Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Yara index creation fails when local rule has syntax errors. #69

Open
ir0nf1re opened this issue Feb 22, 2019 · 2 comments
Open

Yara index creation fails when local rule has syntax errors. #69

ir0nf1re opened this issue Feb 22, 2019 · 2 comments
Labels

Comments

@ir0nf1re
Copy link

Hi,

It seems if you create a new Yara rule from scratch, and then restart pastehunter, you get the message below. If you remove the new Yara rule then the restart works.

Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Service hold-off time over, scheduling restart.
Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Scheduled restart job, restart counter is at 5.
Feb 22 13:05:19 vps639933 systemd[1]: Stopped PasteHunter.
Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Start request repeated too quickly.
Feb 22 13:05:19 vps639933 systemd[1]: pastehunter.service: Failed with result 'start-limit-hit'.
Feb 22 13:05:19 vps639933 systemd[1]: Failed to start PasteHunter.

@ir0nf1re
Copy link
Author

It may be related to this error message:
Unable to Create Yara index: YaraRules/recon.yar(24): syntax error, unexpected end of file, expecting

@kevthehermit
Copy link
Owner

That looks like the issue is with the syntax in your local rule file.
I will add some more handling around yara rules to validate each rule before including so it doesnt take the whole stack down.

@kevthehermit kevthehermit changed the title Adding a new Yara rule Yara index creation fails when local rule has syntax errors. Feb 26, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants