[Snort-users] Snort IP blacklist issue

waldo kitty wkitty42 at ...14940...
Fri Aug 14 14:04:36 EDT 2015

On 08/14/2015 12:21 PM, ha dinhphu wrote:
> IP Blacklist download of
> http://talosintel.com/files/additional_resources/ips_blacklist/ip-filter.blf....
> Reading IP List...
> Couldn't read /tmp/296.170136981772-black_list.rules - No such file or directory

what linux are you using? does it have a working /tmp directory that is writable 
by all users?

both of your reports have been failures to read a file that should have been 
downloaded into /tmp... these failures seem to point to /tmp not existing or it 
is not writable by the user your pulledpork is running as...

  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

More information about the Snort-users mailing list