RE: problems updating rules with oinkmaster

["Gus Fritschie" <gfritschie () hotmail com>]

Yes, I was having that problem awhile ago, but then I changed to the correct 
path and it was working fine.  Can somenody verify for me that the 2.1 rules 
have been updated recently?


> From: Paul Schmehl <pauls () utdallas edu>
> To: "Rowland, Krisa W ERDC-ITL-MS Contractor" 
> <Krisa.W.Rowland () erdc usace army mil>,'Gus Fritschie' 
> <gfritschie () hotmail com>,snort-users () lists sourceforge net
> Subject: RE: [Snort-users] problems updating rules with oinkmaster
> Date: Thu, 22 Apr 2004 12:34:39 -0500
>
> --On Thursday, April 22, 2004 08:33:40 AM -0500 "Rowland, Krisa W 
> ERDC-ITL-MS Contractor" <Krisa.W.Rowland () erdc usace army mil> wrote:
>
> > I've been having the same problem - I thought it was just me.  I am
> > running Snort-2.0.6.
>
> Not too long ago, the path to the rules files changed.  If you didn't edit 
> oinkmaster.conf, then it will fail to update the rules because the path 
> wget tries to use is invalid.  You *should* be getting error messages in 
> your messages log, and you *should* be checking your messages log for 
> errors when you're troubleshooting a problem like this.
>
> The default path that oinkmaster *used* was:
> http://www.snort.org/dl/rules/snortrules-current.tar.gz
>
> That path is no longer valid.  You need to edit your conf file to point to 
> the correct path for *your* version of snort.
>
> The path for snort 2.1 is:
> url = http://www.snort.org/dl/rules/snortrules-snapshot-2_1.tar.gz
>
> Look on the webpage, in the /dl/rules/ page for the correct path for your 
> version of snort.
>
> Paul Schmehl (pauls () utdallas edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu

_________________________________________________________________
Get rid of annoying pop-up ads with the new MSN Toolbar – FREE! 
http://toolbar.msn.com/go/onm00200414ave/direct/01/



-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users