Neth Server 6.8
Hello I have been getting emails from my server stating this:
/bin/sh: /usr/bin/pulledpork.pl: No such file or directory
Is their a way to stop this error from occurring?
This is live environment.
Thanks so much!!
Neth Server 6.8
Hello I have been getting emails from my server stating this:
/bin/sh: /usr/bin/pulledpork.pl: No such file or directory
Is their a way to stop this error from occurring?
This is live environment.
Thanks so much!!
Probably we need to partially backport the fix already done for NS 7.
Could please paste the output of this command?
rpm -q pulledpork
Ok ran the command this is what i got
[root@webserver ~]# rpm -q pulledpork
pulledpork-0.7.2-2.el6.noarch
[root@webserver ~]#
AFAIR, pulledpork on NS6 is not from upstream:
[root@server ~]# rpm -qi pulledpork
Name : pulledpork Relocations: (not relocatable)
Version : 0.7.0 Vendor: Nethesis
Release : 2 Build Date: Wed 04 Jun 2014 08:50:23 AM CEST
Install Date: Sat 07 May 2016 11:21:40 AM CEST Build Host: giacomo.nethesis.it
Group : Productivity/Networking/Security Source RPM: pulledpork-0.7.0-2.src.rpm
Size : 133727 License: GPLv2
Signature : DSA/SHA1, Wed 04 Jun 2014 08:50:24 AM CEST, Key ID e23a79e1f25b5f70
URL : http://code.google.com/p/pulledpork/
Summary : Pulled_Pork is tool written in perl for managing Snort rule sets.
So you have installed pullepork from epel, I can’t guess how.
You have to disable the epel repo:
eorepo centos-base centos-updates nethserver-base nethserver-updates
The downgrade pulledpork:
yum downgrade pulledpork
You’ll end up with pulledpork 0.7.0.
Ok so here is what i got so far… Will this solve the issue?? Also will this interrupt htop and few other tools?
[root@webserver ~]# rpm -q pulledpork
pulledpork-0.7.2-2.el6.noarch
[root@webserver ~]# eorepo centos-base centos-updates nethserver-base nethserver-updates
Repository epel (Extra Packages for Enterprise Linux 6 - x86_64) has been disabled.
Repository nethforge (NethForge 6.8) has been disabled.
[root@webserver ~]# yum downgrade pulledpork
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
* centos-base: centos.bhs.mirrors.ovh.net
* centos-updates: centos.bhs.mirrors.ovh.net
* nethserver-base: nethserver.de-labrusse.fr
* nethserver-updates: nethserver.de-labrusse.fr
centos-base | 3.7 kB 00:00
centos-updates | 3.4 kB 00:00
nethserver-base | 3.7 kB 00:00
nethserver-updates | 4.1 kB 00:00
Resolving Dependencies
--> Running transaction check
---> Package pulledpork.noarch 0:0.7.0-2 will be a downgrade
---> Package pulledpork.noarch 0:0.7.2-2.el6 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
==============================================================================================
Package Arch Version Repository Size
==============================================================================================
Downgrading:
pulledpork noarch 0.7.0-2 nethserver-base 41 k
Transaction Summary
==============================================================================================
Downgrade 1 Package(s)
Total download size: 41 k
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 41 k
pulledpork-0.7.0-2.noarch.rpm | 41 kB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : pulledpork-0.7.0-2.noarch 1/2
Cleanup : pulledpork-0.7.2-2.el6.noarch 2/2
Verifying : pulledpork-0.7.0-2.noarch 1/2
Verifying : pulledpork-0.7.2-2.el6.noarch 2/2
Removed:
pulledpork.noarch 0:0.7.2-2.el6
Installed:
pulledpork.noarch 0:0.7.0-2
Complete!
[root@webserver ~]#
That should be enough. Let us know if you still have errors tomorrow.
Ok sounds good thanks!!
Nope problem still exist…
The specified Snort binary does not exist!
Please correct the value or specify the FULL rules tarball name in the pulledpork.conf!
at /usr/bin/pulledpork.pl line 1816
This is line 1817
"The specified Snort binary does not exist!\nPlease correct the value or specify the FULL",
So what have I missed… Do we need Pulled pork?
Sorry about the delay… This weekend I am in the middle of a very big contest in Amateur Radio… Its the YL-OM contest sponsored by Young Ladies Radio League! anyway what should I do next??
Is pulled pork actually needed?? Can i just uninstall pulled pork?? I am getting tired of the emails every early morning…
You shouldn’t get emails.
Please, check again that you have run the above eorepo command:
eorepo centos-base centos-updates nethserver-base nethserver-updates
Show the output of yum repolist
.
It should only list the above 4 repos.
Also downgrade again pullepork.
Here is the output of yum repolist
[root@webserver init.d]# yum repolist
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Loading mirror speeds from cached hostfile
* centos-base: mirror.gpmidi.net
* centos-updates: mirror.gpmidi.net
* nethserver-base: mirror.nethserver.org
* nethserver-updates: mirror.nethserver.org
centos-base | 3.7 kB 00:00
centos-updates | 3.4 kB 00:00
centos-updates/primary_db | 4.3 MB 00:00
nethserver-base | 3.7 kB 00:00
nethserver-updates | 4.1 kB 00:00
nethserver-updates/primary_db | 115 kB 00:00
repo id repo name status
centos-base CentOS-6 Base 6,696
centos-updates CentOS-6 Updates 825
nethserver-base NethServer 6.8 base 498
nethserver-updates NethServer 6.8 updates 75
repolist: 8,094
[root@webserver init.d]#
I installed this over a year ago from one of your iso… I have been getting these emails for months and getting tired of it…
It’s ok.
Run yum downgrade pulledpork, check that it installs version 0.7.0.
[root@webserver init.d]# yum downgrade pulledpork
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
* centos-base: mirror.gpmidi.net
* centos-updates: mirror.gpmidi.net
* nethserver-base: mirror.nethserver.org
* nethserver-updates: mirror.nethserver.org
Only Upgrade available on package: pulledpork-0.7.0-2.noarch
Nothing to do
[root@webserver init.d]#