[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] 2.9.15.0 rules fail to download
From:       "Joel Esler \(jesler\) via Snort-sigs" <snort-sigs () lists ! snort ! org>
Date:       2020-07-29 12:35:32
Message-ID: 150F28D1-4F86-462D-A731-CC278A3FE27B () cisco ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

[Attachment #4 (text/plain)]

We are aware of an issue with certain versions of Snort rules and are working to fix \
it.

Sent from my  iPad

> On Jul 29, 2020, at 04:27, Pettersson, Emil <emil.pettersson@sovos.com> wrote:
> 
> 
> Hi,
> 
> Our download of 2.9.15.0 rules are failing starting after update released \
> yesterday. Md5 at https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz.md5?oinkcode=[OMITTED] \
> is giving a file not found rather than a hash. \
> https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz?oinkcode=[OMITTED] \
> gives an XML error "The specified key does not exist" which I initially assumed to \
> mean that our oinkcode had expired, however upon testing I seem to still be able to \
> download subscriber rules for 2.9.15.1 & 2.9.16.0 without any issues using the same \
> code, leading me to believe this is not the case. Anyone else having issues with \
> 2.9.15.0 rules currently? 
> Kind regards, 
> Emil Pettersson
> Network Engineer
> Kungsgatan 27, 4TR
> 111 56 Stockholm
> SWEDEN
> www.sovos.com
> <image001.png>
> 
> - This message and any attachments thereto contain information that may be \
> privileged, confidential or otherwise protected from disclosure and is the property \
> of Sovos Compliance, LLC. It is intended only for the person to whom it is \
> addressed. If you are not the intended recipient, you are not authorized to read, \
> print, retain, copy, disseminate, distribute, or use this message, any attachments \
> thereto or any part thereof. If you receive this message in error, please delete \
> all copies of this message and attachments. Sovos Compliance, LLC. has implemented \
> anti-virus software on its computers and servers, however, it is the recipient's \
> own responsibility to ensure that all attachments are scanned for viruses prior to \
> usage. _______________________________________________ Snort-sigs mailing list
> Snort-sigs@lists.snort.org
> https://lists.snort.org/mailman/listinfo/snort-sigs
> 
> Please visit http://blog.snort.org for the latest news about Snort!
> 
> Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
> 
> Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay \
> up to date to catch the most <a href=" \
> https://snort.org/downloads/#rule-downloads">emerging threats</a>!


[Attachment #5 (text/html)]

<html><head><meta http-equiv="content-type" content="text/html; \
charset=utf-8"></head><body dir="auto">We are aware of an issue with certain versions \
of Snort rules and are working to fix it.<br><br><div dir="ltr">Sent from \
my&nbsp;<span style="background-color: rgba(255, 255, 255, \
0);">&nbsp;</span>iPad</div><div dir="ltr"><br><blockquote type="cite">On Jul 29, \
2020, at 04:27, Pettersson, Emil &lt;emil.pettersson@sovos.com&gt; \
wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"> <meta \
http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" \
content="Microsoft Word 15 (filtered medium)"> <!--[if !mso]><style>v\:* \
{behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Verdana;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->


<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-GB">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Our download of 2.9.15.0 rules are failing \
starting after update released yesterday. Md5 at <a \
href="https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz.md5?oinkcode=%5bOMITTED">
 https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz.md5?oinkcode=[OMITTED</a>] \
is giving a file not found rather than a hash. <a \
href="https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz?oinkcode=%5bOMITTED">
 https://www.snort.org/rules/snortrules-snapshot-29150.tar.gz?oinkcode=[OMITTED</a>] \
gives an XML error "The specified key does not exist" which I initially assumed to \
mean that our oinkcode had expired, however upon testing I seem to still be able to \
download  subscriber rules for 2.9.15.1 &amp; 2.9.16.0 without any issues using the \
same code, leading me to believe this is not the case. Anyone else having issues with \
2.9.15.0 rules currently? <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="X-NONE"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal" \
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-autospace:none"> <span \
lang="EN-US" style="font-size:8.0pt;font-family:&quot;Verdana&quot;,sans-serif;color:#1A1F22;mso-fareast-language:#2000">Kind \
regards,&nbsp;<br> </span><b><span lang="EN-US" \
style="color:#00B0F0;mso-fareast-language:SV">Emil Pettersson</span></b><span \
lang="EN-US" style="font-size:18.0pt;font-family:&quot;Verdana&quot;,sans-serif;color:#1A1F22;mso-fareast-language:#2000"><br>
 </span><span lang="EN-US" \
style="font-size:8.0pt;font-family:&quot;Verdana&quot;,sans-serif;color:#4DA9DE;mso-fareast-language:#2000">Network \
Engineer</span><b><span lang="EN-US" \
style="color:#00B0F0;mso-fareast-language:SV"><o:p></o:p></span></b></p> <p \
class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-autospace:none">
 <span lang="SV" style="font-size:8.0pt;font-family:&quot;Verdana&quot;,sans-serif;color:#4DA9DE;mso-fareast-language:#2000">Kungsgatan \
27, 4TR<br> 111 56 Stockholm<br>
SWEDEN<o:p></o:p></span></p>
<p class="MsoNormal" \
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-autospace:none"> <span \
lang="SV" style="font-size:8.0pt;font-family:&quot;Verdana&quot;,sans-serif;color:#4DA9DE;mso-fareast-language:#2000"><a \
href="http://www.sovos.com/">www.sovos.com</a><br> </span><span lang="X-NONE" \
style="font-size:12.0pt;color:black;mso-fareast-language:#2000"><div>&lt;image001.png&gt;</div></span><span \
lang="en-SE" style="mso-fareast-language:#2000"><o:p></o:p></span></p> <p \
class="MsoNormal"><span lang="X-NONE"><o:p>&nbsp;</o:p></span></p> </div>
- This message and any attachments thereto contain information that may be \
privileged, confidential or otherwise protected from disclosure and is the property \
of Sovos Compliance, LLC. It is intended only for the person to whom it is addressed. \
If you are not  the intended recipient, you are not authorized to read, print, \
retain, copy, disseminate, distribute, or use this message, any attachments thereto \
or any part thereof. If you receive this message in error, please delete all copies \
of this message and attachments.  Sovos Compliance, LLC. has implemented anti-virus \
software on its computers and servers, however, it is the recipient's own \
responsibility to ensure that all attachments are scanned for viruses prior to usage.


<span>_______________________________________________</span><br><span>Snort-sigs \
mailing list</span><br><span>Snort-sigs@lists.snort.org</span><br><span>https://lists.snort.org/mailman/listinfo/snort-sigs</span><br><span></span><br><span>Please \
visit http://blog.snort.org for the latest news about \
Snort!</span><br><span></span><br><span>Please follow these rules: \
https://snort.org/faq/what-is-the-mailing-list-etiquette</span><br><span></span><br><span>Visit \
the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to \
date to catch the most &lt;a href=" \
https://snort.org/downloads/#rule-downloads"&gt;emerging \
threats&lt;/a&gt;!</span><br></div></blockquote></body></html>


["smime.p7s" (application/pkcs7-signature)]

_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.snort.org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up \
to date to catch the most <a href=" \
https://snort.org/downloads/#rule-downloads">emerging threats</a>!

--===============7732691198128337246==--



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic