-
Pulled Pork Update Error
mbrichetto replied to mbrichetto's topic in Issues with Rules in the Windows Intrusion Detection systemAttached is my Pulled Pork folder and the temp folder was cleared out. I also cleared out the folder and tried to run the command again, and in the picture attached that shows the files getting downloaded there. So it is grabbing something at least. My OinkCode also looks good. This device is also not sitting behind a proxy. pulledpork.zip
-
Pulled Pork Update Error
mbrichetto replied to mbrichetto's topic in Issues with Rules in the Windows Intrusion Detection systemHi attached is my pulled pork config file pulledpork.conf
-
Pulled Pork Update Error
Hi, I have recently went to upgrade my Snort version and Pulled Pork version. Those seem to have upgraded just fine. What I am having an issue with is trying to update pulled pork after the update. When I run the update command it seems like it can't connect to Talos which is a first time I am seeing that issue. Has anyone seen an issue like this before. In the attached screenshot I am able to browse to the website shown. It almost seems like the Talos side might not allow me in to download said file. Thanks in advance.
-
Missing White_List.rules
mbrichetto replied to mbrichetto's topic in Issues with Rules in the Windows Intrusion Detection systemPerfect that did it. I then got an error with black_list.rules and I did the same Nul command again. Everything looks like it is good to.
-
Missing White_List.rules
So I got through the setup of pulled pork with no real problems. I finally get to the last step of running the Snort self-test using the command line d:winidssnortbinsnort -c d:\winids\snort\etc\snort.conf -l d:\winids\snort\log -i1 -T It comes back with an error ERROR: d:\winids\snort\etc\snort.conf(507) => Unable to open address file d:\winids\snort\rules\white_list.rules, Error: No such file or directory Fatal Error, Quitting.. Not sure what I messed up exactly.
-
Open Source TG Download Link Broken
Just FYI the link to download for the "Rules Documentation (opensource.tgz)" link is broken. It looks like the snort.org site moved it to this link https://www.snort.org/downloads/community/opensource.tar.gzf So just FYI on that. I got the file with no problem.