Snort mailing list archives

Re: BASE1.4.4 is not working properly


From: Jun Wan <junwei_wan () hotmail com>
Date: Tue, 15 Jun 2010 05:38:01 +0000


Hi Kevin & Olli,

 

Many thanks for your help, I am new to Snort, for what I understand, I have to do the followings:

 

1.) upgrade BASE from 1.4.4 to 1.4.5 by following the instructions from a file called "UPGRADE" from 
base-1.4.5.tar.gz\base-1.4.5\docs:

     B. Upgrade from 1.x version of BASE

 

        To upgrade from a previous version of BASE, you will need to copy the

        configuration from your current base_conf.php to the example on provided

        as base_conf.php.dist. This is because of various changes needed for bug

        fixes.

 

2.) Apply the patch from Olli, it's called "patch_base_1.4.5_php5.3.txt"

 

3.) Additional for php5.3 the following diff should be applied (not included in attached patch)

--- ./base_graph_display.php.orig 2010-03-05 16:06:17.000000000 +0100
+++ ./base_graph_display.php 2010-04-11 23:52:13.000000000 +0200
@@ -114,7 +114,7 @@
else
{
// Create the graph area, legends on bottom -- Alejandro
- $Graph =& new Image_Graph(array('driver'=>'gd',
+ $Graph = new Image_Graph(array('driver'=>'gd',
'width'=>$width,
'height'=>$height));
}


 

Now I am having some difficulty to following the step 1.) ---to upgrade BASE from 1.4.4 to 1.4.5. 

 

Do I have to copy all the file from base-1.4.5.tar.gz\base-1.4.5 to the live BASE folder /var/www/base-1.4.4?  

 

As the description from  the "UPGRADE",  If I "copy the configuration from my current base_conf.php to the example on 
provided as base_conf.php.dist", which I belive is from base-1.4.5.tar.gz\base-1.4.5\, then what about the file" 
base_conf.php.dist" in the live BASE folder /var/www/base-1.4.4?

 

Basically I would like to have a bit more info regarding step 1.), which would help a lot for the "Snort Newbies" like 
me.

 

Any info and help would be much appreciated.

 

Many thanks in advance.

 

Regards

 

John

 


 
From: kevin () inguardians com
Date: Fri, 11 Jun 2010 07:07:24 -0400
To: ohauer () gmx de
CC: snort-users () lists sourceforge net
Subject: Re: [Snort-users] BASE1.4.4 is not working properly

On Jun 11, 2010, at 4:24 AM, olli hauer wrote:
On Jun 10, 2010, at 10:40 PM, Jun Wan wrote:
Hi 

My Snort 2.8.5.2 (Build 121) with Barnyars2 (BASE1.4.4) on Ubundu9.1 was running beautifully until I upgraded 
Ubundu9.1 to 10.1 without modifying any existing Snort related configuration files last week. 

The Snort is running fine, but now I am having trouble with BASE. I am still able to login BASE via a browser, 
and "Basic Analysis and Security Engine" (BASE) page shows up with following lines above the BASE:
properly


Deprecated: Function ereg_replace() is deprecated in /var/www/base-1.4.4/includes/base_state_common.inc.php
on line 184


On 2010-06-11 07:20, Kevin Johnson wrote:
Please upgrade to BASE 1.4.5. It fixes this issue.


No, those deprecated functions are not fixed in base-1.4.5, but I submitted some
patches for base-1.4.5.


You are correct. I got messed up because I was reviewing your patch.

I will be trying to get that into CVS next week since I will be home from the road.

Thanks!
Kevin


------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit. See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
                                          
_________________________________________________________________
Need a new place to live? Find it on Domain.com.au
http://clk.atdmt.com/NMN/go/157631292/direct/01/
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: