Re: Snort IP blacklist issue

[ha dinhphu <hadinhphu () gmail com>]

It's been a while since I asked about this problem. Does anyone has
solution for it?

On Fri, Aug 14, 2015 at 1:12 PM, ha dinhphu <hadinhphu () gmail com> wrote:

> Hi kitty,
>
> Yes my /tmp directory is available with rwx permission by all user. I ran
> the command as root, so i don't think that's the problem.
> https://code.google.com/p/pulledpork/issues/detail?id=166 -- another user
> has the same problem.
> http://sourceforge.net/p/snort/mailman/message/32913112/  --snort-user
>
> On Fri, Aug 14, 2015 at 1:04 PM, waldo kitty <wkitty42 () windstream net>
> wrote:
>
> > On 08/14/2015 12:21 PM, ha dinhphu wrote:
> > > IP Blacklist download of
> > http://talosintel.com/files/additional_resources/ips_blacklist/ip-filter.blf..
> > ..
> > > Reading IP List...
> > > Couldn't read /tmp/296.170136981772-black_list.rules - No such file or
> > directory
> >
> > what linux are you using? does it have a working /tmp directory that is
> > writable
> > by all users?
> >
> > both of your reports have been failures to read a file that should have
> > been
> > downloaded into /tmp... these failures seem to point to /tmp not existing
> > or it
> > is not writable by the user your pulledpork is running as...
> >
> > --
> >   NOTE: No off-list assistance is given without prior approval.
> >         *Please keep mailing list traffic on the list* unless
> >         private contact is specifically requested and granted.
> >
> >
> > ------------------------------------------------------------------------------
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!