I used -vvnT This is what was output in the terminal window: D:\winids\pulledpork>perl pulledpork.pl -c d:\winids\pulledpork\etc\pulledpork.conf -vvnT >> d:\log.txt 'uname' is not recognized as an internal or external command,operable program or batch file. No such file in archive: 'doc/signatures/rules/VRT-License.txt' at pulledpork.pl line 289 Could not find an entry for 'doc/signatures/rules/VRT-License.txt' at pulledpork.pl line 289 No such file in archive: 'doc/signatures/rules/VRT-License.txt' at pulledpork.pl line 289 Could not find an entry for 'doc/signatures/rules/VRT-License.txt' at pulledpork.pl line 289 readline() on closed filehandle DATA at pulledpork.pl line 530. readline() on closed filehandle DATA at pulledpork.pl line 530. readline() on closed filehandle DATA at pulledpork.pl line 530. D:\winids\pulledpork> This is what was output to the log.txt file during the above run. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://code.google.com/p/pulledpork/ _____ ____ `----,\ ) `--==\\ / PulledPork v0.6.2dev the Cigar Pig https://www.snort.org/reg-rules/|opensource.gz| Prepping rules from snortrules-snapshot-2931.tar.gz for work.... extracting contents of d:\winids\pulledpork\temp/snortrules-snapshot-2931.tar.gz... Ignoring plaintext rules: deleted.rules Ignoring plaintext rules: experimental.rules Ignoring plaintext rules: local.rules Extracted: /tha_rules/VRT-misc.rules Extracted: /tha_rules/VRT-indicator-compromise.rules Extracted: /tha_rules/VRT-file-pdf.rules Extracted: /tha_rules/VRT-content-replace.rules Extracted: /tha_rules/VRT-file-identify.rules Extracted: /tha_rules/VRT-specific-threats.rules Extracted: /tha_rules/VRT-file-office.rules Extracted: /tha_rules/VRT-rpc.rules Extracted: /tha_rules/VRT-dns.rules Extracted: /tha_rules/VRT-snmp.rules Extracted: /tha_rules/VRT-policy-other.rules Extracted: /tha_rules/VRT-web-coldfusion.rules Extracted: /tha_rules/VRT-chat.rules Extracted: /tha_rules/VRT-voip.rules Extracted: /tha_rules/VRT-pop3.rules Extracted: /tha_rules/VRT-preprocessor.rules Extracted: /tha_rules/VRT-policy-social.rules Extracted: /tha_rules/VRT-scada.rules Extracted: /tha_rules/VRT-other-ids.rules Extracted: /tha_rules/VRT-sql.rules Extracted: /tha_rules/VRT-icmp.rules Extracted: /tha_rules/VRT-pua-p2p.rules Extracted: /tha_rules/VRT-info.rules Extracted: /tha_rules/VRT-server-mail.rules Extracted: /tha_rules/VRT-netbios.rules Extracted: /tha_rules/VRT-smtp.rules Extracted: /tha_rules/VRT-sensitive-data.rules Extracted: /tha_rules/VRT-web-iis.rules Extracted: /tha_rules/VRT-botnet-cnc.rules Extracted: /tha_rules/VRT-pua-toolbars.rules Extracted: /tha_rules/VRT-mysql.rules Extracted: /tha_rules/VRT-virus.rules Extracted: /tha_rules/VRT-web-misc.rules Extracted: /tha_rules/VRT-tftp.rules Extracted: /tha_rules/VRT-blacklist.rules Extracted: /tha_rules/VRT-shellcode.rules Extracted: /tha_rules/VRT-spyware-put.rules Extracted: /tha_rules/VRT-exploit.rules Extracted: /tha_rules/VRT-ddos.rules Extracted: /tha_rules/VRT-attack-responses.rules Extracted: /tha_rules/VRT-telnet.rules Extracted: /tha_rules/VRT-icmp-info.rules Extracted: /tha_rules/VRT-indicator-obfuscation.rules Extracted: /tha_rules/VRT-x11.rules Extracted: /tha_rules/VRT-p2p.rules Extracted: /tha_rules/VRT-scan.rules Extracted: /tha_rules/VRT-ftp.rules Extracted: /tha_rules/VRT-web-php.rules Extracted: /tha_rules/VRT-web-activex.rules Extracted: /tha_rules/VRT-decoder.rules Extracted: /tha_rules/VRT-web-frontpage.rules Extracted: /tha_rules/VRT-rservices.rules Extracted: /tha_rules/VRT-file-other.rules Extracted: /tha_rules/VRT-backdoor.rules Extracted: /tha_rules/VRT-multimedia.rules Extracted: /tha_rules/VRT-web-client.rules Extracted: /tha_rules/VRT-policy.rules Extracted: /tha_rules/VRT-imap.rules Extracted: /tha_rules/VRT-web-attacks.rules Extracted: /tha_rules/VRT-nntp.rules Extracted: /tha_rules/VRT-dos.rules Extracted: /tha_rules/VRT-finger.rules Extracted: /tha_rules/VRT-phishing-spam.rules Extracted: d:\winids\apache24\htdocs\base\signatures\rules/VRT-License.txt Extracted: /tha_rules/VRT-oracle.rules Extracted: /tha_rules/VRT-policy-multimedia.rules Extracted: /tha_rules/VRT-pop2.rules Extracted: /tha_rules/VRT-bad-traffic.rules Extracted: /tha_rules/VRT-web-cgi.rules Prepping rules from snortrules-snapshot-2931.tar.gz for work.... extracting contents of d:\winids\pulledpork\temp/snortrules-snapshot-2931.tar.gz... Ignoring plaintext rules: deleted.rules Ignoring plaintext rules: experimental.rules Ignoring plaintext rules: local.rules Extracted: /tha_rules/VRT-misc.rules Extracted: /tha_rules/VRT-indicator-compromise.rules Extracted: /tha_rules/VRT-file-pdf.rules Extracted: /tha_rules/VRT-content-replace.rules Extracted: /tha_rules/VRT-file-identify.rules Extracted: /tha_rules/VRT-specific-threats.rules Extracted: /tha_rules/VRT-file-office.rules Extracted: /tha_rules/VRT-rpc.rules Extracted: /tha_rules/VRT-dns.rules Extracted: /tha_rules/VRT-snmp.rules Extracted: /tha_rules/VRT-policy-other.rules Extracted: /tha_rules/VRT-web-coldfusion.rules Extracted: /tha_rules/VRT-chat.rules Extracted: /tha_rules/VRT-voip.rules Extracted: /tha_rules/VRT-pop3.rules Extracted: /tha_rules/VRT-preprocessor.rules Extracted: /tha_rules/VRT-policy-social.rules Extracted: /tha_rules/VRT-scada.rules Extracted: /tha_rules/VRT-other-ids.rules Extracted: /tha_rules/VRT-sql.rules Extracted: /tha_rules/VRT-icmp.rules Extracted: /tha_rules/VRT-pua-p2p.rules Extracted: /tha_rules/VRT-info.rules Extracted: /tha_rules/VRT-server-mail.rules Extracted: /tha_rules/VRT-netbios.rules Extracted: /tha_rules/VRT-smtp.rules Extracted: /tha_rules/VRT-sensitive-data.rules Extracted: /tha_rules/VRT-web-iis.rules Extracted: /tha_rules/VRT-botnet-cnc.rules Extracted: /tha_rules/VRT-pua-toolbars.rules Extracted: /tha_rules/VRT-mysql.rules Extracted: /tha_rules/VRT-virus.rules Extracted: /tha_rules/VRT-web-misc.rules Extracted: /tha_rules/VRT-tftp.rules Extracted: /tha_rules/VRT-shellcode.rules Extracted: /tha_rules/VRT-blacklist.rules Extracted: /tha_rules/VRT-spyware-put.rules Extracted: /tha_rules/VRT-exploit.rules Extracted: /tha_rules/VRT-ddos.rules Extracted: /tha_rules/VRT-attack-responses.rules Extracted: /tha_rules/VRT-telnet.rules Extracted: /tha_rules/VRT-icmp-info.rules Extracted: /tha_rules/VRT-indicator-obfuscation.rules Extracted: /tha_rules/VRT-x11.rules Extracted: /tha_rules/VRT-p2p.rules Extracted: /tha_rules/VRT-scan.rules Extracted: /tha_rules/VRT-ftp.rules Extracted: /tha_rules/VRT-web-php.rules Extracted: /tha_rules/VRT-web-activex.rules Extracted: /tha_rules/VRT-decoder.rules Extracted: /tha_rules/VRT-web-frontpage.rules Extracted: /tha_rules/VRT-rservices.rules Extracted: /tha_rules/VRT-file-other.rules Extracted: /tha_rules/VRT-backdoor.rules Extracted: /tha_rules/VRT-multimedia.rules Extracted: /tha_rules/VRT-web-client.rules Extracted: /tha_rules/VRT-policy.rules Extracted: /tha_rules/VRT-web-attacks.rules Extracted: /tha_rules/VRT-imap.rules Extracted: /tha_rules/VRT-nntp.rules Extracted: /tha_rules/VRT-dos.rules Extracted: /tha_rules/VRT-finger.rules Extracted: /tha_rules/VRT-phishing-spam.rules Extracted: d:\winids\apache24\htdocs\base\signatures\rules/VRT-License.txt Extracted: /tha_rules/VRT-oracle.rules Extracted: /tha_rules/VRT-policy-multimedia.rules Extracted: /tha_rules/VRT-pop2.rules Extracted: /tha_rules/VRT-bad-traffic.rules Extracted: /tha_rules/VRT-web-cgi.rules Reading rules... Reading rules... Cleanup.... removed 70 temporary snort files or directories from d:\winids\pulledpork\temp/tha_rules! Modifying Sids.... Done! Processing d:\winids\pulledpork\etc\enablesid.conf.... Modified 0 rules Done Processing d:\winids\pulledpork\etc\dropsid.conf.... Modified 0 rules Done Processing d:\winids\pulledpork\etc\disablesid.conf.... Modified 0 rules Done Setting Flowbit State.... Enabled 11 flowbits Enabled 1 flowbits Done Writing d:\winids\snort\rules\winids.rules.... Done Generating sid-msg.map.... Done Writing d:\winids\snort\etc\sid-msg.map.... Done Writing d:\winids\snort\log\sid_changes.log.... Done Rule Stats.... New:-------0 Deleted:---0 Enabled Rules:----3492 Dropped Rules:----0 Disabled Rules:---11456 Total Rules:------14948 Done Please review d:\winids\snort\log\sid_changes.log for additional details Fly Piggy Fly!