amir162 / pulledpork

Automatically exported from code.google.com/p/pulledpork
GNU General Public License v2.0
0 stars 0 forks source link

so_rules on ARM platform #123

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1.  Run pulled pork with so_rules options enabled.

What is the expected output? What do you see instead?
Would love to see so rules downloaded and installed :-)  Unfortunately my silly 
armv71 processor is not on the list :-(

Use of uninitialized value $arch in regexp compilation at 
/usr/local/snort/pulledpork/pulledpork.pl line 271.

## our arch
sub get_arch {
    my $cmd = "uname -a";
    open( FH, "$cmd |" );
    my $arch;
    while (<FH>) {
        next unless $_ =~ /(i386|x86-64|x86_64|i686|amd64)/i;
        $arch = $&;
        $arch =~ s/_/-/;
        $arch =~ s/i686/i386/;
        $arch =~ s/amd64/x86-64/;
    }
    close(FH);
    return $arch;
}

Linux xxxxxxxx 3.6.9-36965-g224b037 #1 PREEMPT Sun Jan 6 19:29:59 UTC 2013 
armv7l armv7l armv7l GNU/Linux

What version of the product are you using? On what operating system?
version=0.6.0
Ubuntu 12.10

Please provide any additional information below.
I'm running snort/barnyard2/pulledpork on a nifty little CuBox.  Works great as 
a small, portable passive sniffer, but unfortunately I don't think I will get 
pre-compilled rules.

Any ideas?  I'm guessing I need to beg SourceForge to add ARM to their list?

Original issue reported on code.google.com by cgehr...@gmail.com on 8 Jan 2013 at 9:18

GoogleCodeExporter commented 8 years ago
This would be a request to Sourcefire that would need to occur.  PP doesn't 
actually compile the SO binaries

Original comment by Cummin...@gmail.com on 16 Jan 2013 at 1:06