Snort mailing list archives

Re: Oinkmaster can't get rules


From: James Lay <jlay () slave-tothe-box net>
Date: Mon, 12 Jul 2010 17:51:23 -0600

From: Fábio Ferrão <ferrao04 () gmail com>
Date: Thu, 8 Jul 2010 10:07:33 -0300
To: Snort <snort-users () lists sourceforge net>
Subject: [Snort-users] Oinkmaster can't get rules

<snip>
[prompt]# /usr/local/bin/oinkmaster -o /usr/local/snort/rules/rules >
/home/suporte/oinkmaster.update
Loading /usr/local/etc/oinkmaster.conf
Downloading file 
from http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snaps
hot-2853.tar.gz... 
/usr/local/bin/oinkmaster: Error: could not download
from http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snaps
hot-2853.tar.gz. Output from wget follows:

 http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-
2853.tar.gzResolving www.snort.org... 68.177.102.20
Connecting to www.snort.org <http://www.snort.org> |68.177.102.20|:80...
connected.
HTTP request sent, awaiting response... 403 Forbidden
2010-07-06 13:18:43 ERROR 403: Forbidden.

<snip>

I am receiving exactly the same thing, even though I¹ve modified my my
oinkmaster.pl to reflect the ‹no-check-certificate.  It seems like sometime
a redirect doesn¹t fire since I get to 68.177.102.20, and instead of the 302
redirect, simply a 403 and dumped.  Anyone else besides myself and the OP
seeing this?  Thanks.

James
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: