snort + oikmaster or pulledpork

graudeejs

graudeejs

Which one do you recommend?

I feel a bit confused about links to download rules from snort.org

should I use:
Code: 
url = http://www.snort.org/pub-bin/oinkmaster.cgi/<oinkcode here>/<filename>
or
Code: 
url = http://www.snort.org/pub-bin/oinkmaster.cgi/<filename>/<oinkcode here>

Code: 
# oinkmaster -o /usr/local/etc/snort/rules
Loading /usr/local/etc/oinkmaster.conf
Downloading file from [url]http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2860.tar.gz[/url]... 
/usr/local/bin/oinkmaster: Error: could not download from [url]http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2860.tar.gz[/url]. Output from wget follows:

 [url]http://www.snort.org/pub-bin/oinkmaster.cgi/*oinkcode*/snortrules-snapshot-2860.tar.gzResolving[/url] [url]www.snort.org[/url]... 68.177.102.20
Connecting to [url]www.snort.org|68.177.102.20|:80[/url]... connected.
HTTP request sent, awaiting response... 302 Found
Location: [url]https://s3.amazonaws.com/snort.org/rules/20100701/snortrules-snapshot-2860.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1280573919&Signature=RU6sre4X93ya%2FsvPjybGG9[/url]
pmHEY%3D [following]
--2010-07-31 13:58:09--  [url]https://s3.amazonaws.com/snort.org/rules/20100701/snortrules-snapshot-2860.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1280573919&Signature=RU6sre4X9[/url]
3ya%2FsvPjybGG9pmHEY%3D
Resolving s3.amazonaws.com... 72.21.211.164
Connecting to s3.amazonaws.com|72.21.211.164|:443... failed: Operation not permitted.
Retrying.

--2010-07-31 13:58:10--  (try: 2)  [url]https://s3.amazonaws.com/snort.org/rules/20100701/snortrules-snapshot-2860.tar.gz?AWSAccessKeyId=AKIAJJSHU7YNPLE5MKOQ&Expires=1280573919&Signature[/url]
=RU6sre4X93ya%2FsvPjybGG9pmHEY%3D
Connecting to s3.amazonaws.com|72.21.211.164|:443... failed: Operation not permitted.
Retrying.
 
I realize that this thread is a little outdated, but I figure I would respond anyway (since I'm the creator of PulledPork) and of course thus I will put my shameless plug in for PulledPork.

Beyond that, I see output from oinkmaster, were you having issues downloading using PP also or?�e
 
Was just saying that I know you were having issues downloading rulesets with oinkmaster, was wondering if you were also having issues using PP (Pulled Pork) ?
 
You must log in or register to reply here.
Back
Top