Snort mailing list archives

Re: Base setup


From: Eric Albert <ealbert () wilsons ca>
Date: Tue, 28 Aug 2018 14:34:19 -0300

from what I see in the logs, it looks like it can't reach mail and
adodbmysql?  Would that cause the page not to load?  here's part of the
apache logs

[Tue Aug 28 14:25:20.822660 2018] [mpm_prefork:notice] [pid 2184] AH00169:
caught SIGTERM, shutting down
[Tue Aug 28 14:25:21.894672 2018] [mpm_prefork:notice] [pid 2348] AH00163:
Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Tue Aug 28 14:25:21.894766 2018] [core:notice] [pid 2348] AH00094: Command
line: '/usr/sbin/apache2'
PHP Warning:  include_once(Mail.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(Mail/mime.php): failed to open stream: No such
file or directory in /var/www/html/base/includes/base_action.inc.php on
line 30
 PHP Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:25:48.191475 2018] [:error] [pid 2353PHP Fatal error:  Call
to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:07.092353 2018] [:error] [pid 2354]PHP Warning:
include_once(Mail.php): failed to open stream: No such file or directory in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092426 2018] [:error] [pid 2354] ] PHP Warning:
include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092459 2018] [:error] [pid 2354] ] PHP Warning:
include_once(Mail/mime.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.092468 2018] [:error] [pid 2354] [] PHP Warning:
include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.146706 2018] [:error] [pid 2354]  PHP Fatal error:
Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:42.019212 2018] [:error] [pid 2352PHP Warning:
include_once(Mail.php): failed to open stream: No such file or directory in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019267 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019296 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.019304 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.074498 2018] [:error] [pid 2352] [client :52165] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:49.398100 2018] [:error] [pid 2355] [client :52167] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480ug 28 14:25:20.822660
2018] [mpm_prefork:notice] [pid 2184] AH00169: caught SIGTERM, shutting down
[Tue Aug 28 14:25:21.894672 2018] [mpm_prefork:notice] [pid 2348] AH00163:
Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Tue Aug 28 14:25:21.894766 2018] [core:notice] [pid 2348] AH00094: Command
line: '/usr/sbin/apache2'
 PHP Warning:  include_once(Mail.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 29
PHP Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(Mail/mime.php): failed to open stream: No such
file or directory in /var/www/html/base/includes/base_action.inc.php on
line 30
 PHP Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:07.092353 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(Mail.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092426 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092459 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.092468 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.146706 2018] [:error] [pid 2354] [client :52152] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:42.019212 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019267 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019296 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.019304 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
 PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
]PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*

On Tue, Aug 28, 2018 at 2:09 PM, Eric Albert <ealbert () wilsons ca> wrote:

I've done all of that.  Is there supposed to be any changes made to the
php.ini file?  I'm not reading any of that, but the last time I used apache
there were some changes needed in there



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*

On Tue, Aug 28, 2018 at 1:49 PM, Carl Huth <carlhuth () gmail com> wrote:

In Ubuntu, you can check the mods that are enabled by using :
ls /etc/apache2/mods-enabled
or /etc/apache2/mods-available if you want to see which ones are
available.

Your PHP settings are in /etc/php/5.6/apache2/php.ini

service apache2 reload should be enough for the module to load but you
may need to do a full restart,s*ervice apache2 restart*


It should just work for you at this point.  The instructions I had read
from the snort site, do say to install apache using apt-get and a ppa for
the PHP 5.6, but in case you are missing any dependencies:

https://snort-org-site.s3.amazonaws.com/production/document_
files/files/000/000/122/original/Snort_2.9.9.x_on_Ubun
tu_14-16.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-
Credential=AKIAIXACIED2SPMSC7GA%2F20180828%2Fus-east-1%2Fs3%
2Faws4_request&X-Amz-Date=20180828T163354Z&X-Amz-Expires=
172800&X-Amz-SignedHeaders=host&X-Amz-Signature=a00e58932
244b7289e87399a70de3a12aca5df094c547ed0072b5aae64dda400


You should make sure that your adodb libraries are built and installed
properly btw. :)

Now edit the config file: sudo vi /var/www/html/base/base_conf.php with
the following settings (*note that the trailing slash on line 80 is
required, despite the instructions in the configuration file*):
$BASE_urlpath = '/base'; # line 50
$DBlib_path = '/var/adodb/'; #line 80
$alert_dbname = 'snort'; # line 102
$alert_host = 'localhost';
$alert_port = '';
$alert_user = 'snort';
$alert_password = 'MySqlSNORTpassword'; # line 106


On Tue, Aug 28, 2018 at 12:41 PM Ryan via Snort-users <
snort-users () lists snort org> wrote:

Here are my build notes for PHP5....this is what you probably
missed...because I missed it too. :)

a2enmod php5.6


# Notes
# Download ADODB
https://downloads.sourceforge.net/project/adodb/adodb-php5-o
nly/adodb-520-for-php5/adodb-5.20.13.zip

# Install ADODB per directions (google)
adodb-5.20.13.zip

# Install PHP5
apt-get install ca-certificates apt-transport-https
wget -q https://packages.sury.org/php/apt.gpg -O- | sudo apt-key add -
echo "deb https://packages.sury.org/php/ stretch main" | sudo tee
/etc/apt/sources.list.d/php.list

apt-get update
apt-get install php5.6
apt-get install php5.6-cli php5.6-common php5.6-curl php5.6-mbstring
php5.6-mysql php5.6-xml
apt-get install libapache2-mod-php5.6 php5.6-mysql php5.6-common
php5.6-gd php5.6-cli php-pear

pear install -f Image_Graph

service apache2 reload

a2dismod php7.0

a2enmod php5.6

systemctl restart apache2


-Ryan





On Tue, Aug 28, 2018 at 8:58 AM Eric Albert <ealbert () wilsons ca> wrote:

Took a bit more than I thought, but a php -v shows that it's running
php5.6.32.  Still can't get on the base site though, not sure what else it
could be.  I can get on the apache site no problem, just the base link
doesn't want to work.



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*

On Tue, Aug 28, 2018 at 11:43 AM, Ryan <ryan95842 () gmail com> wrote:

Hi Eric,

I just completed this build on Debian 9 a couple of weeks ago and had
to install PHP 5.6 for BASE to work. It was an easy install. Set the
preferred PHP to use version 5 (or unistall 7) and BASE worked perfectly.

-Ryan



On Tue, Aug 28, 2018 at 4:27 AM Eric Albert <ealbert () wilsons ca>
wrote:

So I installed PHP, but I think the problem is that base is supposed
to use PHP5, and PHP7 is installed because 16.04 uses it by default.  It
did say in the docs to install the proper PPA to get around it, but I don't
think it works.  I can get to the apache page, but as soon as I try to go
to base_main.php the page cannot be found.  I made the changes that the doc
said to make in the base_conf.php, is there some other change to some
config file that needs to be done so that apache knows where to go when
that page is requested?



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*

On Mon, Aug 27, 2018 at 3:57 PM, Eric Albert <ealbert () wilsons ca>
wrote:

Right, the docs didn't say to install apache and I had to do that,
but I didn't think about PHP support, I'll give it a go

Thx



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*

On Mon, Aug 27, 2018 at 3:53 PM, Jason Gates <
jason.gates () longmontcolorado gov> wrote:

Probably missing PHP support on your webserver. Don’t forget to
restart your webserver if you did install PHP.



--

Jason Gates

Security Analyst

Enterprise Technology Services

City of Longmont



*From:* Snort-users <snort-users-bounces () lists snort org> *On
Behalf Of *Eric Albert
*Sent:* Monday, August 27, 2018 12:40 PM
*To:* snort-users () lists snort org
*Subject:* [Snort-users] Base setup



I'm playing around with snort for the first time and I followed the
doc to install on ubuntu with no problem except this last part.  I'm
getting the attached when I try to finish the web install, and I'm not sure
where I went wrong.  Has anyone had this particular issue?




*Eric Albert  **Network & Infrastructure Specialist*

*902-237-7889 | help () wilsons ca  <help () wilsons ca>*



_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest
Snort news!

Please follow these rules: https://snort.org/faq/what-is-
the-mailing-list-etiquette


_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest
Snort news!

Please follow these rules: https://snort.org/faq/what-is-
the-mailing-list-etiquette



_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: