Re: Error rules update

[Jeremy Hoel <jthoel () gmail com>]

Yes. Your snort is too old and no longer supported.  You need to upgrade
it.
On May 1, 2014 3:26 AM, "basant subba" <basantsubba () gmail com> wrote:

> @Jeremy:: My snort version is  2.9.2 and I am using pulledpork
> version 0.7.0. Is that gonna be a problem?
>
>
> On Thu, May 1, 2014 at 11:29 AM, basant subba <basantsubba () gmail com>wrote:
>
> > My snort User name and email are both basantsubba () gmail com. Thank you
> > for looking into this matter personally. And Jeremy pointed out that
> > there's a dependency between the snort and pulledpork versions.
> > My snort version is  2.9.2 and I am using pulledpork version 0.7.0. Is
> > that gonna be a problem. I am also using proxy server to connect to
> > internet. Once again thank you for all the help.
> >
> >
> > On Thu, May 1, 2014 at 1:03 AM, Joel Esler (jesler) <jesler () cisco com>wrote:
> >
> > >  Dear Basant,
> > >
> > > In order to look into this issue, I am going to need your Snort.orgusername and email address.  Please feel free to 
> > > email me directly with
> > > that information.
> > >
> > >  --
> > > *Joel Esler*
> > > Open Source Manager
> > > Threat Intelligence Team Lead
> > > Vulnerability Research Team
> > >
> > >
> > >  On Apr 30, 2014, at 2:53 PM, Jeremy Hoel <jthoel () gmail com> wrote:
> > >
> > >  pulledpork uses by default the version of snort that you have
> > > installed.  newer versions of the rulesets won't run on your old install.
> > >
> > >  If you mean that you manually set the snort version in the pulledpork
> > > config and you are still getting the errors, do you have your oink code set
> > > properly and/or are you using a http proxy?
> > >
> > >
> > >
> > >
> > > On Wed, Apr 30, 2014 at 6:24 PM, basant subba <basantsubba () gmail com>wrote:
> > >
> > > > It doesn't work for snortrules-snapshot-2946.tar.gz<http://snort.org/downloads/2866>,
> > > > snortrules-snapshot-2956.tar.gz <http://snort.org/downloads/2866> and
> > > > snortrules-snapshot-2960.tar.gz <http://snort.org/downloads/2866>which are all listed in Registered User list in 
> > > > Snort home-page. Getting
> > > > the same error. How to get over this problem? Have been stuck up with this
> > > > problem for quite sometime now.
> > > >
> > > >
> > > > On Wed, Apr 30, 2014 at 9:11 PM, waldo kitty <wkitty42 () windstream net>wrote:
> > > >
> > > > > On 4/30/2014 11:00 AM, Michel Renard wrote:
> > > > > > https://www.snort.org/reg-rules/snortrules-snapshot-2931.tar.gz.md5at
> > > > >
> > > > > there's your problem right there... 2.9.3.1 is no longer supported as
> > > > > it is EoL
> > > > > (End of Life)... it has been EoL since 2013 Sep 30...
> > > > >
> > > > >
> > > > > http://blog.snort.org/2013/09/snort-2931-is-now-eol-for-rule-support.html
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > NOTE: No off-list assistance is given without prior approval.
> > > > >        Please keep mailing list traffic on the list unless
> > > > >        private contact is specifically requested and granted.
> > > > >
> > > > >
> > > > > ------------------------------------------------------------------------------
> > > > > "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> > > > > Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> > > > > unparalleled scalability from the best Selenium testing platform
> > > > > available.
> > > > > Simple to use. Nothing to install. Get started now for free."
> > > > > http://p.sf.net/sfu/SauceLabs
> > > > > _______________________________________________
> > > > > Snort-users mailing list
> > > > > Snort-users () lists sourceforge net
> > > > > Go to this URL to change user options or unsubscribe:
> > > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > > Snort-users list archive:
> > > > > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> > > > >
> > > > > Please visit http://blog.snort.org to stay current on all the latest
> > > > > Snort news!
> > > >
> > > >
> > > >
> > > > ------------------------------------------------------------------------------
> > > > "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> > > > Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> > > > unparalleled scalability from the best Selenium testing platform
> > > > available.
> > > > Simple to use. Nothing to install. Get started now for free."
> > > > http://p.sf.net/sfu/SauceLabs
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists sourceforge net
> > > > Go to this URL to change user options or unsubscribe:
> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > Snort-users list archive:
> > > > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> > > >
> > > > Please visit http://blog.snort.org to stay current on all the latest
> > > > Snort news!
> > >
> > > ------------------------------------------------------------------------------
> > > "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> > > Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> > > unparalleled scalability from the best Selenium testing platform
> > > available.
> > > Simple to use. Nothing to install. Get started now for free."
> > >
> > > http://p.sf.net/sfu/SauceLabs_______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> > >
> > > Please visit http://blog.snort.org to stay current on all the latest
> > > Snort news!
>
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!