snort rule downloads failing

[Tejas Kunte]

snort rule update are failing on my FMC

error is Connectivity problems. Unable to download rules   

i ssh'd to the FMC and can connect to the internet. dns lookup is also working fine

in which log file can i get more information about this ?

[Marvin Rhoads]

Look under /var/log/sf for a directory dated the date of the failure. It should have "sru" in the name plus a time-date stamp. Within there you should find a detailed log.

Something like this:

admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ ls -al
total 40
drwxr-xr-x 3 root root 4096 Sep 19 03:00 .
drwxr-xr-x 46 root root 8192 Sep 20 01:53 ..
-rw-r--r-- 1 root root 74 Sep 19 03:00 error_gui_msg
-rw-r--r-- 1 root root 163 Sep 19 03:00 flags.conf.complete
-rw-r--r-- 1 root root 3 Sep 19 03:00 non_fatal_rc
drwxr-xr-x 2 root root 4096 Sep 19 03:00 pre
-rw-r--r-- 1 root root 902 Sep 19 03:00 sru.log
-rw-r--r-- 1 root root 6 Sep 19 03:00 sru.pid
-rw-r--r-- 1 root root 327 Sep 19 03:00 status.log
admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ more sru.log
[160919 03:00:10] Using root directory 
[160919 03:00:10] #####################
[160919 03:00:10] # INSTALL STARTING
[160919 03:00:10] #####################
[160919 03:00:10] 
[160919 03:00:10] BEGIN pre/000_start.sh
[160919 03:00:10] *************************************************************************
[160919 03:00:10] **** Starting PRE phase
[160919 03:00:10] *************************************************************************
[160919 03:00:10] COMPLETED pre/000_start.sh
[160919 03:00:10] 
[160919 03:00:10] BEGIN pre/010_check_versions.sh
[160919 03:00:10] pre/010_check_versions.sh returned non-fatal error, exiting cleanly
[160919 03:00:10] Lock //tmp/sru.lock for install removed successfully.
[160919 03:00:10] Pruning logs and old installs
[160919 03:00:10] 
[160919 03:00:10] ####################
[160919 03:00:10] # INSTALL COMPLETE 
[160919 03:00:10] ####################
admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$