[Snort-users] Error 500 today?

Jefferson, Shawn Shawn.Jefferson at ...14448...
Thu Jan 8 12:58:49 EST 2015


Thanks, I believe I have this sorted out on my end… but I think this is an interaction with our proxy and pulledpork, which I’ve been able to work around. I’m not on the latest pulledpork, so I should try that one first just to make sure.


From: Joel Esler (jesler) [mailto:jesler at ...589...]
Sent: January 07, 2015 9:31 AM
To: Jefferson, Shawn
Cc: Andre DiMino; snort-users mailinglist
Subject: Re: [Snort-users] Error 500 today?

Nothing has changed from our side since well before Christmas.


--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

On Jan 7, 2015, at 12:15 PM, Jefferson, Shawn <Shawn.Jefferson at ...14448...<mailto:Shawn.Jefferson at ...14448...>> wrote:

I seem to be having a similar problem downloading rules via pulledpork.

The strange thing is that it works fine on my Ubuntu 10.04 installs, but does not work on Ubuntu 12.04.  I get a 500 error trying to download snort rules.  Emerging Threats rules work fine.  We did switch to a different proxy server around that time, and I’ve been troubleshooting from that angle, since it seemed like most people aren’t having a problem any longer?  However, even going back to my old proxy, which is still in place, the rule downloads still do not work.

Any suggestions on how to fix or further troubleshoot this?



From: Joel Esler (jesler) [mailto:jesler at ...589...]
Sent: December 15, 2014 10:23 AM
To: Andre DiMino
Cc: snort-users mailinglist
Subject: Re: [Snort-users] Error 500 today?

Fantastic.

Apparently we were having problems will older versions of Wget and curl..

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos

On Dec 15, 2014, at 1:11 PM, Andre DiMino <adimino at ...16035...<mailto:adimino at ...16035...>> wrote:

Works great now Joel.

Thanks very much !

On Mon, Dec 15, 2014 at 12:53 PM, Joel Esler (jesler) <jesler at ...589...<mailto:jesler at ...589...>> wrote:


We made some changes within in the past hour.  Still seeing the issue?

On Dec 15, 2014, at 10:29 AM, Andre DiMino <adimino at ...16035...<mailto:adimino at ...16035...>>
wrote:

Does anyone know if this was addressed and fixed?
As of this morning, I still am seeing Error 500 when using pulledpork.
My last successful update was 12/7/14

Thanks!
Andre'

On Fri, Dec 5, 2014 at 1:55 PM, Jeremy Hoel <jthoel at ...11827...<mailto:jthoel at ...11827...>> wrote:

Joel posted to the list earlier that they where moving g snort.org<http://snort.org/> around
and there might be some issues.

On Dec 5, 2014 11:44 AM, "Andre DiMino" <adimino at ...16035...<mailto:adimino at ...16035...>> wrote:


Everything worked fine up until this morning.  Now I see:

"Checking latest MD5 for snortrules-snapshot-2962.tar.gz....
Error 500 when fetching
https://www.snort.org/reg-rules/snortrules-snapshot-2962.tar.gz.md5 at
/home/xxx/xxx/pulledpork-0.7.0/pulledpork.pl line 463.

main::md5file('my_oinkcode', 'snortrules-snapshot-2962.tar.gz', '/tmp/',
'https://www.snort.org/reg-rules/') called at
/home/xxx/xxx/pulledpork-0.7.0/pulledpork.pl line 1847"

Any thoughts?
--

Andre' M. DiMino
DeepEnd Research
http://deependresearch.org<http://deependresearch.org/>
http://sempersecurus.org<http://sempersecurus.org/>

"Make sure that nobody pays back wrong for wrong, but always try to be
kind to each other and to everyone else" - 1 Thess 5:15 (NIV)


------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE

http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org<http://blog.snort.org/> to stay current on all the latest Snort
news!




--

Andre' M. DiMino
DeepEnd Research
http://deependresearch.org<http://deependresearch.org/>
http://sempersecurus.org<http://sempersecurus.org/>

"Make sure that nobody pays back wrong for wrong, but always try to be
kind to each other and to everyone else" - 1 Thess 5:15 (NIV)

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org<http://blog.snort.org/> to stay current on all the latest Snort
news!





--

Andre' M. DiMino
DeepEnd Research
http://deependresearch.org<http://deependresearch.org/>
http://sempersecurus.org<http://sempersecurus.org/>

"Make sure that nobody pays back wrong for wrong, but always try to be
kind to each other and to everyone else" - 1 Thess 5:15 (NIV)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150108/f509986e/attachment.html>


More information about the Snort-users mailing list