[Snort-users] Error 500 today?

Joel Esler (jesler) jesler at ...589...
Thu Jan 8 13:51:04 EST 2015


Shawn,

Thanks for following up.


> On Jan 8, 2015, at 12:58 PM, Jefferson, Shawn <Shawn.Jefferson at ...14596....> wrote:
> 
> Thanks, I believe I have this sorted out on my end… but I think this is an interaction with our proxy and pulledpork, which I’ve been able to work around. I’m not on the latest pulledpork, so I should try that one first just to make sure.  
>  
>  
> From: Joel Esler (jesler) [mailto:jesler at ...589...] 
> Sent: January 07, 2015 9:31 AM
> To: Jefferson, Shawn
> Cc: Andre DiMino; snort-users mailinglist
> Subject: Re: [Snort-users] Error 500 today?
>  
> Nothing has changed from our side since well before Christmas.
>  
>  
> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Talos
>  
> On Jan 7, 2015, at 12:15 PM, Jefferson, Shawn <Shawn.Jefferson at ...14596.... <mailto:Shawn.Jefferson at ...14448...>> wrote:
>  
> I seem to be having a similar problem downloading rules via pulledpork.
>  
> The strange thing is that it works fine on my Ubuntu 10.04 installs, but does not work on Ubuntu 12.04.  I get a 500 error trying to download snort rules.  Emerging Threats rules work fine.  We did switch to a different proxy server around that time, and I’ve been troubleshooting from that angle, since it seemed like most people aren’t having a problem any longer?  However, even going back to my old proxy, which is still in place, the rule downloads still do not work.
>  
> Any suggestions on how to fix or further troubleshoot this?
>  
>  
>  
> From: Joel Esler (jesler) [mailto:jesler at ...589... <mailto:jesler at ...16731.....>] 
> Sent: December 15, 2014 10:23 AM
> To: Andre DiMino
> Cc: snort-users mailinglist
> Subject: Re: [Snort-users] Error 500 today?
>  
> Fantastic.
>  
> Apparently we were having problems will older versions of Wget and curl..
>  
> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Talos
>  
> On Dec 15, 2014, at 1:11 PM, Andre DiMino <adimino at ...16035... <mailto:adimino at ...16035...>> wrote:
>  
> Works great now Joel.
> 
> Thanks very much !
> 
> On Mon, Dec 15, 2014 at 12:53 PM, Joel Esler (jesler) <jesler at ...589... <mailto:jesler at ...589...>> wrote:
> 
> 
> We made some changes within in the past hour.  Still seeing the issue?
> 
> On Dec 15, 2014, at 10:29 AM, Andre DiMino <adimino at ...16035... <mailto:adimino at ...16035...>>
> wrote:
> 
> Does anyone know if this was addressed and fixed?
> As of this morning, I still am seeing Error 500 when using pulledpork.
> My last successful update was 12/7/14
> 
> Thanks!
> Andre'
> 
> On Fri, Dec 5, 2014 at 1:55 PM, Jeremy Hoel <jthoel at ...11827... <mailto:jthoel at ...11827...>> wrote:
> 
> Joel posted to the list earlier that they where moving g snort.org <http://snort.org/> around
> and there might be some issues.
> 
> On Dec 5, 2014 11:44 AM, "Andre DiMino" <adimino at ...16035... <mailto:adimino at ...16035...>> wrote:
> 
> 
> Everything worked fine up until this morning.  Now I see:
> 
> "Checking latest MD5 for snortrules-snapshot-2962.tar.gz....
> Error 500 when fetching
> https://www.snort.org/reg-rules/snortrules-snapshot-2962.tar.gz.md5 <https://www.snort.org/reg-rules/snortrules-snapshot-2962.tar.gz.md5> at
> /home/xxx/xxx/pulledpork-0.7.0/pulledpork.pl line 463.
> 
> main::md5file('my_oinkcode', 'snortrules-snapshot-2962.tar.gz', '/tmp/',
> 'https://www.snort.org/reg-rules/' <https://www.snort.org/reg-rules/'>) called at
> /home/xxx/xxx/pulledpork-0.7.0/pulledpork.pl line 1847"
> 
> Any thoughts?
> --
> 
> Andre' M. DiMino
> DeepEnd Research
> http://deependresearch.org <http://deependresearch.org/>
> http://sempersecurus.org <http://sempersecurus.org/>
> 
> "Make sure that nobody pays back wrong for wrong, but always try to be
> kind to each other and to everyone else" - 1 Thess 5:15 (NIV)
> 
> 
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> 
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk <http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net <mailto:Snort-users at ...973...et>
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users <https://lists.sourceforge.net/lists/listinfo/snort-users>
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users <http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users>
> 
> Please visit http://blog.snort.org <http://blog.snort.org/> to stay current on all the latest Snort
> news!
> 
> 
> 
> 
> --
> 
> Andre' M. DiMino
> DeepEnd Research
> http://deependresearch.org <http://deependresearch.org/>
> http://sempersecurus.org <http://sempersecurus.org/>
> 
> "Make sure that nobody pays back wrong for wrong, but always try to be
> kind to each other and to everyone else" - 1 Thess 5:15 (NIV)
> 
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk <http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net <mailto:Snort-users at ...973...et>
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users <https://lists.sourceforge.net/lists/listinfo/snort-users>
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users <http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users>
> 
> Please visit http://blog.snort.org <http://blog.snort.org/> to stay current on all the latest Snort
> news!
> 
> 
> 
> 
> 
> 
> -- 
> 
> Andre' M. DiMino
> DeepEnd Research
> http://deependresearch.org <http://deependresearch.org/>
> http://sempersecurus.org <http://sempersecurus.org/>
> 
> "Make sure that nobody pays back wrong for wrong, but always try to be
> kind to each other and to everyone else" - 1 Thess 5:15 (NIV)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150108/f943496f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4881 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150108/f943496f/attachment.bin>


More information about the Snort-users mailing list