Snort mailing list archives

Re: correct rule url/IDSPM?


From: "John Hally" <JHally () ebscohost com>
Date: Fri, 30 Jul 2010 15:47:28 -0400

Ok, I think I figured out what I was doing wrong with the links.  I
decided to go to pulled pork and now I continue to get HTTP/403's no
matter how long I wait in between attempts to download rules.

 

Anyone have any ideas?  Is my oinkcode locked out somehow?

 

Thanks.

 

________________________________

From: John Hally [mailto:JHally () ebscohost com] 
Sent: Friday, July 30, 2010 10:07 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] correct rule url/IDSPM?

 

 

Hello All,

 

I'm constantly getting denied when attempting to update my 2.8.6.0 rules
through the last version of IDSPM from Activeworx.  Nothing seems to
work no matter what format I use from the 'download rules' page on
snort.org.  I've tried:

 

 

 

http://www.snort.org/reg-rules/snortrules-snapshot-2860.tar.gz/<oinkcode
<http://www.snort.org/reg-rules/snortrules-snapshot-2860.tar.gz/%3coinkc
ode>  here>

 

http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode
<http://www.snort.org/pub-bin/oinkmaster.cgi/%3coinkcode>
here>/snortrules-snapshot-2860.tar.gz

 

I've also tried plugging in any/all of my oinkcodes directly into the
update link and bypassing the <oinkcode> variable replacement by the
application.  

 

In fact, a wget fails as well even after waiting the 15 minute block
that happens.

 

Anyone else having this issue?

 

Thanks,

 

John.

------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: