Re: Oinkcode issue

["Joel Esler (jesler)" <jesler () cisco com>]

Dear Thomas,

YM is right, the version of rules you are attempting to download doesn't exist anymore as a result of our EOL policy.

Please see it here:
https://www.snort.org/eol

--
Joel Esler
Manager
Talos Group
http://www.talosintelligence.com


> On Sep 6, 2016, at 2:27 PM, Y M <snort () outlook com> wrote:
>
> Snort 2.9.8.0 is EOL and thus no rules are available for it.
>
> YM
>
> Sent from Mobile
>
>
>
>
> On Tue, Sep 6, 2016 at 9:23 PM +0300, "Thomas Mullins" <TSMullins () mecc edu <mailto:TSMullins () mecc edu>> wrote:
>
> Hello everyone,
>
> We are running Snort 2.9.8.0 and have a new issue updating our rules.  We use Pulledpork to update our rule-set.  
> Running rule-update, we get this error “Running PulledPork.
>         Error 422 when fetching https://www.snort.org/rules/snortrules-snapshot-2980.tar.gz.md5 at 
> /usr/bin/pulledpork.pl line 463
>         main::md5file('088771085b5db7ea26ca547909f45939b577e497', 'snortrules-snapshot-2980.tar.gz', '/tmp/', 
> 'https://www.snort.org/rules/&apos;) called at /usr/bin/pulledpork.pl line 1885
>     http://code.google.com/p/pulledpork/ <http://code.google.com/p/pulledpork/>”
>
> Looking at line 1885 in pulledpork.pl. it references an md5 hash error:
>
> if ( !$Hash ) {
>                 $md5 = md5file( $oinkcode, $rule_file, $temp_path, $base_url );
>
> Any thoughts?
>
> Thanks
> Shane
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!