Re: Snort with PulledPork and Ubuntu 12.04 Server

["Joel Esler (jesler)" <jesler () cisco com>]

I’ll have this fixed on the site asap.


On Jul 21, 2014, at 8:03 PM, JJC <cummingsj () gmail com<mailto:cummingsj () gmail com>> wrote:

looks like your rule_url value is incorrect.  just remove the ?oinkcode= part of your rule_url in the pulledpork.conf

JJC


On Mon, Jul 21, 2014 at 6:11 AM, Joel Esler (jesler) <jesler () cisco com<mailto:jesler () cisco com>> wrote:
Can you write me offlist with your oinkcode or email address your account is under?

--
Joel Esler
Sent from my iPhone

On Jul 21, 2014, at 7:43, "Christian Gebler" <geblerchristian () googlemail com<mailto:geblerchristian () googlemail 
com>> wrote:

Hi,

I'm using Snort 2.9.6.2 with PulledPork 0.7.0 on an Ubuntu Server 12.04 LTS.

Since last week it is not possible to download the new VRT Snort 2.9.6.2 Ruleset (now with https):

Checking latest MD5 for snortrules-snapshot-2962.tar.gz....
Fetching md5sum for: snortrules-snapshot-2962.tar.gz.md5
** GET https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5?oinkcode=<my oinkcode> ==> 501 Not Implemented
Error 501 when fetching https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz.md5 at 
./pulledpork.pl<http://pulledpork.pl/> line 463
main::md5file('<oinkcode>', 'snortrules-snapshot-2962.tar.gz', '/etc/snort/rules/tmp/', 'https://www.snort.org/rules/&apos;) 
called at ./pulledpork.pl<http://pulledpork.pl/> line 1847



Any suggestions?

thx

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org<http://blog.snort.org/> to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org<http://blog.snort.org/> to stay current on all the latest Snort news!


------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!