[Snort-users] OpenAanval Intrusion Detection Console problem
rice at ...7669...
Mon Apr 5 11:58:01 EDT 2004
-----BEGIN PGP SIGNED MESSAGE-----
I had a similar problem, but I think I got it figured out. I sent an
email to OA, here is the relevant portion:
I think I have it working. As your documentation is kind of skimpy, I'll
outline my trouble shooting steps. I ran the ids_background.pl file
without backgrounding it so I could see the errors. It was complaining
about an invalid function, mysql_connect();. Since my website is written
in php, I knew it was available. I figured php as a cgi must have it's
own php.ini. It did. I added "extention=mysql.so" to it and all was
right with the world.
A few note worth items about Debian:
There isn't a /usr/bin/php on some installs. There is a /usr/bin/php4. I
had to make a symlynk (ln -s /usr/bin/php /usr/bin/php4).
PHP is install as a mod (mod_php4) and a cgi. Their php.ini files are
/etc/php4/apache/php.ini and /etc/php4/cgi/php.ini respectively.
You must run the two perl scripts that come bundled with the package.
./apps/ids_background.pl > /dev/null &
./apps/ids_misc.pl > /dev/null &
You must run them from your install directory.
Oh, by the way...Aanval is shaping up nicely...for those interested
- -----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Alejandro
Sent: Thursday, April 01, 2004 7:46 PM
To: faizaln at ...11543...
Cc: slave_tothe_box at ...131...; snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] OpenAanval Intrusion Detection Console
I tried to install this program, but in the readme.txt, it tells
add some tables to your snort database, But, it have a table with the
same name of snort, so when you try to add it, mysql complains about a
table with same name (signature).
The problem that you pointed is happening 'cause you didn't
tables. Look in where/is/openAnval/db/ .
|> For your information, I'm using IE version 6.0.28.
|> Could anybody guide me to extensive installation manual.
|> Message: 13
|> Date: Thu, 1 Apr 2004 07:13:19 -0800 (PST)
|> From: James Nonya <slave_tothe_box at ...131...>
|> Subject: Re: [Snort-users] OpenAanval Intrusion Detection Console
|> To: snort-users at lists.sourceforge.net
|> On Thu, 1 Apr 2004 17:57:32 +0800
|> faizaln at ...11543... wrote:
|>> > I'm having problem to get OpenAanval Intrusion
|> Detection Console works with
|>> > snort.
|>> > I managed to installed :-
|>> > 1) openaanval-latest-stable.tar.gz
|>> > 2) snort version 2.1.0 with MySQL enable
|>> > 3) MySQL server version 4.0.12
|>> > 4) Redhat 9
|>> > 5) httpd version 2.0.45 + php ver 4.3.1
|>> > I received error message at the url when click on
|> LIVE Monitor (view a or
|>> > b) :
|>> > "ERROR: No Active Sensors - ( You may receive a
|>> > Could anybody assist me on the situation.
|>> > Thank you.
|> >From the website:
|> A: The OpenAanval Console ONLY supports MSIE 5.x and
|> Are you running IE as your browser? Heh...seems like
|> a stupid restriction to me....
|> This SF.Net email is sponsored by: IBM Linux Tutorials
|> Free Linux tutorial presented by Daniel Robbins, President and CEO of
|> GenToo technologies. Learn everything from fundamentals to system
|> Snort-users mailing list
|> Snort-users at lists.sourceforge.net
|> Go to this URL to change user options or unsubscribe:
|> Snort-users list archive:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Snort-users