Snort mailing list archives

Re: Oinkmaster can't get rules


From: Alejandro Cabrera Obed <aco1967 () gmail com>
Date: Wed, 7 Jul 2010 14:24:11 -0300

Thanks Joel, but I think oinkmaster.pl asks my proxy for the web site
s3.amazonaws.com and the DNS cache's proxy must resolve the hostname
to IP.

If I put https://s3.amazonaws.com in my web browser through the same
proxy, I get the site.

But from command line with oinkmaster.pl, I get that error.

Thanks again

2010/7/7 Joel Esler <jesler () sourcefire com>:
Looks like you may have a dns problem resolving amazon's hostname.


Sent from my iPhone

On Jul 7, 2010, at 12:30 PM, Alejandro Cabrera Obed <aco1967 () gmail com> wrote:

Dear all, I've Oinkmaster 2.0 installed in my Windows machine. I've
change the URL path to download the Snort rules since last June, it's
OK because some days ago it worked.

I run the script from a command shell (Windows), in the way:

c:\oinkmaster-2.0\oinkmaster.pl -C c:\oinkmaster-2.0\oinkmaster.conf
-o "c:\snort\rules"

But some days ago I got the following error:

oinkmaster.pl: Error: could not download from
http://www.snort.org/pub-bin/oinkmaster.cgi
/*my_oinkcode*/snortrules-snapshot-2853.tar.gz:
500 Can't connect to s3.amazonaws.com:443 (Bad hostname 's3.amazonaws.com')

I put my proxy settings as a Windows enviroment variable as follow:

HTTP_proxy = http://10.4.56.2:8080

but I don't know what happen now.

If I download the rules from my web browser with the same proxy
settings, I succed !!!

So please what's the problem with oinkmaster.pl ???

Thanks a lot.

Alejandro

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
Alejandro Cabrera Obed
aco1967 () gmail com
www.alejandrocabrera.com.ar

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: