Snort mailing list archives

Re: Pulledpork Returning 403 on snortrules-snapshot


From: JJ Cummings <cummingsj () gmail com>
Date: Sun, 3 Feb 2013 17:49:14 -0700

Most likely you can just update to the latest version of snort (PP reads what you have and attempts to retrieve the 
supporting rule set version)

Sent from the iRoad

On Feb 3, 2013, at 16:55, Joel Esler <jesler () sourcefire com> wrote:

You are attempting to download 2852.  Which had been eol'ed for years.  

Change that to 2940 and you'll get the latest ruleset. 

--
Joel Esler
Sent from my iPhone 

On Feb 3, 2013, at 6:39 PM, Dan Rossiter <dan.rossiters () gmail com> wrote:

In running pulledpork, I'm getting a 403 error downloading the snortrules-snapshot tarball. All the other files 
(opensource & emerging.rules) download without a problem after I comment out the snapshot line.

Is this a known issue? Any suggestions on how to resolve? Obviously the oinkcode is correct since the other files 
worked and the tarball name is simply the name pre-included in the config file.

The specific error being throws is the following:

Checking latest MD5 for snortrules-snapshot-2852.tar.gz....
        A 403 error occurred, please wait for the 15 minute timeout
        to expire before trying again or specify the -n runtime switch
        You may also wish to verfiy your oinkcode, tarball name, and other configuration options
        Error 403 when fetching https://www.snort.org/reg-rules/snortrules-snapshot-2852.tar.gz.md5 at 
pulledpork/pulledpork.pl line 453
        main::md5file('<oinkcode here>', 'snortrules-snapshot-2852.tar.gz', '/tmp/', 
'https://www.snort.org/reg-rules/&apos;) called at pulledpork/pulledpork.pl line 1758

-Dan
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: