https://community.cisco.com/t5/network-security/snort-rule-downloads-failing/m-p/2977024#M43567 <P>Look under /var/log/sf for a directory dated the date of the failure. It should have "sru" in the name plus a time-date stamp. Within there you should find a detailed log.</P> <P>Something like this:</P> <PRE class="prettyprint">admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ ls -al<BR />total 40<BR />drwxr-xr-x 3 root root 4096 Sep 19 03:00 .<BR />drwxr-xr-x 46 root root 8192 Sep 20 01:53 ..<BR />-rw-r--r-- 1 root root 74 Sep 19 03:00 error_gui_msg<BR />-rw-r--r-- 1 root root 163 Sep 19 03:00 flags.conf.complete<BR />-rw-r--r-- 1 root root 3 Sep 19 03:00 non_fatal_rc<BR />drwxr-xr-x 2 root root 4096 Sep 19 03:00 pre<BR />-rw-r--r-- 1 root root 902 Sep 19 03:00 sru.log<BR />-rw-r--r-- 1 root root 6 Sep 19 03:00 sru.pid<BR />-rw-r--r-- 1 root root 327 Sep 19 03:00 status.log<BR />admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ more sru.log<BR />[160919 03:00:10] Using root directory <BR />[160919 03:00:10] #####################<BR />[160919 03:00:10] # INSTALL STARTING<BR />[160919 03:00:10] #####################<BR />[160919 03:00:10] <BR />[160919 03:00:10] BEGIN pre/000_start.sh<BR />[160919 03:00:10] *************************************************************************<BR />[160919 03:00:10] **** Starting PRE phase<BR />[160919 03:00:10] *************************************************************************<BR />[160919 03:00:10] COMPLETED pre/000_start.sh<BR />[160919 03:00:10] <BR />[160919 03:00:10] BEGIN pre/010_check_versions.sh<BR />[160919 03:00:10] pre/010_check_versions.sh returned non-fatal error, exiting cleanly<BR />[160919 03:00:10] Lock //tmp/sru.lock for install removed successfully.<BR />[160919 03:00:10] Pruning logs and old installs<BR />[160919 03:00:10] <BR />[160919 03:00:10] ####################<BR />[160919 03:00:10] # INSTALL COMPLETE <BR />[160919 03:00:10] ####################<BR />admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$</PRE> <P></P> Tue, 20 Sep 2016 02:16:04 GMT Marvin Rhoads 2016-09-20T02:16:04Z https://community.cisco.com/t5/network-security/snort-rule-downloads-failing/m-p/2977023#M43565 <P>snort rule update are failing on my FMC</P> <P></P> <P>error is&nbsp;<I>Connectivity problems. Unable to download rules &nbsp;&nbsp;</I></P> <P></P> <P><I>i ssh'd to the FMC and can connect to the internet. dns lookup is also working fine</I></P> <P><I></I></P> <P><I></I></P> <P>in which log file can i get more information about this ?</P> <P></P> <P><I></I></P> <P><I></I></P> <P><I></I></P> <P><I></I></P> Sun, 10 Mar 2019 13:41:14 GMT https://community.cisco.com/t5/network-security/snort-rule-downloads-failing/m-p/2977023#M43565 Tejas Kunte 2019-03-10T13:41:14Z https://community.cisco.com/t5/network-security/snort-rule-downloads-failing/m-p/2977024#M43567 <P>Look under /var/log/sf for a directory dated the date of the failure. It should have "sru" in the name plus a time-date stamp. Within there you should find a detailed log.</P> <P>Something like this:</P> <PRE class="prettyprint">admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ ls -al<BR />total 40<BR />drwxr-xr-x 3 root root 4096 Sep 19 03:00 .<BR />drwxr-xr-x 46 root root 8192 Sep 20 01:53 ..<BR />-rw-r--r-- 1 root root 74 Sep 19 03:00 error_gui_msg<BR />-rw-r--r-- 1 root root 163 Sep 19 03:00 flags.conf.complete<BR />-rw-r--r-- 1 root root 3 Sep 19 03:00 non_fatal_rc<BR />drwxr-xr-x 2 root root 4096 Sep 19 03:00 pre<BR />-rw-r--r-- 1 root root 902 Sep 19 03:00 sru.log<BR />-rw-r--r-- 1 root root 6 Sep 19 03:00 sru.pid<BR />-rw-r--r-- 1 root root 327 Sep 19 03:00 status.log<BR />admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ more sru.log<BR />[160919 03:00:10] Using root directory <BR />[160919 03:00:10] #####################<BR />[160919 03:00:10] # INSTALL STARTING<BR />[160919 03:00:10] #####################<BR />[160919 03:00:10] <BR />[160919 03:00:10] BEGIN pre/000_start.sh<BR />[160919 03:00:10] *************************************************************************<BR />[160919 03:00:10] **** Starting PRE phase<BR />[160919 03:00:10] *************************************************************************<BR />[160919 03:00:10] COMPLETED pre/000_start.sh<BR />[160919 03:00:10] <BR />[160919 03:00:10] BEGIN pre/010_check_versions.sh<BR />[160919 03:00:10] pre/010_check_versions.sh returned non-fatal error, exiting cleanly<BR />[160919 03:00:10] Lock //tmp/sru.lock for install removed successfully.<BR />[160919 03:00:10] Pruning logs and old installs<BR />[160919 03:00:10] <BR />[160919 03:00:10] ####################<BR />[160919 03:00:10] # INSTALL COMPLETE <BR />[160919 03:00:10] ####################<BR />admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$</PRE> <P></P> Tue, 20 Sep 2016 02:16:04 GMT https://community.cisco.com/t5/network-security/snort-rule-downloads-failing/m-p/2977024#M43567 Marvin Rhoads 2016-09-20T02:16:04Z