[Snort-users] Snort IP blacklist issue

ha dinhphu hadinhphu at ...11827...
Thu Aug 27 13:26:13 EDT 2015


It's been a while since I asked about this problem. Does anyone has
solution for it?

On Fri, Aug 14, 2015 at 1:12 PM, ha dinhphu <hadinhphu at ...11827...> wrote:

> Hi kitty,
>
> Yes my /tmp directory is available with rwx permission by all user. I ran
> the command as root, so i don't think that's the problem.
> https://code.google.com/p/pulledpork/issues/detail?id=166 -- another user
> has the same problem.
> http://sourceforge.net/p/snort/mailman/message/32913112/  --snort-user
>
> On Fri, Aug 14, 2015 at 1:04 PM, waldo kitty <wkitty42 at ...14940...>
> wrote:
>
>> On 08/14/2015 12:21 PM, ha dinhphu wrote:
>> > IP Blacklist download of
>> >
>> http://talosintel.com/files/additional_resources/ips_blacklist/ip-filter.blf..
>> ..
>> > Reading IP List...
>> > Couldn't read /tmp/296.170136981772-black_list.rules - No such file or
>> directory
>>
>> what linux are you using? does it have a working /tmp directory that is
>> writable
>> by all users?
>>
>> both of your reports have been failures to read a file that should have
>> been
>> downloaded into /tmp... these failures seem to point to /tmp not existing
>> or it
>> is not writable by the user your pulledpork is running as...
>>
>> --
>>   NOTE: No off-list assistance is given without prior approval.
>>         *Please keep mailing list traffic on the list* unless
>>         private contact is specifically requested and granted.
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>>
>> Please visit http://blog.snort.org to stay current on all the latest
>> Snort news!
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150827/a1ee1eec/attachment.html>


More information about the Snort-users mailing list