Look close and you'll see that it first downloads the 2.3 tarball and
then the 2.2 tarball. You have for some reason specified two URLs in
oinkmaster.conf (or multiple -u <url> arguments), where the second one
points to a non-existent file. Remove the snortrules-snapshot-2_2.tar.gz
URL and it should work.
I'd also strongly recommend that you make sure you run the latest
version of Snort and use the 2.4 rules instead, although that has
nothing do to with this issue.
/Andreas
On Wed, 22 Feb 2006, CasperLinux wrote:
I have tried using oinkmaster (v1.2) to get latest Snort rules but I'm
encountering the error at the end of the post when run from Cron or command
line. It finds the file and downloads it (or appears to) but then it begins
downloading a file again?
Is this a configuration issue within oinkmaster itself? I'm presuming that
the latter part is telling me that it is finding the web page but when
sending the request for the file its coming back as not found.
Any ideas?
Don
Loading /etc/oinkmaster.conf
Downloading file from http://www.snort.org/pub-bin/oinkmaster.cgi/[oink
code]/snortrules-snapshot-2.3.tar.gz... done.
Archive successfully downloaded, unpacking... done.
Downloading file from
http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz...
/usr/sbin/oinkmaster: Error: could not download from
http://www.snort.org/dl/rules/snortrules-snapshot-2_2.tar.gz. Output from
wget follows:
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
