Re: Snort with PulledPork and Ubuntu 12.04 Server

[Christian Gebler <geblerchristian () googlemail com>]

That was just a test. I changed it back in "
https://www.snort.org/rules/$rule_file/$oinkcode";, but same result.


2014-07-22 2:08 GMT+02:00 Joel Esler (jesler) <jesler () cisco com>:

>  I’ll have this fixed on the site asap.
>
>
>  On Jul 21, 2014, at 8:03 PM, JJC <cummingsj () gmail com> wrote:
>
>  looks like your rule_url value is incorrect.  just remove the ?oinkcode=
> part of your rule_url in the pulledpork.conf
>
>  JJC
>
>
> On Mon, Jul 21, 2014 at 6:11 AM, Joel Esler (jesler) <jesler () cisco com>
> wrote:
>
> >  Can you write me offlist with your oinkcode or email address your
> > account is under?
> >
> > --
> > Joel Esler
> > Sent from my iPhone
> >
> > On Jul 21, 2014, at 7:43, "Christian Gebler" <
> > geblerchristian () googlemail com> wrote:
> >
> >   Hi,
> >
> >  I'm using Snort 2.9.6.2 with PulledPork 0.7.0 on an Ubuntu Server 12.04
> > LTS.
> >
> >  Since last week it is not possible to download the new VRT Snort
> > 2.9.6.2 Ruleset (now with https):
> >
> >  Checking latest MD5 for snortrules-snapshot-2962.tar.gz....
> > Fetching md5sum for: snortrules-snapshot-2962.tar.gz.md5
> > ** GET
> > https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5?oinkcode=<my
> > oinkcode> ==> 501 Not Implemented
> > Error 501 when fetching
> > https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5 at ./
> > pulledpork.pl line 463
> > main::md5file('<oinkcode>', 'snortrules-snapshot-2962.tar.gz',
> > '/etc/snort/rules/tmp/', 'https://www.snort.org/rules/&apos;) called at ./
> > pulledpork.pl line 1847
> >
> >
> >
> >  Any suggestions?
> >
> >  thx
> >
> >
> > ------------------------------------------------------------------------------
> > Want fast and easy access to all the code in your enterprise? Index and
> > search up to 200,000 lines of code with a free copy of Black Duck
> > Code Sight - the same software that powers the world's largest code
> > search on Ohloh, the Black Duck Open Hub! Try it now.
> > http://p.sf.net/sfu/bds
> >
> >  _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Want fast and easy access to all the code in your enterprise? Index and
> > search up to 200,000 lines of code with a free copy of Black Duck
> > Code Sight - the same software that powers the world's largest code
> > search on Ohloh, the Black Duck Open Hub! Try it now.
> > http://p.sf.net/sfu/bds
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!