Snort can't download Snort VRT Rules [solved]

bmeeks

Yes, different Oink-codes. Works with free subscription but not with paid…I have sent a question to Snort.org but still haven´t got an answer. I guess it must have to do with my subscription. We will see. And yes, 2.9.6.0 pkg v3.0.13 confirmed.
Thanks for trying to help
Jonna

OK. I really wonder if it might be something weird with your code. Mine works, and so far as I know, most everyone else's here on the Forum works now or I would expect a ton of posts. Post back with any update.

Bill

jonna99

Yes there was a problem with the paid account. After resetting and getting a new oink-code it works again.
Thanks again
Jonna

propel

Snort 2.9.6.2 pkg v3.1 is now available under package downloads

after I updated snort my VRT Rules downloaded.

bmeeks

@propel:

Snort 2.9.6.2 pkg v3.1 is now available under package downloads

after I updated snort my VRT Rules downloaded.

The new version addresses the URL change at snort.org and also the older rules went EOL yesterday.

Bill

thewellington

How do I get the new version? The only package available to me is 2.9.6.0 pkg v3.0.13

I don't seem to be able to use 2.9.6.3 via the gui.

bmeeks

@thewellington:

How do I get the new version? The only package available to me is 2.9.6.0 pkg v3.0.13

I don't seem to be able to use 2.9.6.3 via the gui.

This tells me you are probably running an older version of pfSense (like 2.0.x something). Versions older than 2.1 are no longer supported as the underlying binary packages required for 2.0.x pfSense are no longer being built by the pfSense team.

If this is the case for you, then you need to upgrade to at least pfSense 2.1 or higher to use the latest Snort package.

Bill

thewellington

Yeah… except that I am running 2.1.4 :(

This seems to be affecting both Netgate appliances I have... APU2 and a 7541

Bill

bmeeks

@thewellington:

Yeah… except that I am running 2.1.4 :(

This seems to be affecting both Netgate appliances I have... APU2 and a 7541

Bill

OK, the fact you have Netgate devices gives me a possible clue. I believe (but I don't know for sure) they may have a separate updates infrastructure for Netgate devices to maintain compatibility with their hardware. If my guess is true, it may be their repository has not yet synchronized with the latest version. If you have a support contract, give them this info and see if they can help. If not, perhaps you can ping one of the pfSense developers who frequent this forum.

Bill

ypmict

Hi…
I am also facing this problem, I am using :
pfsense 2.0.1
snort 2.9.6.2 pkg v3.1.4 (using the free oinkcode)

the error log says :

Starting rules update... Time: 2014-11-10 10:33:28
Downloading Snort VRT rules md5 file snortrules-snapshot-2923.tar.gz.md5...
Snort VRT rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort VRT rules will not be updated.

...anyone know what the problem is?
I also try to register different account for oinkcode.. but still shows error...
thanks

bmeeks

@ypmict:

Hi…
I am also facing this problem, I am using :
pfsense 2.0.1
snort 2.9.6.2 pkg v3.1.4 (using the free oinkcode)

the error log says :

Starting rules update... Time: 2014-11-10 10:33:28
Downloading Snort VRT rules md5 file snortrules-snapshot-2923.tar.gz.md5...
Snort VRT rules md5 download failed.
Server returned error code 422.
Server error message was:
Snort VRT rules will not be updated.

...anyone know what the problem is?
I also try to register different account for oinkcode.. but still shows error...
thanks

Snort is no longer supported on pfSense versions older than 2.1. You say you are running 2.0.1, so Snort is now broken and unsupported on that version. You should upgrade your pfSense to version 2.1.5.

Bill