|
|
|
|
Snort Forums Archive
Archive Home » Support » pulling rules down with oink code
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
pulling rules down with oink code
Posted by PatrickHarper on March 07, 2005 16:19:46
I am getting a 500 error, is the server just getting pounded with people wanting to try the new method? |
|
Posted by passwdguy on March 07, 2005 18:05:00
Patrick, this was an error in the download code... it has been fixed.
thanks. |
|
Posted by rjenkins on March 07, 2005 19:36:52
It is still not working for me.
Loading /apps/oinkmaster/oinkmaster.conf Downloading file from http://www.snort.org/pub-bin/oinkmaster.cgi/a48e1b923b3ceda6b26f26b150741d15f7fb8977/snortrules-snapshot-2_3.tar.gz...
/apps/oinkmaster/oinkmaster.pl: Error: could not download file. Output from wget follows:
--23:58:00-- http://www.snort.org/pub-bin/oinkmaster.cgi/a48e1b923b3ceda6b26f26b150741d15f7fb8977/snortrules-snapshot-2_3.tar.gz
=> `/tmp/oinkmaster.mjWBfh4AIg/snortrules.tar.gz'
Resolving www.snort.org... done.
Connecting to www.snort.org[199.107.65.177]:80... connected.
HTTP request sent, awaiting response... 500 Internal Server Error
23:58:01 ERROR 500: Internal Server Error.
Oink, oink. Exiting...
|
|
Posted by rjenkins on March 07, 2005 19:45:02
I got it to work.
Question:
What if you are unable to determine the public IP address, because it is a pool of public IP addresses?
Thanks...
|
|
Posted by markus on March 07, 2005 20:16:31
Hi!
I just get an error from my oinkmaster cron, I ended up checking this website so I noticed this new website. Guess what, nice side effect. Congrats and Thanks for all.
Well, I'm having the exact same problem reported by Patrick. Read the first answer, then I checked my code again and still get the 500 error. Not sure if the URL I'm using is safe to post here, though.
My server has 5 public IP atm. I used the first one assigned to eth0 to generate the code.
What else could I do to fix this problem?
Thanks in advance. |
|
Posted by markus on March 07, 2005 20:23:29
Hi again!
Just posted and thought about something. I just used the same file name used in the example (user preferences page).
My 500 error was really a file not found related problem. I tried with snortrules-snapshot-CURRENT.tar.gz and it now works like a charm. :-)
Sorry and Thanks again. |
|
Posted by joker on March 07, 2005 22:44:00
Maybe i miss something :-)
I get:
gzip: /tmp/oinkmaster.f8cjXyI6rX/snortrules.tar.gz: not in gzip format
/usr/bin/oinkmaster.pl: Error: integrity check on gzip file failed (file transfer failed or file in URL not in gzip format?).
|
|
Posted by TonyC on March 08, 2005 03:16:07
I changed the filename in my oinkmaster.conf from snortrules-snapshot-2_3.tar.gz to snortrules-snapshot-2.3.tar.gz and that fixed my error.
Thanks,
-Tony |
|
Posted by scatheless on March 08, 2005 05:31:23
Saw the same error 500 behaviour with older 2.1 rules file. Changed snortrules-snapshot-2_1.tar.gz to snortrules-snapshot-2.1.tar.gz and that fixed it. |
|
Posted by joker on March 08, 2005 06:51:28
in my /etc/oinkmaster.conf i had:
url = http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz
now replaced by
url = http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_os/snortrules-snapshot-2.2.tar.gz
but same error (not in gzip format):
/usr/bin/oinkmaster.pl -b /etc/snort/bkrul/ -o /etc/snort/rulesLoading /etc/oinkmaster.conf
Downloading file from http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_os/snortrules-snapshot-2.1.tar.gz... done.
gzip: /tmp/oinkmaster.kCqywcTSZF/snortrules.tar.gz: not in gzip format
/usr/bin/oinkmaster.pl: Error: integrity check on gzip file failed (file transfer failed or file in URL not in gzip format?).
Oink, oink. Exiting...
If i manually download the file and try tar zxvf ... i can't :-(
Thanks
|
|
Posted by jgouveia on March 10, 2005 04:56:47
That will be because you must be logged in on snort.org to download VRT rules.
You're probably receiving a text/html stating that you need to be registered to get the rules. |
|
|
|
|
|
