[Snort-users] about snort can not auto update rules.

ServiceDesk 劉明緯(vend.adosrv3) vend.adosrv3 at mediatek.com
Wed Jun 20 01:10:12 EDT 2018


Hi All,

I use the oinkcode as the MD5 = 54c29a1f360e74120ed1bc5186ccfa44  , and I got the error as below~
I have no idea what is wrong with this ? snort version = 2.9.11.1 GRE (Build 268)

https://www.snort.org/downloads/registered/md5s

54c29a1f360e74120ed1bc5186ccfa44 snortrules-snapshot-29111.tar.gz


# vi /etc/snort/pulledpork.conf

rule_url=https://www.snort.org/downloads/registered/|snortrules-snpashot.tar.gz|54c29a1f360e74120ed1bc5186ccfa44<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.snort.org_downloads_registered_-257Csnortrules-2Dsnpashot.tar.gz-257C54c29a1f360e74120ed1bc5186ccfa44&d=DwMGaQ&c=X9NHckmGz7LNQmqtvpDCYVnn6eFXNivfZeknqiAo-n0&r=9QkU3GWetlunCR0eYQxDNyonXKKQ7Gmc_e84dMKC6Ic&m=fZ3eieFiLZQ0i-tFAQYK1ZbDxyRt56rfSOKP-WS0OWg&s=IAzNpwovvYruJGprCxRReah6KUBbDyRB6EY-L8o-Jbk&e=>


# pulledpork.pl -c /etc/snort/pulledpork.conf –l

Checking latest MD5 for snortrules-snapshot-29111.tar.gz....
Error downloading https://www.snort.org/rules/snortrules-snapshot-29111.tar.gz.md5?oinkcode=54c29a1f360e74120ed1bc5186ccfa44:<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.snort.org_rules_snortrules-2Dsnapshot-2D29111.tar.gz.md5-3Foinkcode-3D54c29a1f360e74120ed1bc5186ccfa44-3A&d=DwMGaQ&c=X9NHckmGz7LNQmqtvpDCYVnn6eFXNivfZeknqiAo-n0&r=9QkU3GWetlunCR0eYQxDNyonXKKQ7Gmc_e84dMKC6Ic&m=fZ3eieFiLZQ0i-tFAQYK1ZbDxyRt56rfSOKP-WS0OWg&s=oRlWjvFHUNRquj0TvuwRt1W1xFUzUd33TDbBq7UKhfY&e=> 422 Unprocessable Entity [ 422 ]

Best Regards,
Sam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180620/e75efe09/attachment.html>


More information about the Snort-users mailing list