Re: New Snort breaks pulled pork

[James Lay <jlay () slave-tothe-box net>]

Appreciate that YM thanks.  I'll script up a manual process for now
until it gets fixed. 

James 

On 2017-10-12 16:45, Y M wrote:

> James, if you explicitly set snort_version to 2.9.11.0 in the PulledPork conf file (near the end of the file) it's 
> works fine. However, if you do so and also pull ET's then PulledPork won't work with ET either, but that's not 
> PulledPork's issue. ET website does not yet include a rules directory for the newer version of Snort. 
>
> You can always download the rules tarballs manually to /tmp along with the .md5 files and pass -n to your PulledPork 
> command at least until a permanent fix is in place. 
>
> Hope this helps. 
> YM. 
>
> _____________________________
> From: James Lay <jlay () slave-tothe-box net>
> Sent: Friday, October 13, 2017 1:08 AM
> Subject: [Snort-users] New Snort breaks pulled pork
> To: Snort <snort-users () lists snort org>
>
> FYI:
>
> https://github.com/shirkdog/pulledpork/issues/282
>
> James
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists snort org
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
> Please visit http://blog.snort.org [1] to stay current on all the latest Snort news!

  

Links:
------
[1] http://blog.snort.org

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!