Snort mailing list archives

Re: Persistant URL for rules md5sum


From: zultan () mad scientist com
Date: Wed, 14 Jul 2010 20:57:53 -0400


Do you use oinkmaster or pulledpork?
 
I wrote a wrapper for oinkmaster that checks for a newmd5sum before downloading a new tarball.
 
Didyou try...
 
That's the old way (see below).  It was broken when I tried it 2 weeks ago,but now it works again.  Thanks.
 
Before the changes 2 weeks ago, http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcodehere>/<filename>.md5 was spelled 
out on the web site.  It would be helpful to others if it returned.
 
Z
 


 

 

-----Original Message-----
From: Nigel Houghton <nhoughton () sourcefire com>
..................

Scripting you say? Do you use oinkmaster or pulledpork? Did you try

http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode

here>/<filename>.md5



e.g. http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode

here>/snortrules-snapshot-2860.tar.gz.md5



Which would of course go with the file

http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode

here>/snortrules-snapshot-2860.tar.gz



On Wed, Jul 14, 2010 at 7:00 PM,  <zultan () mad scientist com> wrote:



I sent the below to the snort-sigs list yesterday.  But it never made it

out.



----------------------------------





Is there a URL for the rules' md5sum that will persist through rule updates?



Before the unannounced change fiasco two weeks ago, the URL was:

www.snort.org/pub-bin/oinkmaster.cgi/${OINKCODE}/${RULES_FILE_NAME}.md5



Then for the 2.8.5.3 rules, two weeks ago it changed to:

www.snort.org/downloads/78/show_md5



And now, after the 13 July update the 2.8.5.3 rules are at:

www.snort.org/downloads/82/show_md5



Many of us need an md5sum URL suitable for scripting.





Z





------------------------------------------------------------------------------

This SF.net email is sponsored by Sprint

What will you do first with EVO, the first 4G phone?

Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users









-- 

Nigel Houghton

Head Mentalist

SF VRT

http://vrt-sourcefire.blogspot.com && http://labs.snort.org/



------------------------------------------------------------------------------

This SF.net email is sponsored by Sprint

What will you do first with EVO, the first 4G phone?

Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first

_______________________________________________

Snort-users mailing list

Snort-users () lists sourceforge net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users


 
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: