Pulled Pork Error

Neth Server 6.8

Hello I have been getting emails from my server stating this:
/bin/sh: /usr/bin/pulledpork.pl: No such file or directory

Is their a way to stop this error from occurring?

This is live environment.

Thanks so much!!

Probably we need to partially backport the fix already done for NS 7.

Could please paste the output of this command?

rpm -q pulledpork

Ok ran the command this is what i got

[root@webserver ~]# rpm -q pulledpork
pulledpork-0.7.2-2.el6.noarch
[root@webserver ~]#

AFAIR, pulledpork on NS6 is not from upstream:

[root@server ~]# rpm -qi pulledpork
Name        : pulledpork                   Relocations: (not relocatable)
Version     : 0.7.0                             Vendor: Nethesis
Release     : 2                             Build Date: Wed 04 Jun 2014 08:50:23 AM CEST
Install Date: Sat 07 May 2016 11:21:40 AM CEST      Build Host: giacomo.nethesis.it
Group       : Productivity/Networking/Security   Source RPM: pulledpork-0.7.0-2.src.rpm
Size        : 133727                           License: GPLv2
Signature   : DSA/SHA1, Wed 04 Jun 2014 08:50:24 AM CEST, Key ID e23a79e1f25b5f70
URL         : http://code.google.com/p/pulledpork/
Summary     : Pulled_Pork is tool written in perl for managing Snort rule sets.

So you have installed pullepork from epel, I can’t guess how.
You have to disable the epel repo:

eorepo centos-base centos-updates nethserver-base nethserver-updates

The downgrade pulledpork:

yum downgrade pulledpork

You’ll end up with pulledpork 0.7.0.

Ok so here is what i got so far… Will this solve the issue?? Also will this interrupt htop and few other tools?

[root@webserver ~]# rpm -q pulledpork
pulledpork-0.7.2-2.el6.noarch
[root@webserver ~]# eorepo centos-base centos-updates nethserver-base nethserver-updates
Repository epel (Extra Packages for Enterprise Linux 6 - x86_64) has been disabled.
Repository nethforge (NethForge 6.8) has been disabled.
[root@webserver ~]# yum downgrade pulledpork
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
 * centos-base: centos.bhs.mirrors.ovh.net
 * centos-updates: centos.bhs.mirrors.ovh.net
 * nethserver-base: nethserver.de-labrusse.fr
 * nethserver-updates: nethserver.de-labrusse.fr
centos-base                                                            | 3.7 kB     00:00
centos-updates                                                         | 3.4 kB     00:00
nethserver-base                                                        | 3.7 kB     00:00
nethserver-updates                                                     | 4.1 kB     00:00
Resolving Dependencies
--> Running transaction check
---> Package pulledpork.noarch 0:0.7.0-2 will be a downgrade
---> Package pulledpork.noarch 0:0.7.2-2.el6 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================
 Package               Arch              Version             Repository                  Size
==============================================================================================
Downgrading:
 pulledpork            noarch            0.7.0-2             nethserver-base             41 k

Transaction Summary
==============================================================================================
Downgrade     1 Package(s)

Total download size: 41 k
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 41 k
pulledpork-0.7.0-2.noarch.rpm                                          |  41 kB     00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : pulledpork-0.7.0-2.noarch                                                  1/2
  Cleanup    : pulledpork-0.7.2-2.el6.noarch                                              2/2
  Verifying  : pulledpork-0.7.0-2.noarch                                                  1/2
  Verifying  : pulledpork-0.7.2-2.el6.noarch                                              2/2

Removed:
  pulledpork.noarch 0:0.7.2-2.el6

Installed:
  pulledpork.noarch 0:0.7.0-2

Complete!
[root@webserver ~]#

That should be enough. Let us know if you still have errors tomorrow.

1 Like

Ok sounds good thanks!!

Nope problem still exist…

The specified Snort binary does not exist!
Please correct the value or specify the FULL rules tarball name in the pulledpork.conf!
 at /usr/bin/pulledpork.pl line 1816

This is line 1817

"The specified Snort binary does not exist!\nPlease correct the value or specify the FULL",

So what have I missed… Do we need Pulled pork?

Sorry about the delay… This weekend I am in the middle of a very big contest in Amateur Radio… Its the YL-OM contest sponsored by Young Ladies Radio League! anyway what should I do next??

Is pulled pork actually needed?? Can i just uninstall pulled pork?? I am getting tired of the emails every early morning…

You shouldn’t get emails.
Please, check again that you have run the above eorepo command:

eorepo centos-base centos-updates nethserver-base nethserver-updates

Show the output of yum repolist.

It should only list the above 4 repos.
Also downgrade again pullepork.

Here is the output of yum repolist

[root@webserver init.d]# yum repolist
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Loading mirror speeds from cached hostfile
 * centos-base: mirror.gpmidi.net
 * centos-updates: mirror.gpmidi.net
 * nethserver-base: mirror.nethserver.org
 * nethserver-updates: mirror.nethserver.org
centos-base                                                                                           | 3.7 kB     00:00
centos-updates                                                                                        | 3.4 kB     00:00
centos-updates/primary_db                                                                             | 4.3 MB     00:00
nethserver-base                                                                                       | 3.7 kB     00:00
nethserver-updates                                                                                    | 4.1 kB     00:00
nethserver-updates/primary_db                                                                         | 115 kB     00:00
repo id                                                  repo name                                                     status
centos-base                                              CentOS-6 Base                                                 6,696
centos-updates                                           CentOS-6 Updates                                                825
nethserver-base                                          NethServer 6.8 base                                             498
nethserver-updates                                       NethServer 6.8 updates                                           75
repolist: 8,094
[root@webserver init.d]#

I installed this over a year ago from one of your iso… I have been getting these emails for months and getting tired of it…

It’s ok.
Run yum downgrade pulledpork, check that it installs version 0.7.0.

[root@webserver init.d]# yum downgrade pulledpork
Loaded plugins: changelog, fastestmirror, nethserver_events, presto
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
 * centos-base: mirror.gpmidi.net
 * centos-updates: mirror.gpmidi.net
 * nethserver-base: mirror.nethserver.org
 * nethserver-updates: mirror.nethserver.org
Only Upgrade available on package: pulledpork-0.7.0-2.noarch
Nothing to do
[root@webserver init.d]#