Snort mailing list archives

RE: problems updating rules with oinkmaster


From: Paul Schmehl <pauls () utdallas edu>
Date: Thu, 22 Apr 2004 12:34:39 -0500

--On Thursday, April 22, 2004 08:33:40 AM -0500 "Rowland, Krisa W ERDC-ITL-MS Contractor" <Krisa.W.Rowland () erdc usace army mil> wrote:


I've been having the same problem - I thought it was just me.  I am
running Snort-2.0.6.

Not too long ago, the path to the rules files changed. If you didn't edit oinkmaster.conf, then it will fail to update the rules because the path wget tries to use is invalid. You *should* be getting error messages in your messages log, and you *should* be checking your messages log for errors when you're troubleshooting a problem like this.

The default path that oinkmaster *used* was:
http://www.snort.org/dl/rules/snortrules-current.tar.gz

That path is no longer valid. You need to edit your conf file to point to the correct path for *your* version of snort.

The path for snort 2.1 is:
url = http://www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz

Look on the webpage, in the /dl/rules/ page for the correct path for your version of snort.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: