snort-users March 2012 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: Re: [Snort-users] Oinkmaster fails to download rule

Re: [Snort-users] Oinkmaster fails to download rules

From: Joel Esler <jesler_at_nospam>
Date: Fri Mar 09 2012 - 15:49:27 GMT
To: Jeronimo L. Cabral <jelocabral@gmail.com>

When you login to Snort.org, on your "Account" or "Oinkcode" page there are instructions on how to configure PulledPork (which we recommend over Oinkmaster) and Oinkmaster on how to pull the correct rulepack.

-- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire On Mar 9, 2012, at 9:43 AM, Jeronimo L. Cabral wrote: > Sorry.....I had an error in the URL, this is mine: > > http://www.snort.org/dl/rules/snortrules-snapshot-2921.tar.gz > > I've installed snort 2.9.2.1 but the Oinkmaster error appears. > > What can be the problem ??? > > On Fri, Mar 9, 2012 at 11:39 AM, Joel Esler <jesler@sourcefire.com> wrote: >> On Fri, Mar 09, 2012 at 11:35:00AM -0300, Jeronimo L. Cabral wrote: >>> Dear, I use Oinkmaster to download rules as registered user through a >>> proxy server I'veconfigred in /etc/wgetrc. But I fail, look: >>> >>> root@myhost:/etc# oinkmaster -o /usr/local/snort/rules >>> Loading /etc/oinkmaster.conf >>> Downloading file from >>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz... >>> /usr/sbin/oinkmaster: Error: could not download from >>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz. Output >>> from wget follows: >>> >>> --2012-03-09 11:29:21-- >>> http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz >>> Connecting to 10.4.133.106:4900... connected. >>> Proxy request sent, awaiting response... 403 Forbidden >>> 2012-03-09 11:29:22 ERROR 403: Forbidden. >>> Oink, oink. Exiting... >> >> We haven't distributed rules for 2.2.0 for about... 8 years? At least? >> >> >> I suggest updating to Snort 2.9.2.2 and downloading 2.9.2.2 rules. >> >> -- >> Joel Esler >> Senior Research Engineer, VRT >> OpenSource Community Manager >> Sourcefire >> > > ------------------------------------------------------------------------------ > Virtualization & Cloud Management Using Capacity Planning > Cloud computing makes use of virtualization - but cloud computing > also focuses on allowing computing to be delivered as a service. > http://www.accelacomm.com/jaw/sfnl/114/51521223/ > _______________________________________________ > Snort-users mailing list > Snort-users@lists.sourceforge.net > Go to this URL to change user options or unsubscribe: > https://lists.sourceforge.net/lists/listinfo/snort-users > Snort-users list archive: > http://www.geocrawler.com/redir-sf.php3?list=snort-users > > Please visit http://blog.snort.org to stay current on all the latest Snort news! ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!