Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Suricata Script does not work #836

Open
himuura opened this issue Jan 14, 2022 · 3 comments
Open

Suricata Script does not work #836

himuura opened this issue Jan 14, 2022 · 3 comments

Comments

@himuura
Copy link

himuura commented Jan 14, 2022

Hey!
Been testing some probes and suricata script doesn't seem to work due to the fact that the suricata rules do not exist anymore on that link, it needs to be update. Im testing with another suricata version but i'm not confident...
Anyone to help a brother out?
Thanks in advance!
(using ubuntu 16.04)
@wrharding
Copy link
Collaborator

Can you provide an output of the failure?

@wrharding
Copy link
Collaborator

Related: #798

wrharding added a commit to wrharding/suricata that referenced this issue Jan 15, 2022
@wrharding
Update Emerging Threat's Suricata Link
9a9186d 
In April 16th 2020 Proofpoint created an "old" folder and placed suricata 2.0 rules in it. Deploying the MHN suricata sensor today will yield the following error:
```
install -d "/opt/suricata/etc/suricata/rules"
/usr/bin/wget -qO - http://rules.emergingthreats.net/open/suricata-2.0/emerging.rules.tar.gz | tar -x -z -C "/opt/suricata/etc/suricata/" -f -

gzip: stdin: not in gzip format
tar: Child returned status 1
tar: Error is not recoverable: exiting now
Makefile:888: recipe for target 'install-rules' failed
make: *** [install-rules] Error 2
```

Closes pwnlandia/mhn#836 and pwnlandia/mhn#798
This was referenced Jan 15, 2022
Closed
Open
@himuura
Copy link
Author

himuura commented Jan 15, 2022

Exactly! It was this exact error mate, sorry for the delay but i left the lab some hours ago. Gonna try the sed to replace the version of suricata.
One other thing, setuptools fails to install on some scripts. I managed to install cowrie for instance without setuptools (supervisor) and it seems to be working...The same happened with suricata. Had to comment out pyyaml and i think distribute as well so i could bypass that part of the script. Any suggestions on how to fix it?

@wrharding wrharding mentioned this issue Jan 17, 2022
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update Emerging Threat's Suricata Link wrharding/suricata
2 participants
@himuura @wrharding