shirkdog / pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)
GNU General Public License v2.0
419 stars 133 forks source link

few of rules downloaded #369

Open Azaretdodo opened 2 years ago

Azaretdodo commented 2 years ago

hello,

few rules downloaded,

i use snort 3 1 36 0 and the rules version 3 1 3 0 then i have tried with rules 3 1 3 5 0 but i got the same number that doesn't take sense,

what version of rules must i use ?

how to use rules from talos ?

`~/snort_src/pulledpork-master$ sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T

https://github.com/shirkdog/pulledpork
  _____ ____
 `----,\    )
  `--==\\  /    PulledPork v0.8.0 - The only positive thing to come out of 2020...well this and take-out liquor!
   `--==\\/
 .-~~~~-.Y|\\_  Copyright (C) 2009-2021 JJ Cummings, Michael Shirk

@/ / 66_ and the PulledPork Team! | \ \ (") \ /-| ||'--' Rules give me wings! _\ _\



Use of uninitialized value $Snort in ord at /usr/local/bin/pulledpork.pl line 1924.
Checking latest MD5 for snortrules-snapshot-3130.tar.gz....
Rules tarball download of snortrules-snapshot-3130.tar.gz....
    They Match
    Done!
IP Blocklist download of https://snort.org/downloads/ip-block-list....
Reading IP List...
Prepping rules from snortrules-snapshot-3130.tar.gz for work....
Use of uninitialized value $Snort in concatenation (.) or string at /usr/local/bin/pulledpork.pl line 330.
    Done!
Reading rules...
Use of uninitialized value $Snort in pattern match (m//) at /usr/local/bin/pulledpork.pl line 2320.
Writing Blocklist File /usr/local/etc/lists/default.blocklist....
Writing Blocklist Version 946157412 to /usr/local/etc/lists/IPRVersion.dat....
Activating ballanced rulesets....
    Done
Setting Flowbit State....
    Done
Writing /usr/local/etc/rules/snort.rules....
    Done
Generating sid-msg.map....
    Done
Writing v2 /usr/local/etc/snort/sid-msg.map....
    Done
Writing /var/log/sid_changes.log....
    Done
Rule Stats...
    New:-------0
    Deleted:---0
    Enabled Rules:----0
    Dropped Rules:----0
    Disabled Rules:---0
    Total Rules:------0
IP Blocklist Stats...
    Total IPs:-----784

Done
Please review /var/log/sid_changes.log for additional details
Fly Piggy Fly!
`

thanks you in advance to help myself use the best from your programs,

Regards.

Azaretdodo.
Azaretdodo commented 2 years ago

they have a lots of problem with the file pulledpork.pl it find a lots of variable my who are masked unfornately the shell says its masks early ! :

sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T "my" variable $local_rules masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2017. "my" variable $temp_path masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2017. "my" variable $sid_msg_version masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2025. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $VERSION masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Verbose masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Quiet masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2039. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2040. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2041. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2042. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2042. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2058. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2059. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2060. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2061. Bareword "Snort3" not allowed while "strict subs" in use at /usr/local/bin/pulledpork.pl line 1926. syntax error at /usr/local/bin/pulledpork.pl line 1926, near ") (" syntax error at /usr/local/bin/pulledpork.pl line 2057, near "$ENV{HTTP_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2058, near "$ENV{HTTP_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2059, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2059, near "$ENV{HTTP_PROXY_PASSWORD" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2060, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2060, near "$ENV{HTTPS_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2061, near "$ENV{HTTPS_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2062, near "my" /usr/local/bin/pulledpork.pl has too many errors.

thanks you in advance to help myself pass thoses errors,

Regards.

Azaretdodo.

finchy commented 2 years ago

Why are you running it with sudo?— Sent from my  iPhoneOn Aug 15, 2022, at 06:27, Azaretdodo @.***> wrote: they have a lots of problem with the file pulledpork.pl it find a lots of variable my who are masked unfornately the shell says its masks early ! : sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T "my" variable $local_rules masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2017. "my" variable $temp_path masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2017. "my" variable $sid_msg_version masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2025. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $VERSION masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Verbose masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Quiet masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2039. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2040. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2041. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2042. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2042. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2058. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2059. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2060. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2061. Bareword "Snort3" not allowed while "strict subs" in use at /usr/local/bin/pulledpork.pl line 1926. syntax error at /usr/local/bin/pulledpork.pl line 1926, near ") (" syntax error at /usr/local/bin/pulledpork.pl line 2057, near "$ENV{HTTP_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2058, near "$ENV{HTTP_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2059, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2059, near "$ENV{HTTP_PROXY_PASSWORD" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2060, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2060, near "$ENV{HTTPS_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2061, near "$ENV{HTTPS_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2062, near "my" /usr/local/bin/pulledpork.pl has too many errors. thanks you in advance to help myself pass thoses errors, Regards. Azaretdodo.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

Azaretdodo commented 2 years ago

without sudo i happen the same mistake :

':~/snort_src/pulledpork-master$ /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T "my" variable $local_rules masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2017. "my" variable $temp_path masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2017. "my" variable $sid_msg_version masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2025. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $VERSION masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Verbose masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Quiet masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2039. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2040. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2041. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2042. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2042. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2058. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2059. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2060. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2061. Bareword "Snort3" not allowed while "strict subs" in use at /usr/local/bin/pulledpork.pl line 1926. syntax error at /usr/local/bin/pulledpork.pl line 1926, near ")       (" syntax error at /usr/local/bin/pulledpork.pl line 2057, near "$ENV{HTTP_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2058, near "$ENV{HTTP_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2059, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2059, near "$ENV{HTTP_PROXY_PASSWORD" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2060, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2060, near "$ENV{HTTPS_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2061, near "$ENV{HTTPS_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2062, near "my" /usr/local/bin/pulledpork.pl has too many errors. '

i repeat the problems i got finaly pulledpork understand some variable " my " mask by early line of command but thoses variables " my " aren't type in thoses lines,

thanks you in advance to help myself works fully pulledpork,

regards.

Azaretdodo.


De : Joel Esler @.> Envoyé : lundi 15 août 2022 12:46 À : shirkdog/pulledpork @.> Cc : Azaretdodo @.>; Author @.> Objet : Re: [shirkdog/pulledpork] few of rules downloaded (Issue #369)

Why are you running it with sudo?— Sent from my  iPhoneOn Aug 15, 2022, at 06:27, Azaretdodo @.***> wrote: they have a lots of problem with the file pulledpork.pl it find a lots of variable my who are masked unfornately the shell says its masks early ! : sudo /usr/local/bin/pulledpork.pl -c /usr/local/etc/pulledpork/pulledpork.conf -l -P -E -T "my" variable $local_rules masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 1933. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable %Config_info masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2013. "my" variable $temp_path masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2017. "my" variable $temp_path masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2017. "my" variable $sid_msg_version masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2025. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $VERSION masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2029. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Verbose masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $Quiet masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2030. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2039. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2040. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2041. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2042. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2042. "my" variable $ua masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2043. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2058. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2059. "my" variable %ENV masks earlier declaration in same scope at /usr/local/bin/pulledpork.pl line 2060. "my" variable %ENV masks earlier declaration in same statement at /usr/local/bin/pulledpork.pl line 2061. Bareword "Snort3" not allowed while "strict subs" in use at /usr/local/bin/pulledpork.pl line 1926. syntax error at /usr/local/bin/pulledpork.pl line 1926, near ") (" syntax error at /usr/local/bin/pulledpork.pl line 2057, near "$ENV{HTTP_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2058, near "$ENV{HTTP_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2059, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2059, near "$ENV{HTTP_PROXY_PASSWORD" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2060, near "my" syntax error at /usr/local/bin/pulledpork.pl line 2060, near "$ENV{HTTPS_PROXY" syntax error at /usr/local/bin/pulledpork.pl line 2061, near "$ENV{HTTPS_PROXY_USERNAME" Can't redeclare "my" in "my" at /usr/local/bin/pulledpork.pl line 2062, near "my" /usr/local/bin/pulledpork.pl has too many errors. thanks you in advance to help myself pass thoses errors, Regards. Azaretdodo.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

— Reply to this email directly, view it on GitHubhttps://github.com/shirkdog/pulledpork/issues/369#issuecomment-1214877701, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AHJN3IK3FJQWFDT32UMWJN3VZINXDANCNFSM56QLT5QA. You are receiving this because you authored the thread.Message ID: @.***>