Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

few of rules downloaded #369

Open
Azaretdodo opened this issue Aug 14, 2022 · 3 comments
Open

few of rules downloaded #369

Azaretdodo opened this issue Aug 14, 2022 · 3 comments

Comments

@Azaretdodo
Copy link

Azaretdodo commented Aug 14, 2022

hello,

few rules downloaded,

i use snort 3 1 36 0 and the rules version 3 1 3 0 then i have tried with rules 3 1 3 5 0 but i got the same number that doesn't take sense,

what version of rules must i use ?

how to use rules from talos ?

`~/snort_src/pulledpork-master$ sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T

https://github.com/shirkdog/pulledpork
  _____ ____
 `----,\    )
  `--==\\  /    PulledPork v0.8.0 - The only positive thing to come out of 2020...well this and take-out liquor!
   `--==\\/
 .-~~~~-.Y|\\_  Copyright (C) 2009-2021 JJ Cummings, Michael Shirk

@_/ / 66_ and the PulledPork Team!
| \ \ _(")
\ /-| ||'--' Rules give me wings!
_\ _\


Use of uninitialized value $Snort in ord at /usr/local/bin/pulledpork.pl line 1924.
Checking latest MD5 for snortrules-snapshot-3130.tar.gz....
Rules tarball download of snortrules-snapshot-3130.tar.gz....
   They Match
   Done!
IP Blocklist download of https://snort.org/downloads/ip-block-list....
Reading IP List...
Prepping rules from snortrules-snapshot-3130.tar.gz for work....
Use of uninitialized value $Snort in concatenation (.) or string at /usr/local/bin/pulledpork.pl line 330.
   Done!
Reading rules...
Use of uninitialized value $Snort in pattern match (m//) at /usr/local/bin/pulledpork.pl line 2320.
Writing Blocklist File /usr/local/etc/lists/default.blocklist....
Writing Blocklist Version 946157412 to /usr/local/etc/lists/IPRVersion.dat....
Activating ballanced rulesets....
   Done
Setting Flowbit State....
   Done
Writing /usr/local/etc/rules/snort.rules....
   Done
Generating sid-msg.map....
   Done
Writing v2 /usr/local/etc/snort/sid-msg.map....
   Done
Writing /var/log/sid_changes.log....
   Done
Rule Stats...
   New:-------0
   Deleted:---0
   Enabled Rules:----0
   Dropped Rules:----0
   Disabled Rules:---0
   Total Rules:------0
IP Blocklist Stats...
   Total IPs:-----784

Done
Please review /var/log/sid_changes.log for additional details
Fly Piggy Fly!
`

thanks you in advance to help myself use the best from your programs,

Regards.


Azaretdodo.
@Azaretdodo Azaretdodo changed the title few rules doesnloaded few rules downloaded Aug 14, 2022
@Azaretdodo Azaretdodo changed the title few rules downloaded few of rules downloaded Aug 14, 2022
@Azaretdodo
Copy link
Author

they have a lots of problem with the file pulledpork.pl it find a lots of variable my who are masked unfornately the shell says its masks early ! :

sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T "my" variable $local_rules masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2017. "my" variable $temp_path masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2017. "my" variable $sid_msg_version masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2025. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $VERSION masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Verbose masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Quiet masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2039. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2040. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2041. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2042. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2042. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2058. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2059. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2060. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2061. Bareword "Snort3" not allowed while "strict subs" in use at /usr/local/bin/pulledpork.pl line 1926. syntax error at /usr/local/bin/pulledpork.pl line 1926, near ") (" syntax error at /usr/local/bin/pulledpork.pl line 2057, near "$ENV{HTTP_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2058, near "$ENV{HTTP_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2059, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2059, near "$ENV{HTTP_PROXY_PASSWORD" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2060, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2060, near "$ENV{HTTPS_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2061, near "$ENV{HTTPS_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2062, near "my" /usr/local/bin/pulledpork.pl has too many errors.

thanks you in advance to help myself pass thoses errors,

Regards.

Azaretdodo.

@finchy
Copy link
Collaborator

finchy commented Aug 15, 2022 via email

@Azaretdodo
Copy link
Author

Azaretdodo commented Aug 15, 2022 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants