Re: oinkmaster download of 2.7 rule set fails

[Joel Esler <jesler () sourcefire com>]

On Wed, Oct 14, 2009 at 6:59 AM, justin joseph <justinjoseph007 () gmail com>wrote:

> Hi
>
> Snort oink download of 2.7 rule set is failing with the below error
> messages:
>
>
> /usr/sbin/oinkmaster: Error: could not download from
>
> http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2.7.tar.gz
> .
> Output from wget follows:
>
>
> http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2.7.tar.gz
>          => `/tmp/oinkmaster.o1_rsuQZZt/url.H22uiiG01_/snortrules.tar.gz'
> Resolving www.snort.org... 68.177.102.20
> Connecting to www.snort.org|68.177.102.20|:80... connected.
> HTTP request sent, awaiting response... 404 Not Found
> 15:53:17 ERROR 404: Not Found.
>
> Is it that 2.7 rule set download is no more supported?
>
> I tried to run snort version 2.7 with oinkmaster downloaded 2.8 rule set.
> But that fails with below message:
>
>
> Initializing rule chains...
> ERROR: /etc/snort/rules/chat.rules(71) => Invalid port: [9090,9091]
> Fatal Error, Quitting..
>
>
> I can see that for 2.7 the way port numbers were specified for 2.7 is
> different from that of 2.8 rule set, I could manually
> correct this in chat.rules at places and then the error would be
> reported from other line number and other rules files.
>
> Is there any way I can inter-op 2.8 rules set downloaded with
> oinkmaster with snort version 2.7.0?
This won't correct your download problem, but..  why don't you upgrade to
the current Snort version?  Then you won't have that problem at all...

J


-- 
Joel Esler | 302-223-5974 | gtalk: jesler () sourcefire com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users