Re: Problem Updating Rules with PulledPork

["Michael Steele" <michaels () winsnort com>]

You understand if you are not paying for rule updates that you can only download or try the download once every 15 
minutes. Even if the rule update fails, you must wait 15 minutes.

 

Clear the assigned PulledPork temp folder and give it another try. You can also assign the PulledPork temp to the 
c:\windows\temp folder. Could be a permission problem? 

 

Best regards,

Michael...

 

WINSNORT.com Management…

--

****************** Established ~ 2001 *******************

*          Visit Us @  <http://www.winsnort.com/> http://www.winsnort.com           *

*      ~~ FREE WinIDS Snort installation guides ~~      *

*               ~~ FREE support forums ~~               *

* Snort: Open Source Network IDS -  <http://www.snort.org/> http://www.snort.org *

*********************************************************

 

From: JJ Cummings [mailto:cummingsj () gmail com] 
Sent: Wednesday, September 18, 2013 1:14 PM
To: Benjamin Lincoln
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Problem Updating Rules with PulledPork

 

Something is causing the download to not complete correctly....

Sent from the iRoad


On Sep 18, 2013, at 10:46, Benjamin Lincoln <BLincoln () bannerbank com <mailto:BLincoln () bannerbank com> > wrote:

Hello,

 

I am currently running Snort 2.9.5.5 and Pulled Pork 0.7.0 on Windows 2008R2. When using pulled pork to update the 
rules, it will just keep trying to download new rules over and over again. I see the rule file getting created in the 
tmp directory, and it will grow to 18 kb, but then shrink back down to 8 kb after pulled pork tries to grab the file 
again. Basically, it will just keep saying the MD5 doesn’t match and try to keep re downloading the file. Any Ideas on 
this?

 

Benjamin Lincoln
IT Security Analyst Support

Banner Bank

Internal Ext. 53274

(509)524-5931

 

 

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151 
<http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk> &iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net <mailto:Snort-users () lists sourceforge net> 
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!