Re: Needed Apache modules for BASE

[Noah Dietrich <noah_dietrich () 86penny org>]

sorry for the late reply.  I can't address your exact question, as BASE is
really dated, and relies on PHP5.  I can provide the instructions for
Ubuntu from the snort 2.9 Ubunt install guide that i wrote (
https://snort.org/documents ) :

  # Ubuntu 16 only:
sudo add-apt-repository ppa:ondrej/php
sudo apt-get update
sudo apt-get install -y apache2 libapache2-mod-php5.6 php5.6-mysql
php5.6-cli php5.6 php5.6-common php5.6-gd php5.6-cli php-pear php5.6-xml

for ubuntu 14:
sudo apt-get install -y apache2 libapache2-mod-php5 php5 php5-mysql
php5-common php5-gd php5-cli php-pear

really there isn't a great SIEM / web gui for Snort 2.x.  Snort 3 (still in
Beta) has the ability to output to json, which you can ingest into Splunk
using the TA I wrote: https://splunkbase.splunk.com/app/4633/ (instructions
for setting this up are in the Snort 3 install guide for Ubuntu on the
snort website: https://snort.org/documents).

Noah

On Mon, Sep 23, 2019 at 10:31 AM Scott A. Wozny via Snort-users <
snort-users () lists snort org> wrote:

> Greetings Snort Gurus!
>
> Does anyone know what Apache modules (beyond the Core and the appropriate
> Multi-Processing Module) are needed for BASE to work properly? For example
> it appears BASE is written in PHP, but is that PHP thread safe? In other
> words, do I just want to run mod_php on the Apache server or do I want to
> run the more modern mod_proxy, mod_proxy_fcgi, PHP-FPM stack? I also saw a
> blog post mentioning “other dependencies” but wasn’t able to find anything
> more specific.
>
>
> Any thoughts or suggestions would be appreciated.
>
>
> Thanks,
>
>
> Scott
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists snort org
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
>         To unsubscribe, send an email to:
>         snort-users-leave () lists snort org
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette