pulledpork
pulledpork copied to clipboard
Pulled Pork for Snort and Suricata rule management (from Google code)
hello, few rules downloaded, i use snort 3 1 36 0 and the rules version 3 1 3 0 then i have tried with rules 3 1 3 5 0...
I did configure a cron job for downloading the latest rules. On the ip-block-list I get an Error. "can't set DAQ BPF filter to '/etc/snort/rules/iplists 1361' (pcap_daq_set_filter: pcap_compile: can't parse...
Hello, I've been working on an install of snort with pulled pork on 4 different systems. Currently Centos 6, Centos 7, Ubuntu 14, Ubuntu 16. Everything works on each system...
Prepping rules from snortrules-snapshot-29181.tar.gz for work.... Use of uninitialized value $arch in concatenation (.) or string at d:\winids\script\pulledpork.pl line 330. Done! Reading rules... readline() on closed filehandle DATA at d:\winids\script\pulledpork.pl...
Checking latest MD5 for snortrules-snapshot-29180.tar.gz.... Rules tarball download of snortrules-snapshot-29180.tar.gz.... They Match Done! IP Blocklist download of https://snort.org/downloads/ip-block-list.... Reading IP List... Prepping rules from snortrules-snapshot-29180.tar.gz for work.... Done! Reading rules......
Hello, I tried to install your application according to the snort 3 [Installation guide for Ubuntu (page 9 - 11)](https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/003/979/original/Snort3_3.1.0.0_on_Ubuntu_18___20.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIXACIED2SPMSC7GA%2F20210215%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210215T132857Z&X-Amz-Expires=172800&X-Amz-SignedHeaders=host&X-Amz-Signature=b89786f8d04c6b5270176ad658bd6627a525427e05041d6cc819d0fb585817bd). When I try to execute the last command one page...
Hey Hey, Swine people. I'm having a problem with pulledpork, and pulling down rules for snort 3. I'm using the latest release of snort on github (3.1.3.0) I discovered quickly...
Hi guys, I'm trying to modify a rule from "drop" to "alert" action, but for some reason, pulledpork is skipping any configuration in the modifysid.conf file. my setup: OS: Ubuntu...
When fixing the bug in #353 I noticed that even though the checking of the directory and file existence was working, the path was being interpreted within a specific REGEX...
Hello guys, I need some critical help. My system is CentOs 7. When giving the command: "pulledpork.pl -c /etc/snort/pulledpork.conf -l" It sits in an eternal looping. I've been trying to...