使用 Homebrew, dnf 安装 pulledpork

项目链接

• 主页
• 软件包管理器页面

命令和别名

• pulledpork.pl

项目历史

PulledPork's copyright history begins in 2009. Its current official repository describes the code as a continuation of the earlier Google Code project and identifies JJ Cummings, Michael Shirk, and the PulledPork Team.

The Perl implementation accumulated checksum validation, multiple ruleset downloads, shared-object and reputation-list handling, rule-state transformations, sid-msg.map generation, changelogs, and process reload signaling.

采用历史

PulledPork became part of the operational workflow around Snort rule distribution. Snort's own site identifies it as a helper for automatically downloading current rules, while PulledPork also documents support for Suricata and Emerging Threats rule feeds.

The tool is normally run repeatedly or from a scheduler rather than used as an interactive shell. This places it between upstream rule services, local rule-policy files, and the IDS process that consumes the generated ruleset.

使用方式

Operators pass a configuration path with -c and define rule sources, an optional Snort Oinkcode, temporary and output paths, local policy files, and sensor details. PulledPork can generate consolidated rules and sid-msg.map data, record changes, and signal an IDS to reload.

The official documentation does not prescribe one default configuration-file location, so no fixed path is asserted here. Oinkcodes may be placed in the general configuration or passed on the command line; no separate official credentials file is documented.

为什么软件包爱好者会关心

PulledPork represents the data-maintenance side of packaging an IDS: installing the detection engine is insufficient unless its independently changing rule data can be downloaded, verified, locally tuned, and reloaded reproducibly.

时间线

• 2009: PulledPork's official copyright history begins.
• Google Code era: The project initially develops outside GitHub.
• Later development: The project moves to its current GitHub repository and continues supporting Snort, Suricata, and multiple rule feeds.

Related projects

• Snort is PulledPork's primary IDS consumer and Snort.org documents PulledPork as a rule-download helper.
• Suricata is also supported for compatible rules, although PulledPork's documentation notes limitations around Talos rules.

来源

• https://github.com/shirkdog/pulledpork#readme
• https://www.snort.org/oinkcodes.Snort