Oinkmaster utter chaos

priyadarshan · 03-27-2009, 05:36 AM

This is my /etc/oinkmaster.conf

##########################################################################
url = http://www.snort.org/pub-bin/oinkmas...hot-2.3.tar.gz

path = /sbin:/usr/sbin:/bin:/usr/bin
use_external_bins = 1
tmpdir = /var/run/oinkmaster
umask = 0027

update_files = \.rules$|\.config$|\.conf$|\.txt$|\.map$

use_path_checks = 1

skipfile local.rules

skipfile deleted.rules

skipfile snort.conf

modifysid * "^alert" | "drop"

##########################################################################

But when I run
sudo oinkmaster -o /etc/snort_inline/rules -b /etc/snort_inline/backup 2>&1

But I get following error:

Loading oinkmaster.conf
Downloading file from http://www.snort.org/pub-bin/oinkmas...hot-2.3.tar.gz...
/usr/sbin/oinkmaster : Error: Could not download from http://www.snort.org/pub-bin/oinkmas...hot-2.3.tar.gz
Output from wget follows:

http://www.snort.org/pub-bin/oinkmas...hot-2.3.tar.gz => /var/run/oinkmaster/oinkmaster.3sv6pTMkw7/url.uqRkQxBCDH/snortrules.tar.gz'

Resolving www.snort.org|68.177.102.20|:80... failed:Connection refused

Oink, oink. Exiting...

priyadarshan · 03-27-2009, 09:23 AM

pls help me out

priyadarshan · 03-30-2009, 02:17 AM

help pls

XavierP · 03-30-2009, 04:21 AM

When I go to the first url in your post, I get this:

Quote:

You must be a registered user with a valid oink code to download this file.

You don't have permission to access /pub-bin/oinkmaster.cgi/5f2287b2fae5c8221fo21b8dc77db85ef592a1fe/snortrules-snapshot-2.3.tar.gz on this server.

When I go to the second url I get this:

Quote:

You must be a registered user with a valid oink code to download this file.

You don't have permission to access /pub-bin/oinkmaster.cgi/*oinkcode*//snortrules-snapshot-2.3.tar.gz on this server.

I went to snort.org and searched for Oinkmaster. The first result was Installing and Configuring OinkMaster. On page 2 of the pdf, it says this:

Quote:

You need to create an account at http://www.snort.org so you can set up your oink code.
This is a requirement for setting up OinkMaster.

So, do you have an account at www.snort.org?

priyadarshan · 03-30-2009, 05:18 AM

OK thanks By the way I got the solution.......... It was all due to hell administrative restrictions.....