Snort mailing list archives

Problem with snort,oinkmaster, and feed


From: "Carney, Megan" <Megan.Carney () selectcomfort com>
Date: Tue, 12 Apr 2011 09:46:47 -0500

I'm having a problem with snort and the latest feed that I haven't
managed to find solutions for on Google. I thought maybe someone on this
list would have some hints?

When I run the command to update the active rules I get this error from
oinkmaster:
/usr/sbin/oinkmaster: Error: incorrect URL:
"http://www.snort.org/sub-rules/snortrules-snapshot-2904.tar.gz/license-
code-redacted/

The command I'm using is "/usr/sbin/oinkmaster -b /etc/snort/backup -i
-C /etc/oinkmaster.conf -C /etc/autodisable.conf -o /etc/snort/rules/".

The URL works from the same machine if I use wget to download the file
manually.  So I can get around this by downloading the file manually and
pointing towards the file with this command:
"/usr/sbin/oinkmaster -b /etc/snort/backup -i -C /etc/oinkmaster.conf -C
/etc/autodisable.conf -o /etc/snort/rules/ -u
file://snortrules-snapshot-2904.tar.gz"

But it's a pain and I don't understand why the link isn't working within
oinkmaster - any hints?

Megan

------------------------------------------------------------------------------
Forrester Wave Report - Recovery time is now measured in hours and minutes
not days. Key insights are discussed in the 2010 Forrester Wave Report as
part of an in-depth evaluation of disaster recovery service providers.
Forrester found the best-in-class provider in terms of services and vision.
Read this report now!  http://p.sf.net/sfu/ibm-webcastpromo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: