<div dir="ltr">Wow. †That's pretty slow. †On Unix it takes about 10 seconds give or take. †But no, Pulledpork is sell contained except for a few libraries and is meant to be that way.</div><div class="gmail_extra"><br>
<br><div class="gmail_quote">On Sun, Feb 10, 2013 at 9:57 AM, Michael Steele <span dir="ltr"><<a href="mailto:michaels@...9077..." target="_blank">michaels@...9077...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72"><div><p class="MsoNormal"><a name="13cc49cb1aac7330__MailEndCompose"><span style="color:#1f497d">Problem solved. It appears that some of the Perl packages were corrupted.<u></u><u></u></span></a></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u>†<u></u></span></p><p class="MsoNormal"><span style="color:#1f497d">However; Does anyone have a work around for the installation of the Signatures. I donít know about UNIX, but †on Windows it takes at least 30 minutes for Perl to extract.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u>†<u></u></span></p><p class="MsoNormal"><span style="color:#1f497d">Is it possible for the <a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> file to extract with a native OS extraction tool?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u>†<u></u></span></p><div><p class="MsoNormal"><span style="font-size:10.5pt;font-family:Consolas;color:#1f497d">Best regards,<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size:10.5pt;font-family:Consolas;color:#1f497d">Michael...<u></u><u></u></span></p></div><p class="MsoNormal"><span style="color:#1f497d"><u></u>†<u></u></span></p><div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b>From:</b> Michael Steele [mailto:<a href="mailto:michaels@...9077..." target="_blank">michaels@...9077...</a>] <br>
<b>Sent:</b> Saturday, February 09, 2013 1:49 PM<br><b>To:</b> <a href="mailto:snort-users@lists.sourceforge.net" target="_blank">snort-users@...1753...s.sourceforge.net</a><br><b>Subject:</b> [Snort-users] PulledPork not processing<u></u><u></u></p>
</div></div><div><div class="h5"><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">This is the latest pull from the SVN.<u></u><u></u></p><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">It appears PulledPork is trying to process the rules twice. In the temp folder Iím only getting a partial transfer of the rules and the MD5 file. <u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">C:\Users\Operator>perl d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> -c d:\winids\pulledpork\etc\pulledpork.conf -vv -T<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">††† <a href="http://code.google.com/p/pulledpork/" target="_blank">http://code.google.com/p/pulledpork/</a><u></u><u></u></p><p class="MsoNormal">††††† _____ ____<u></u><u></u></p>
<p class="MsoNormal">†††† `----,\††† )<u></u><u></u></p><p class="MsoNormal">††††† `--==\\† /††† PulledPork v0.6.2dev the Cigar Pig <////~<u></u><u></u></p><p class="MsoNormal">†††††† `--==\\/<u></u><u></u></p><p class="MsoNormal">
†††† .-~~~~-.Y|\\_† Copyright (C) 2009-2012 JJ Cummings<u></u><u></u></p><p class="MsoNormal">† @_/††††††† /† 66\_† <a href="mailto:cummingsj@...11827..." target="_blank">cummingsj@...13704......</a><u></u><u></u></p><p class="MsoNormal">
††† |††† \†† \†† _(")<u></u><u></u></p><p class="MsoNormal">†††† \†† /-| ||'--'† Rules give me wings!<u></u><u></u></p><p class="MsoNormal">††††† \_\† \_\\<u></u><u></u></p><p class="MsoNormal">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">Config File Variable Debug d:\winids\pulledpork\etc\pulledpork.conf<u></u><u></u></p><p class="MsoNormal">††††††† snort_path = /usr/local/bin/snort<u></u><u></u></p>
<p class="MsoNormal">††††††† enablesid = d:\winids\pulledpork\etc\enablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† modifysid = d:\winids\pulledpork\etc\modifysid.conf<u></u><u></u></p><p class="MsoNormal">††††††† rule_path = d:\winids\snort\rules\snort.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† ignore = deleted.rules,experimental.rules,local.rules<u></u><u></u></p><p class="MsoNormal">††††††† rule_url = ARRAY(0x28e1e24)<u></u><u></u></p><p class="MsoNormal">††††††† snort_version = 2.9.4.0<u></u><u></u></p>
<p class="MsoNormal">††††††† sid_msg_version = 1<u></u><u></u></p><p class="MsoNormal">††††††† sid_changelog = d:\winids\snort\log\sid_changes.log<u></u><u></u></p><p class="MsoNormal">††††††† sid_msg = d:\winids\snort\etc\sid-msg.map<u></u><u></u></p>
<p class="MsoNormal">††††††† docs = d:\winids\Apache24\htdocs\base\signatures\<u></u><u></u></p><p class="MsoNormal">††††††† ips_policy = security<u></u><u></u></p><p class="MsoNormal">††††††† config_path = /usr/local/etc/snort/snort.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† temp_path = d:\winids\pulledpork\temp<u></u><u></u></p><p class="MsoNormal">††††††† distro = FreeBSD-8.1<u></u><u></u></p><p class="MsoNormal">††††††† version = 0.6.1<u></u><u></u></p><p class="MsoNormal">
††††††† sorule_path = /usr/local/lib/snort_dynamicrules/<u></u><u></u></p><p class="MsoNormal">††††††† disablesid = d:\winids\pulledpork\etc\disablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† dropsid = d:\winids\pulledpork\etc\dropsid.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† local_rules = d:\winids\snort\rules\local.rules<u></u><u></u></p><p class="MsoNormal">'uname' is not recognized as an internal or external command,<u></u><u></u></p><p class="MsoNormal">
operable program or batch file.<u></u><u></u></p><p class="MsoNormal">MISC (CLI and Autovar) Variable Debug:<u></u><u></u></p><p class="MsoNormal">††††††† Config Path is: d:\winids\pulledpork\etc\pulledpork.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† Distro Def is: FreeBSD-8.1<u></u><u></u></p><p class="MsoNormal">††††††† Docs Reference Location is: d:\winids\Apache24\htdocs\base\signatures\<u></u><u></u></p><p class="MsoNormal">††††††† security policy specified<u></u><u></u></p>
<p class="MsoNormal">††††††† local.rules path is: d:\winids\snort\rules\local.rules<u></u><u></u></p><p class="MsoNormal">††††††† Rules file is: d:\winids\snort\rules\snort.rules<u></u><u></u></p><p class="MsoNormal">††††††† Path to disablesid file: d:\winids\pulledpork\etc\disablesid.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† Path to dropsid file: d:\winids\pulledpork\etc\dropsid.conf<u></u><u></u></p><p class="MsoNormal">††††††† Path to enablesid file: d:\winids\pulledpork\etc\enablesid.conf<u></u><u></u></p><p class="MsoNormal">
††††††† Path to modifysid file: d:\winids\pulledpork\etc\modifysid.conf<u></u><u></u></p><p class="MsoNormal">††††† ††sid changes will be logged to: d:\winids\snort\log\sid_changes.log<u></u><u></u></p><p class="MsoNormal">
††††††† sid-msg.map Output Path is: d:\winids\snort\etc\sid-msg.map<u></u><u></u></p><p class="MsoNormal">††††††† Snort Version is: 2.9.4.0<u></u><u></u></p><p class="MsoNormal">††††††† Snort Config File: /usr/local/etc/snort/snort.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† Snort Path is: /usr/local/bin/snort<u></u><u></u></p><p class="MsoNormal">††††††† Text Rules only Flag is Set<u></u><u></u></p><p class="MsoNormal">††††††† Extra Verbose Flag is Set<u></u><u></u></p>
<p class="MsoNormal">††††††† Verbose Flag is Set<u></u><u></u></p><p class="MsoNormal">††††††† Base URL is: <a href="https://www.snort.org/reg-rules/%7Csnortrules-snapshot.tar.gz%7C991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/|snortrules-snapshot.tar.gz|991158d6f0847841cffbe085a91b7c5775ba98cf</a> <a href="https://www.snort.org/reg-rules/%7Copensource.gz%7C991158d6f0847841cffbe085a91b7c5" target="_blank">https://www.snort.org/reg-rules/|opensource.gz|991158d6f0847841cffbe085a91b7c5</a><u></u><u></u></p>
<p class="MsoNormal">775ba98cf<u></u><u></u></p><p class="MsoNormal">Checking latest MD5 for snortrules-snapshot-2940.tar.gz....<u></u><u></u></p><p class="MsoNormal">††††††† Fetching md5sum for: snortrules-snapshot-2940.tar.gz.md5<u></u><u></u></p>
<p class="MsoNormal">** GET <a href="https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz.md5/991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz.md5/991158d6f0847841cffbe085a91b7c5775ba98cf</a> ==> 200 OK (3s)<u></u><u></u></p>
<p class="MsoNormal">††††††† most recent rules file digest: ae46740e802f023be681d932ef71f407<u></u><u></u></p><p class="MsoNormal">Rules tarball download of snortrules-snapshot-2940.tar.gz....<u></u><u></u></p><p class="MsoNormal">
††††††† Fetching rules file: snortrules-snapshot-2940.tar.gz<u></u><u></u></p><p class="MsoNormal">** GET <a href="https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf</a> ==> 302 Found (1s)<u></u><u></u></p>
<p class="MsoNormal">** GET <a href="https://s3.amazonaws.com/snort-org/www/rules/20121218/snortrules-snapshot-2940.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1360435268&Signature=KaoY%2B0NMB%2B%2FNnYFJTpunKaQhilw%3D" target="_blank">https://s3.amazonaws.com/snort-org/www/rules/20121218/snortrules-snapshot-2940.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1360435268&Signature=KaoY%2B0NMB%2B%2FNnYFJTpunKaQhilw%3D</a> ==><u></u><u></u></p>
<p class="MsoNormal">200 OK (1s)<u></u><u></u></p><p class="MsoNormal">††††††† storing file at: d:\winids\pulledpork\temp/snortrules-snapshot-2940.tar.gz<u></u><u></u></p><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">
††††††† current local rules file† digest: eed12b6d1e99dd34dda723167ab18f8c<u></u><u></u></p><p class="MsoNormal">††††††† The MD5 for snortrules-snapshot-2940.tar.gz did not match the latest digest... so I am gonna fetch the latest rules file!<u></u><u></u></p>
<p class="MsoNormal">Rules tarball download of snortrules-snapshot-2940.tar.gz....<u></u><u></u></p><p class="MsoNormal">††††††† Fetching rules file: snortrules-snapshot-2940.tar.gz<u></u><u></u></p><p class="MsoNormal">** GET <a href="https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf</a> ==> 302 Found<u></u><u></u></p>
<p class="MsoNormal">** GET <a href="https://s3.amazonaws.com/snort-org/www/rules/20121218/snortrules-snapshot-2940.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1360435269&Signature=2H85W57%2F7fbXw%2FEehahpjniVR0Q%3D" target="_blank">https://s3.amazonaws.com/snort-org/www/rules/20121218/snortrules-snapshot-2940.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1360435269&Signature=2H85W57%2F7fbXw%2FEehahpjniVR0Q%3D</a> ==>†† 0<u></u><u></u></p>
<p class="MsoNormal">200 OK<u></u><u></u></p><p class="MsoNormal">††††††† storing file at: d:\winids\pulledpork\temp/snortrules-snapshot-2940.tar.gz<u></u><u></u></p><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">
††††††† current local rules file† digest: 6fb296525f90c700ff356264397e7977<u></u><u></u></p><p class="MsoNormal">††††††† The MD5 for snortrules-snapshot-2940.tar.gz did not match the latest digest... so I am gonna fetch the latest rules file!<u></u><u></u></p>
<p class="MsoNormal">Rules tarball download of snortrules-snapshot-2940.tar.gz....<u></u><u></u></p><p class="MsoNormal">††††††† Fetching rules file: snortrules-snapshot-2940.tar.gz<u></u><u></u></p><p class="MsoNormal">** GET <a href="https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/snortrules-snapshot-2940.tar.gz/991158d6f0847841cffbe085a91b7c5775ba98cf</a> ==> 403 Forbidden (1s)<u></u><u></u></p>
<p class="MsoNormal">††††††† A 403 error occurred, please wait for the 15 minute timeout<u></u><u></u></p><p class="MsoNormal">††††††† to expire before trying again or specify the -n runtime switch<u></u><u></u></p><p class="MsoNormal">
††††††† You may also wish to verfiy your oinkcode, tarball name, and other configuration options<u></u><u></u></p><p class="MsoNormal"><u></u>†<u></u></p><div style="border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><u></u>†<u></u></p></div><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">I can drop the rules, and open source file into the empty temp folder and try to process offline but Iím getting:<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">C:\Users\Operator>perl d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> -c d:\winids\pulledpork\etc\pulledpork.conf -n -vv -T<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">††† <a href="http://code.google.com/p/pulledpork/" target="_blank">http://code.google.com/p/pulledpork/</a><u></u><u></u></p><p class="MsoNormal">††††† _____ ____<u></u><u></u></p>
<p class="MsoNormal">†††† `----,\††† )<u></u><u></u></p><p class="MsoNormal">††††† `--==\\† /††† PulledPork v0.6.2dev the Cigar Pig <////~<u></u><u></u></p><p class="MsoNormal">†††††† `--==\\/<u></u><u></u></p><p class="MsoNormal">
†††† .-~~~~-.Y|\\_† Copyright (C) 2009-2012 JJ Cummings<u></u><u></u></p><p class="MsoNormal">† @_/††††††† /† 66\_† <a href="mailto:cummingsj@...11827..." target="_blank">cummingsj@...13704......</a><u></u><u></u></p><p class="MsoNormal">
††† |††† \†† \†† _(")<u></u><u></u></p><p class="MsoNormal">†††† \†† /-| ||'--'† Rules give me wings!<u></u><u></u></p><p class="MsoNormal">††††† \_\† \_\\<u></u><u></u></p><p class="MsoNormal">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal">Config File Variable Debug d:\winids\pulledpork\etc\pulledpork.conf<u></u><u></u></p><p class="MsoNormal">††††††† snort_path = /usr/local/bin/snort<u></u><u></u></p>
<p class="MsoNormal">††††††† enablesid = d:\winids\pulledpork\etc\enablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† modifysid = d:\winids\pulledpork\etc\modifysid.conf<u></u><u></u></p><p class="MsoNormal">††††††† rule_path = d:\winids\snort\rules\snort.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† ignore = deleted.rules,experimental.rules,local.rules<u></u><u></u></p><p class="MsoNormal">††††††† rule_url = ARRAY(0x285929c)<u></u><u></u></p><p class="MsoNormal">††††††† snort_version = 2.9.4.0<u></u><u></u></p>
<p class="MsoNormal">††††††† sid_msg_version = 1<u></u><u></u></p><p class="MsoNormal">††††††† sid_changelog = d:\winids\snort\log\sid_changes.log<u></u><u></u></p><p class="MsoNormal">††††††† sid_msg = d:\winids\snort\etc\sid-msg.map<u></u><u></u></p>
<p class="MsoNormal">††††††† docs = d:\winids\Apache24\htdocs\base\signatures\<u></u><u></u></p><p class="MsoNormal">††††††† ips_policy = security<u></u><u></u></p><p class="MsoNormal">††††††† config_path = /usr/local/etc/snort/snort.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† temp_path = d:\winids\pulledpork\temp<u></u><u></u></p><p class="MsoNormal">††††††† distro = FreeBSD-8.1<u></u><u></u></p><p class="MsoNormal">††††††† version = 0.6.1<u></u><u></u></p><p class="MsoNormal">
††††††† sorule_path = /usr/local/lib/snort_dynamicrules/<u></u><u></u></p><p class="MsoNormal">††††††† disablesid = d:\winids\pulledpork\etc\disablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† dropsid = d:\winids\pulledpork\etc\dropsid.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† local_rules = d:\winids\snort\rules\local.rules<u></u><u></u></p><p class="MsoNormal">'uname' is not recognized as an internal or external command,<u></u><u></u></p><p class="MsoNormal">
operable program or batch file.<u></u><u></u></p><p class="MsoNormal">MISC (CLI and Autovar) Variable Debug:<u></u><u></u></p><p class="MsoNormal">††††††† Config Path is: d:\winids\pulledpork\etc\pulledpork.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† Distro Def is: FreeBSD-8.1<u></u><u></u></p><p class="MsoNormal">††††††† Docs Reference Location is: d:\winids\Apache24\htdocs\base\signatures\<u></u><u></u></p><p class="MsoNormal">††††††† security policy specified<u></u><u></u></p>
<p class="MsoNormal">††††††† local.rules path is: d:\winids\snort\rules\local.rules<u></u><u></u></p><p class="MsoNormal">††††††† No Download Flag is Set<u></u><u></u></p><p class="MsoNormal">††††††† Rules file is: d:\winids\snort\rules\snort.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Path to disablesid file: d:\winids\pulledpork\etc\disablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† Path to dropsid file: d:\winids\pulledpork\etc\dropsid.conf<u></u><u></u></p><p class="MsoNormal">
††††††† Path to enablesid file: d:\winids\pulledpork\etc\enablesid.conf<u></u><u></u></p><p class="MsoNormal">††††††† Path to modifysid file: d:\winids\pulledpork\etc\modifysid.conf<u></u><u></u></p><p class="MsoNormal">††††††† sid changes will be logged to: d:\winids\snort\log\sid_changes.log<u></u><u></u></p>
<p class="MsoNormal">††††††† sid-msg.map Output Path is: d:\winids\snort\etc\sid-msg.map<u></u><u></u></p><p class="MsoNormal">††††††† Snort Version is: 2.9.4.0<u></u><u></u></p><p class="MsoNormal">††††††† Snort Config File: /usr/local/etc/snort/snort.conf<u></u><u></u></p>
<p class="MsoNormal">††††††† Snort Path is: /usr/local/bin/snort<u></u><u></u></p><p class="MsoNormal">††††††† Text Rules only Flag is Set<u></u><u></u></p><p class="MsoNormal">††††††† Extra Verbose Flag is Set<u></u><u></u></p>
<p class="MsoNormal">††††††† Verbose Flag is Set<u></u><u></u></p><p class="MsoNormal">††††††† Base URL is: <a href="https://www.snort.org/reg-rules/%7Csnortrules-snapshot.tar.gz%7C991158d6f0847841cffbe085a91b7c5775ba98cf" target="_blank">https://www.snort.org/reg-rules/|snortrules-snapshot.tar.gz|991158d6f0847841cffbe085a91b7c5775ba98cf</a> <a href="https://www.snort.org/reg-rules/%7Copensource.gz%7C991158d6f0847841cffbe085a91b7c5" target="_blank">https://www.snort.org/reg-rules/|opensource.gz|991158d6f0847841cffbe085a91b7c5</a><u></u><u></u></p>
<p class="MsoNormal">775ba98cf<u></u><u></u></p><p class="MsoNormal">Prepping rules from snortrules-snapshot-2940.tar.gz for work....<u></u><u></u></p><p class="MsoNormal">††††††† extracting contents of d:\winids\pulledpork\temp/snortrules-snapshot-2940.tar.gz...<u></u><u></u></p>
<p class="MsoNormal">††††††† Ignoring plaintext rules: deleted.rules<u></u><u></u></p><p class="MsoNormal">††††††† Ignoring plaintext rules: experimental.rules<u></u><u></u></p><p class="MsoNormal">††††††† Ignoring plaintext rules: local.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-adware.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-misc.rules<u></u><u></u></p>
<p class="MsoNormal">††††† ††Extracted: /tha_rules/VRT-malware-backdoor.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-indicator-compromise.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-pdf.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-content-replace.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-identify.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-webkit.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-specific-threats.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-office.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-rpc.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-dns.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-snmp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-coldfusion.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-voip.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-image.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-chat.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-voip.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-solaris.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pop3.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mssql.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-preprocessor.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-social.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-ftp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-webapp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-oracle.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-scada.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-other-ids.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-apache.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-sql.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-icmp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-multimedia.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-p2p.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-info.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mail.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-netbios.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-smtp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-icmp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-sensitive-data.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-indicator-shellcode.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-iis.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-finger.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-botnet-cnc.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-toolbars.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-mysql.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-virus.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-imap.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-cnc.rules<u></u><u></u></p><p class="MsoNormal">†††† †††Extracted: /tha_rules/VRT-web-misc.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-tftp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-blacklist.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-shellcode.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-spyware-put.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-exploit.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-services.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-ie.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-windows.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-ddos.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-attack-responses.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-firefox.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-chrome.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-telnet.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-other.rules<u></u><u></u></p><p class="MsoNormal">†††† †††Extracted: /tha_rules/VRT-icmp-info.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-linux.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-indicator-obfuscation.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-spam.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-tools.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-x11.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-p2p.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-scan.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-ftp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-php.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-activex.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-decoder.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-frontpage.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-rservices.rules<u></u><u></u></p><p class="MsoNormal">††† ††††Extracted: /tha_rules/VRT-file-executable.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-other.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-backdoor.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-multimedia.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-client.rules<u></u><u></u></p>
<p class="MsoNormal">† ††††††Extracted: /tha_rules/VRT-exploit-kit.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-pop.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-plugins.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-attacks.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-imap.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-flash.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-nntp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-dos.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-finger.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-phishing-spam.rules<u></u><u></u></p><p class="MsoNormal">No such file in archive: 'doc/signatures/rules/VRT-License.txt' at d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> line 293.<u></u><u></u></p>
<p class="MsoNormal">Could not find an entry for 'doc/signatures/rules/VRT-License.txt' at d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> line 293.<u></u><u></u></p><p class="MsoNormal">
††††††† Extracted: d:\winids\Apache24\htdocs\base\signatures\rules/VRT-License.txt<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mysql.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-oracle.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-iis.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-app-detect.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-multimedia.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pop2.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-bad-traffic.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-cgi.rules<u></u><u></u></p>
<p class="MsoNormal">Prepping rules from snortrules-snapshot-2940.tar.gz for work....<u></u><u></u></p><p class="MsoNormal">††††††† extracting contents of d:\winids\pulledpork\temp/snortrules-snapshot-2940.tar.gz...<u></u><u></u></p>
<p class="MsoNormal">††††††† Ignoring plaintext rules: deleted.rules<u></u><u></u></p><p class="MsoNormal">††††††† Ignoring plaintext rules: experimental.rules<u></u><u></u></p><p class="MsoNormal">††††††† Ignoring plaintext rules: local.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-adware.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-misc.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-backdoor.rules<u></u><u></u></p><p class="MsoNormal">† ††††††Extracted: /tha_rules/VRT-indicator-compromise.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-pdf.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-content-replace.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-identify.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-webkit.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-specific-threats.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-office.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-rpc.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-dns.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-snmp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-coldfusion.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-voip.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-image.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-chat.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-voip.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-solaris.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mssql.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pop3.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-preprocessor.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-social.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-ftp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-webapp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-oracle.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-scada.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-other-ids.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-apache.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-sql.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-icmp.rules<u></u><u></u></p><p class="MsoNormal">†††† †††Extracted: /tha_rules/VRT-file-multimedia.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-p2p.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-info.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mail.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-netbios.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-smtp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-icmp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-sensitive-data.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-indicator-shellcode.rules<u></u><u></u></p><p class="MsoNormal">††† ††††Extracted: /tha_rules/VRT-web-iis.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-finger.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-botnet-cnc.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pua-toolbars.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-mysql.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-virus.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-imap.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-cnc.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-misc.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-tftp.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-shellcode.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-blacklist.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-spyware-put.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-exploit.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-services.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-ie.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-windows.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-ddos.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-attack-responses.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-firefox.rules<u></u><u></u></p><p class="MsoNormal">††† ††††Extracted: /tha_rules/VRT-browser-chrome.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-telnet.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-icmp-info.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-os-linux.rules<u></u><u></u></p>
<p class="MsoNormal">†††† †††Extracted: /tha_rules/VRT-indicator-obfuscation.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-spam.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-tools.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-x11.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-p2p.rules<u></u><u></u></p><p class="MsoNormal">†††† †††Extracted: /tha_rules/VRT-scan.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-ftp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-malware-other.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-php.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-activex.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-decoder.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-frontpage.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-rservices.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-executable.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-other.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-backdoor.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-multimedia.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-client.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-exploit-kit.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-protocol-pop.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-browser-plugins.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-attacks.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-imap.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-file-flash.rules<u></u><u></u></p><p class="MsoNormal">† ††††††Extracted: /tha_rules/VRT-nntp.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-dos.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-finger.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-phishing-spam.rules<u></u><u></u></p><p class="MsoNormal">No such file in archive: 'doc/signatures/rules/VRT-License.txt' at d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> line 293.<u></u><u></u></p>
<p class="MsoNormal">Could not find an entry for 'doc/signatures/rules/VRT-License.txt' at d:\winids\pulledpork\<a href="http://pulledpork.pl" target="_blank">pulledpork.pl</a> line 293.<u></u><u></u></p><p class="MsoNormal">
††††††† Extracted: d:\winids\Apache24\htdocs\base\signatures\rules/VRT-License.txt<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-mysql.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-oracle.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-server-iis.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-app-detect.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-policy-multimedia.rules<u></u><u></u></p>
<p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-pop2.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-bad-traffic.rules<u></u><u></u></p><p class="MsoNormal">††††††† Extracted: /tha_rules/VRT-web-cgi.rules<u></u><u></u></p>
<p class="MsoNormal">Cleanup....<u></u><u></u></p><p class="MsoNormal">††††††† removed 108 temporary snort files or directories from d:\winids\pulledpork\temp/tha_rules!<u></u><u></u></p><p class="MsoNormal">Fly Piggy Fly!<u></u><u></u></p>
<p class="MsoNormal"><u></u>†<u></u></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:Consolas;color:#1f497d">Best regards,<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:Consolas;color:#1f497d">Michael...<u></u><u></u></span></p>
<p class="MsoNormal"><u></u>†<u></u></p></div></div></div></div></div><br>------------------------------------------------------------------------------<br>
Free Next-Gen Firewall Hardware Offer<br>
Buy your Sophos next-gen firewall before the end March 2013<br>
and get the hardware for free! Learn more.<br>
<a href="http://p.sf.net/sfu/sophos-d2d-feb" target="_blank">http://p.sf.net/sfu/sophos-d2d-feb</a><br>_______________________________________________<br>
Snort-users mailing list<br>
<a href="mailto:Snort-users@lists.sourceforge.net">Snort-users@...4626...ceforge.net</a><br>
Go to this URL to change user options or unsubscribe:<br>
<a href="https://lists.sourceforge.net/lists/listinfo/snort-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
Snort-users list archive:<br>
<a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users" target="_blank">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br>
<br>
Please visit <a href="http://blog.snort.org" target="_blank">http://blog.snort.org</a> to stay current on all the latest Snort news!<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div>Joel Esler</div><div>
Senior Research Engineer, VRT</div><div>OpenSource Community Manager</div><div>Sourcefire</div><br>
</div>