[Snort-users] Snort IP blacklist issue

ha dinhphu hadinhphu at ...11827...
Fri Aug 14 14:12:17 EDT 2015


Hi kitty,

Yes my /tmp directory is available with rwx permission by all user. I ran
the command as root, so i don't think that's the problem.
https://code.google.com/p/pulledpork/issues/detail?id=166 -- another user
has the same problem.
http://sourceforge.net/p/snort/mailman/message/32913112/  --snort-user

On Fri, Aug 14, 2015 at 1:04 PM, waldo kitty <wkitty42 at ...14940...>
wrote:

> On 08/14/2015 12:21 PM, ha dinhphu wrote:
> > IP Blacklist download of
> >
> http://talosintel.com/files/additional_resources/ips_blacklist/ip-filter.blf..
> ..
> > Reading IP List...
> > Couldn't read /tmp/296.170136981772-black_list.rules - No such file or
> directory
>
> what linux are you using? does it have a working /tmp directory that is
> writable
> by all users?
>
> both of your reports have been failures to read a file that should have
> been
> downloaded into /tmp... these failures seem to point to /tmp not existing
> or it
> is not writable by the user your pulledpork is running as...
>
> --
>   NOTE: No off-list assistance is given without prior approval.
>         *Please keep mailing list traffic on the list* unless
>         private contact is specifically requested and granted.
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150814/410d4514/attachment.html>


More information about the Snort-users mailing list