[Snort-users] Updating snort rules via pulledpork, failing

bobby architectofthefuture at gmail.com
Fri May 18 09:42:43 EDT 2018


I am trying to update my snort rules via pulled pork. I noticed that the
rules have not been updated for a while.  Here is the output from running
the command:

sudo /usr/local/bin/pulledpork.pl -c /etc/snort/pulledpork.conf -l

    https://github.com/shirkdog/pulledpork
      _____ ____
     `----,\    )
      `--==\\  /    PulledPork v0.7.4 - Helping you protect your bitcoin
wallet!
       `--==\\/
     .-~~~~-.Y|\\_  Copyright (C) 2009-2017 JJ Cummings, Michael Shirk
  @_/        /  66\_  and the PulledPork Team!
    |    \   \   _(")
     \   /-| ||'--'  Rules give me wings!
      \_\  \_\\
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Checking latest MD5 for snortrules-snapshot-29111.tar.gz....
        They Match
        Done!
Checking latest MD5 for community-rules.tar.gz....
        They Match
        Done!
IP Blacklist download of
https://talosintelligence.com/documents/ip-blacklist....
Reading IP List...
Checking latest MD5 for opensource.gz....
        They Match
        Done!
Checking latest MD5 for emerging.rules.tar.gz....
        They Match
        Done!
Writing Blacklist File /etc/snort/rules/iplists/black_list.rules....
Writing Blacklist Version 1633955891 to
/etc/snort/rules/iplistsIPRVersion.dat....
Writing /var/log/sid_changes.log....
        Done

No Rule Changes

IP Blacklist Stats...
        Total IPs:-----1629

Done
Please review /var/log/sid_changes.log for additional details
Fly Piggy Fly!

I don't see any errors.  What could be going on that they are not being
updated?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180518/157fe6c2/attachment.html>


More information about the Snort-users mailing list