Re: Needed Apache modules for BASE

[Dorian ROSSE via Snort-users <snort-users () lists snort org>]

up

De : Dorian ROSSE
Envoyé : dimanche 20 octobre 2019 13:56
À : 'Noah Dietrich' <noah_dietrich () 86penny org>; Scott A. Wozny <sawozny () hotmail com>
Cc : snort-users () lists snort org
Objet : RE: [Snort-users] Needed Apache modules for BASE

On a winsnort website you will find the apache module here if you choose the apache installing with mysql or postgresl 
intalling just press the arrow green as following printscreen

Regards.


Dorian ROSSE.

De : Snort-users <snort-users-bounces () lists snort org<mailto:snort-users-bounces () lists snort org>> De la part de 
Noah Dietrich
Envoyé : dimanche 20 octobre 2019 00:14
À : Scott A. Wozny <sawozny () hotmail com<mailto:sawozny () hotmail com>>
Cc : snort-users () lists snort org<mailto:snort-users () lists snort org>
Objet : Re: [Snort-users] Needed Apache modules for BASE

sorry for the late reply.  I can't address your exact question, as BASE is really dated, and relies on PHP5.  I can 
provide the instructions for Ubuntu from the snort 2.9 Ubunt install guide that i wrote (https://snort.org/documents ) :

  # Ubuntu 16 only:
sudo add-apt-repository ppa:ondrej/php
sudo apt-get update
sudo apt-get install -y apache2 libapache2-mod-php5.6 php5.6-mysql php5.6-cli php5.6 php5.6-common php5.6-gd php5.6-cli 
php-pear php5.6-xml

for ubuntu 14:
sudo apt-get install -y apache2 libapache2-mod-php5 php5 php5-mysql php5-common php5-gd php5-cli php-pear

really there isn't a great SIEM / web gui for Snort 2.x.  Snort 3 (still in Beta) has the ability to output to json, 
which you can ingest into Splunk using the TA I wrote: https://splunkbase.splunk.com/app/4633/ (instructions for 
setting this up are in the Snort 3 install guide for Ubuntu on the snort website: https://snort.org/documents).

Noah

On Mon, Sep 23, 2019 at 10:31 AM Scott A. Wozny via Snort-users <snort-users () lists snort org<mailto:snort-users () 
lists snort org>> wrote:
Greetings Snort Gurus!


Does anyone know what Apache modules (beyond the Core and the appropriate Multi-Processing Module) are needed for BASE 
to work properly? For example it appears BASE is written in PHP, but is that PHP thread safe? In other words, do I just 
want to run mod_php on the Apache server or do I want to run the more modern mod_proxy, mod_proxy_fcgi, PHP-FPM stack? 
I also saw a blog post mentioning “other dependencies” but wasn’t able to find anything more specific.


Any thoughts or suggestions would be appreciated.



Thanks,



Scott

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org<mailto:Snort-users () lists snort org>
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org<mailto:snort-users-leave () lists snort org>

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette