
>>>>
>>>>
>>>> On Wed, Apr 30, 2014 at 9:11 PM, waldo kitty <wkitty42 at ...14940...>wrote:
>>>>
>>>>> On 4/30/2014 11:00 AM, Michel Renard wrote:
>>>>> > https://www.snort.org/reg-rules/snortrules-snapshot-2931.tar.gz.md5at
>>>>>
>>>>> there's your problem right there... 2.9.3.1 is no longer supported as
>>>>> it is EoL
>>>>> (End of Life)... it has been EoL since 2013 Sep 30...
>>>>>
>>>>>
>>>>> http://blog.snort.org/2013/09/snort-2931-is-now-eol-for-rule-support.html
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> NOTE: No off-list assistance is given without prior approval.
>>>>>        Please keep mailing list traffic on the list unless
>>>>>        private contact is specifically requested and granted.
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
>>>>> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
>>>>> unparalleled scalability from the best Selenium testing platform
>>>>> available.
>>>>> Simple to use. Nothing to install. Get started now for free."
>>>>> http://p.sf.net/sfu/SauceLabs
>>>>> _______________________________________________
>>>>> Snort-users mailing list
>>>>> Snort-users at lists.sourceforge.net
>>>>> Go to this URL to change user options or unsubscribe:
>>>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>>>> Snort-users list archive:
>>>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>>>
>>>>> Please visit http://blog.snort.org to stay current on all the latest
>>>>> Snort news!
>>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
>>>> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
>>>> unparalleled scalability from the best Selenium testing platform
>>>> available.
>>>> Simple to use. Nothing to install. Get started now for free."
>>>> http://p.sf.net/sfu/SauceLabs
>>>> _______________________________________________
>>>> Snort-users mailing list
>>>> Snort-users at lists.sourceforge.net
>>>> Go to this URL to change user options or unsubscribe:
>>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>>> Snort-users list archive:
>>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>>
>>>> Please visit http://blog.snort.org to stay current on all the latest
>>>> Snort news!
>>>>
>>>
>>> ------------------------------------------------------------------------------
>>> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
>>> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
>>> unparalleled scalability from the best Selenium testing platform
>>> available.
>>> Simple to use. Nothing to install. Get started now for free."
>>>
>>> http://p.sf.net/sfu/SauceLabs_______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.sourceforge.net
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.sourceforge.net/lists/listinfo/snort-users
>>> Snort-users list archive:
>>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>>
>>>
>>
>
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140501/680f236c/attachment.html>


More information about the Snort-users mailing list