macOS
Homebrewverified · 100%
brew install pulledporklocal Homebrew formula metadata
brew / rank 10875
Install pulledpork with Homebrew, dnf
Snort rule management. Version 0.7.4 via Homebrew; verified 2026-09-13. Also installable with dnf: sudo dnf install pulledpork.
install
Additional install commands
Linux
Fedora dnfverified · 92%
sudo dnf install pulledporkFedora Rawhide package metadata · pulledpork · source: dl.fedoraproject.org
overview
Package summary
Snort rule management
Project links
Commands and aliases
- pulledpork.pl
history
Project history and usage
PulledPork is a Perl utility for downloading, verifying, transforming, and deploying rules for Snort and compatible Suricata workflows.
Project history
PulledPork's copyright history begins in 2009. Its current official repository describes the code as a continuation of the earlier Google Code project and identifies JJ Cummings, Michael Shirk, and the PulledPork Team.
The Perl implementation accumulated checksum validation, multiple ruleset downloads, shared-object and reputation-list handling, rule-state transformations, sid-msg.map generation, changelogs, and process reload signaling.
Adoption history
PulledPork became part of the operational workflow around Snort rule distribution. Snort's own site identifies it as a helper for automatically downloading current rules, while PulledPork also documents support for Suricata and Emerging Threats rule feeds.
The tool is normally run repeatedly or from a scheduler rather than used as an interactive shell. This places it between upstream rule services, local rule-policy files, and the IDS process that consumes the generated ruleset.
How it is used
Operators pass a configuration path with -c and define rule sources, an optional Snort Oinkcode, temporary and output paths, local policy files, and sensor details. PulledPork can generate consolidated rules and sid-msg.map data, record changes, and signal an IDS to reload.
The official documentation does not prescribe one default configuration-file location, so no fixed path is asserted here. Oinkcodes may be placed in the general configuration or passed on the command line; no separate official credentials file is documented.
Why package nerds care
PulledPork represents the data-maintenance side of packaging an IDS: installing the detection engine is insufficient unless its independently changing rule data can be downloaded, verified, locally tuned, and reloaded reproducibly.
Timeline
- 2009: PulledPork's official copyright history begins.
- Google Code era: The project initially develops outside GitHub.
- Later development: The project moves to its current GitHub repository and continues supporting Snort, Suricata, and multiple rule feeds.
Related projects
- Snort is PulledPork's primary IDS consumer and Snort.org documents PulledPork as a rule-download helper.
- Suricata is also supported for compatible rules, although PulledPork's documentation notes limitations around Talos rules.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for pulledpork. Package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 9 platform targets.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
pulledpork.pl | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-11-04
manager version0.7.4
manager updated2026-09-13
local dataok
upstreamcurrent
latest detectedv0.7.4
https://github.com/shirkdog/pulledpork
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:pulledpork |
|---|---|
| Version | 0.7.4 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/pulledpork |
| Homepage | https://github.com/shirkdog/pulledpork |
| Repository | https://github.com/shirkdog/pulledpork |
| License | GPL-2.0-or-later |
| Source archive | https://github.com/shirkdog/pulledpork/archive/refs/tags/v0.7.4.tar.gz |
| Last updated | 2026-09-13T12:46:45Z |
| Pulse | updated |
| Uses from macOS | perl |
| Bottle | available (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | pulledpork |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
dnf95%
pulledpork 0.7.4-16.fc45
Pulled Pork for Snort and Suricata rule management
https://github.com/shirkdog/pulledpork
sudo dnf install pulledpork- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: noarch
- Source Package: pulledpork
- 2 dependencies
- 2 provides
- normalized package name match
- Matched by: Pulledpork
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation