[Snort-users] BASE1.4.4 is not working properly

Jun Wan junwei_wan at ...125...
Tue Jun 15 01:38:01 EDT 2010


Hi Kevin & Olli,

 

Many thanks for your help, I am new to Snort, for what I understand, I have to do the followings:

 

1.) upgrade BASE from 1.4.4 to 1.4.5 by following the instructions from a file called "UPGRADE" from base-1.4.5.tar.gz\base-1.4.5\docs:

     B. Upgrade from 1.x version of BASE

 

        To upgrade from a previous version of BASE, you will need to copy the

        configuration from your current base_conf.php to the example on provided

        as base_conf.php.dist. This is because of various changes needed for bug

        fixes.

 

2.) Apply the patch from Olli, it's called "patch_base_1.4.5_php5.3.txt"

 

3.) Additional for php5.3 the following diff should be applied (not included in attached patch)

--- ./base_graph_display.php.orig 2010-03-05 16:06:17.000000000 +0100
+++ ./base_graph_display.php 2010-04-11 23:52:13.000000000 +0200
@@ -114,7 +114,7 @@
else
{
// Create the graph area, legends on bottom -- Alejandro
- $Graph =& new Image_Graph(array('driver'=>'gd',
+ $Graph = new Image_Graph(array('driver'=>'gd',
'width'=>$width,
'height'=>$height));
}


 

Now I am having some difficulty to following the step 1.) ---to upgrade BASE from 1.4.4 to 1.4.5. 

 

Do I have to copy all the file from base-1.4.5.tar.gz\base-1.4.5 to the live BASE folder /var/www/base-1.4.4?  

 

As the description from  the "UPGRADE",  If I "copy the configuration from my current base_conf.php to the example on provided as base_conf.php.dist", which I belive is from base-1.4.5.tar.gz\base-1.4.5\, then what about the file" base_conf.php.dist" in the live BASE folder /var/www/base-1.4.4?

 

Basically I would like to have a bit more info regarding step 1.), which would help a lot for the "Snort Newbies" like me.

 

Any info and help would be much appreciated.

 

Many thanks in advance.

 

Regards

 

John

 


 
> From: kevin at ...14601...
> Date: Fri, 11 Jun 2010 07:07:24 -0400
> To: ohauer at ...348...
> CC: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] BASE1.4.4 is not working properly
> 
> On Jun 11, 2010, at 4:24 AM, olli hauer wrote:
> >> On Jun 10, 2010, at 10:40 PM, Jun Wan wrote:
> >>> Hi 
> >>> 
> >>> My Snort 2.8.5.2 (Build 121) with Barnyars2 (BASE1.4.4) on Ubundu9.1 was running beautifully until I upgraded Ubundu9.1 to 10.1 without modifying any existing Snort related configuration files last week. 
> >>> 
> >>> The Snort is running fine, but now I am having trouble with BASE. I am still able to login BASE via a browser, and "Basic Analysis and Security Engine" (BASE) page shows up with following lines above the BASE:
> >>> properly
> >>> 
> >>> 
> >>> Deprecated: Function ereg_replace() is deprecated in /var/www/base-1.4.4/includes/base_state_common.inc.php
> >>> on line 184
> >> 
> >> 
> > On 2010-06-11 07:20, Kevin Johnson wrote:
> >> Please upgrade to BASE 1.4.5. It fixes this issue.
> >> 
> > 
> > No, those deprecated functions are not fixed in base-1.4.5, but I submitted some
> > patches for base-1.4.5.
> > 
> 
> You are correct. I got messed up because I was reviewing your patch.
> 
> I will be trying to get that into CVS next week since I will be home from the road.
> 
> Thanks!
> Kevin
> 
> 
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate 
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
> lucky parental unit. See the prize list and enter to win: 
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
 		 	   		  
_________________________________________________________________
Need a new place to live? Find it on Domain.com.au
http://clk.atdmt.com/NMN/go/157631292/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100615/5c087d74/attachment.html>


More information about the Snort-users mailing list