Snort mailing list archives
Snort Blog: Are you getting 404 errors attempting to download the community ruleset?
From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Thu, 29 Oct 2015 16:40:02 +0000
http://blog.snort.org/2015/10/are-you-getting-404-errors-attempting.html Are you getting 404 errors attempting to download the community ruleset? Yesterday, it came to our attention during some routine cleanup and maintenance that there were about 15,000 people attempting to download a Community Rule file directly from an older S3 Bucket. (Which hadn't been updated in over a year.) The link directly into the S3 bucket was apparently in use by the default pulledpork.conf, and many people had not updated it to the newest link now available on Snort.org<http://snort.org>. I have submitted a pull request against the pulledpork.conf to correct that link, and that should be fixed shortly. However, for those of you that need to change your installation, please find this line in your PulledPork.conf: https://github.com/shirkdog/pulledpork/blob/master/etc/pulledpork.conf#L21 Which looks like this: rule_url=https://s3.amazonaws.com/snort-org/www/rules/community/|community-rules.tar.gz|Community and change it to: rule_url=https://www.snort.org/downloads/community/|community-rules.tar.gz|Community This will ensure that you are pulling the correct community rules file. Sorry for any lack of notice, we figured these were old installations without any updates, and didn't realize that it was actually in the default pulledpork.conf. Please update to the new rule file and join the hundreds of thousands of users that download that rule file on a daily basis! As always, if you'd like to contribute to the community ruleset, please send your rules to either the Snort-sigs or directly to Talos. -- Joel Esler Manager, Threat Intelligence Team & Open Source Talos Group http://www.talosintel.com
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort Blog: Are you getting 404 errors attempting to download the community ruleset? Joel Esler (jesler) (Oct 29)