Snort mailing list archives

PulledPork error 422 when fetching ruleset


From: Chris Odd <chris () chrisodd com>
Date: Mon, 16 Nov 2015 15:22:26 -0500

Hi,  I received the notice from Joel a few weeks ago indicating that I was attempting to download an outdated Snort 
ruleset (2.9.7.0).

I had a look at my config today; when I run pulled pork, here’s the result (I’ve manually replaced my oinkcode with 
<oinkcode>):

Checking latest MD5 for snortrules-snapshot-2970.tar.gz....
        Error 422 when fetching https://www.snort.org/reg-rules/snortrules-snapshot-2970.tar.gz.md5 at 
/usr/local/bin/pulledpork.pl line 482.
        main::md5file(‘<oinkcode>', 'snortrules-snapshot-2970.tar.gz', '/tmp/', 'https://www.snort.org/reg-rules/&apos;) 
called at /usr/local/bin/pulledpork.pl line 1875

However, my pulledpork config does not reference that rules tarball, here’s how my rules are defined in pulledpork.conf:

rule_url=https://www.snort.org/reg-rules/|snortrules-snapshot.tar.gz|<oinkcode>
rule_url=https://www.snort.org/reg-rules/|opensource.gz|<oinkcode>
rule_url=https://rules.emergingthreatspro.com/|emerging.rules.tar.gz|open-nogpl

Which matches what it should be, according to https://www.snort.org/oinkcodes


Any ideas on what I should be changing?

Thanks




------------------------------------------------------------------------------
Presto, an open source distributed SQL query engine for big data, initially
developed by Facebook, enables you to easily query your data on Hadoop in a 
more interactive manner. Teradata is also now providing full enterprise
support for Presto. Download a free open source copy now.
http://pubads.g.doubleclick.net/gampad/clk?id=250295911&iu=/4140
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: