search

da667 / Autosnort

Repo for autosnort scripts.
MIT License
157 stars 89 forks source link

IPRVersion.dat - No such file #60

Open d4rwel opened 5 years ago

d4rwel commented 5 years ago

Autosnort, more precisely Pulledpork, is failing due to missing file IPRVersion.dat.

autosnort_install.log:

Unable to open /opt/snort/rules/iplists/IPRVersion.dat for writing! - No such file or directory at pulledpork.pl line 1324. main::blacklist_write(HASH(0x55872d1b3308), "/opt/snort/rules/black_list.rules") called at pulledpork.pl line 2328

Simply creating an empty file IPRVersion.dat did the trick for me. In autosnort-ubuntu-AVATAR.sh at line 383 insert this: dir_check $snort_basedir/rules/iplists touch $snort_basedir/rules/iplists/IPRVersion.dat

Does anyone have a clue why the file is not being created by snort installation?

Snort Version: 2.9.11.1 Pulledpork Version: 0.7.4

mgeorgy commented 5 years ago

I ran into the same issue. It appears that /opt/snort/rules/iplists/ was not created. Creating the directory and an empty IPRVersion.dat (as suggested above) did the trick. TBD if this may cause issues elsewhere.