Re: Pulledpork Returning 403 on snortrules-snapshot

[Joel Esler <jesler () sourcefire com>]

You are attempting to download 2852.  Which had been eol'ed for years.  

Change that to 2940 and you'll get the latest ruleset. 

--
Joel Esler
Sent from my iPhone 

On Feb 3, 2013, at 6:39 PM, Dan Rossiter <dan.rossiters () gmail com> wrote:

> In running pulledpork, I'm getting a 403 error downloading the snortrules-snapshot tarball. All the other files 
> (opensource & emerging.rules) download without a problem after I comment out the snapshot line.
>
> Is this a known issue? Any suggestions on how to resolve? Obviously the oinkcode is correct since the other files 
> worked and the tarball name is simply the name pre-included in the config file.
>
> The specific error being throws is the following:
>
> Checking latest MD5 for snortrules-snapshot-2852.tar.gz....
>         A 403 error occurred, please wait for the 15 minute timeout
>         to expire before trying again or specify the -n runtime switch
>         You may also wish to verfiy your oinkcode, tarball name, and other configuration options
>         Error 403 when fetching https://www.snort.org/reg-rules/snortrules-snapshot-2852.tar.gz.md5 at 
> pulledpork/pulledpork.pl line 453
>         main::md5file('<oinkcode here>', 'snortrules-snapshot-2852.tar.gz', '/tmp/', 
> 'https://www.snort.org/reg-rules/&apos;) called at pulledpork/pulledpork.pl line 1758
>
> -Dan
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_jan
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_jan

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!