[Snort-users] 403 Error from PulledPork

Steve Crow scrow at ...16818...
Fri May 23 10:55:29 EDT 2014

Did you find an answer to this problem? I have the same problem.

Steve Crow

-----Original Message-----
From: Rick Darsey [mailto:rdarsey at ...16831...] 
Sent: Wednesday, April 30, 2014 4:58 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] 403 Error from PulledPork

I am attempting to configure my Snort server to use pulledpork.  I am a
registered user.  When I run pulledpork I receive a 403 error not matter how
long I wait.  See the output below. 

      _____ ____
     `----,\    )
      `--==\\  /    PulledPork v0.7.0 - Swine Flu!
     .-~~~~-.Y|\\_  Copyright (C) 2009-2013 JJ Cummings
  @_/        /  66\_  cummingsj at ...11827...
    |    \   \   _(")
     \   /-| ||'--'  Rules give me wings!
      \_\  \_\\

Config File Variable Debug
        snort_path = /usr/local/snort/bin/snort
        black_list = /usr/local/snort/rules/black_list.rules
        distro = FreeBSD-8.1
        temp_path = /tmp
        version = 0.7.0
        sorule_path = /usr/local/snort/so_rules
        IPRVersion = /usr/local/snort/rules/
        rule_path = /usr/local/snort/rules/snort.rules
        ignore = deleted.rules,experimental.rules,local.rules
        rule_url = ARRAY(0x903e43c)
        sid_msg_version = 1
        sid_changelog = /var/log/sid_changes.log
        sid_msg = /usr/local/snort/sid-msg.map
        local_rules = /usr/local/snort/rules/local.rules
        config_path = /usr/local/snort/etc/snort.conf MISC (CLI and
Autovar) Variable Debug:
        arch Def is: i386
        Config Path is: /usr/local/snort/pulledpork/etc/pulledpork.conf
        Distro Def is: FreeBSD-8.1
        Disabled policy specified
        local.rules path is: /usr/local/snort/rules/local.rules
        Rules file is: /usr/local/snort/rules/snort.rules
        sid changes will be logged to: /var/log/sid_changes.log
        sid-msg.map Output Path is: /usr/local/snort/sid-msg.map
        Snort Version is:
        Snort Config File: /usr/local/snort/etc/snort.conf
        Snort Path is: /usr/local/snort/bin/snort
        SO Output Path is: /usr/local/snort/so_rules/
        Will process SO rules
        Extra Verbose Flag is Set
        Verbose Flag is Set
        Base URL is:
Checking latest MD5 for snortrules-snapshot-2961.tar.gz....
        Fetching md5sum for: snortrules-snapshot-2961.tar.gz.md5
** GET
deb7de7f9ed0b3311a45278cd5aaba818130 ==> 403 Forbidden (2s)
        A 403 error occurred, please wait for the 15 minute timeout
        to expire before trying again or specify the -n runtime switch
        You may also wish to verfiy your oinkcode, tarball name, and other
configuration options
        Error 403 when fetching
http://www.snort.org/reg-rules/snortrules-snapshot-2961.tar.gz.md5 at
/usr/local/snort/pulledpork/pulledpork.pl line 463
'snortrules-snapshot-2961.tar.gz', '/tmp/',
'http://www.snort.org/reg-rules/') called at
/usr/local/snort/pulledpork/pulledpork.pl line 1847

I have checked everything that I know of and cannot find the cause of the
403 error.

Thank you,

Rick Darsey
Director of Network Operations

"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.  Get
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort

More information about the Snort-users mailing list