[Snort-users] Base setup

Eric Albert ealbert at wilsons.ca
Tue Aug 28 13:34:19 EDT 2018


from what I see in the logs, it looks like it can't reach mail and
adodbmysql?  Would that cause the page not to load?  here's part of the
apache logs

[Tue Aug 28 14:25:20.822660 2018] [mpm_prefork:notice] [pid 2184] AH00169:
caught SIGTERM, shutting down
[Tue Aug 28 14:25:21.894672 2018] [mpm_prefork:notice] [pid 2348] AH00163:
Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Tue Aug 28 14:25:21.894766 2018] [core:notice] [pid 2348] AH00094: Command
line: '/usr/sbin/apache2'
PHP Warning:  include_once(Mail.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(Mail/mime.php): failed to open stream: No such
file or directory in /var/www/html/base/includes/base_action.inc.php on
line 30
 PHP Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:25:48.191475 2018] [:error] [pid 2353PHP Fatal error:  Call
to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:07.092353 2018] [:error] [pid 2354]PHP Warning:
include_once(Mail.php): failed to open stream: No such file or directory in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092426 2018] [:error] [pid 2354] ] PHP Warning:
include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092459 2018] [:error] [pid 2354] ] PHP Warning:
include_once(Mail/mime.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.092468 2018] [:error] [pid 2354] [] PHP Warning:
include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.146706 2018] [:error] [pid 2354]  PHP Fatal error:
Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:42.019212 2018] [:error] [pid 2352PHP Warning:
include_once(Mail.php): failed to open stream: No such file or directory in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019267 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019296 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.019304 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.074498 2018] [:error] [pid 2352] [client :52165] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:49.398100 2018] [:error] [pid 2355] [client :52167] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480ug 28 14:25:20.822660
2018] [mpm_prefork:notice] [pid 2184] AH00169: caught SIGTERM, shutting down
[Tue Aug 28 14:25:21.894672 2018] [mpm_prefork:notice] [pid 2348] AH00163:
Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Tue Aug 28 14:25:21.894766 2018] [core:notice] [pid 2348] AH00094: Command
line: '/usr/sbin/apache2'
 PHP Warning:  include_once(Mail.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 29
PHP Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
 PHP Warning:  include_once(Mail/mime.php): failed to open stream: No such
file or directory in /var/www/html/base/includes/base_action.inc.php on
line 30
 PHP Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:07.092353 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(Mail.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092426 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:07.092459 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.092468 2018] [:error] [pid 2354] [client :52152] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:07.146706 2018] [:error] [pid 2354] [client :52152] PHP
Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
[Tue Aug 28 14:26:42.019212 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail.php): failed to open stream: No such file or
directory in /var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019267 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 29
[Tue Aug 28 14:26:42.019296 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(Mail/mime.php): failed to open stream: No such file
or directory in /var/www/html/base/includes/base_action.inc.php on line 30
[Tue Aug 28 14:26:42.019304 2018] [:error] [pid 2352] [client :52165] PHP
Warning:  include_once(): Failed opening 'Mail/mime.php' for inclusion
(include_path='.:/usr/share/php') in
/var/www/html/base/includes/base_action.inc.php on line 30
 PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480
]PHP Fatal error:  Call to undefined function mysql_pconnect() in
/var/adodb/drivers/adodb-mysql.inc.php on line 480



*Eric Albert **Network & Infrastructure Specialist*

*902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*

On Tue, Aug 28, 2018 at 2:09 PM, Eric Albert <ealbert at wilsons.ca> wrote:

> I've done all of that.  Is there supposed to be any changes made to the
> php.ini file?  I'm not reading any of that, but the last time I used apache
> there were some changes needed in there
>
>
>
> *Eric Albert **Network & Infrastructure Specialist*
>
> *902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*
>
> On Tue, Aug 28, 2018 at 1:49 PM, Carl Huth <carlhuth at gmail.com> wrote:
>
>> In Ubuntu, you can check the mods that are enabled by using :
>> ls /etc/apache2/mods-enabled
>> or /etc/apache2/mods-available if you want to see which ones are
>> available.
>>
>> Your PHP settings are in /etc/php/5.6/apache2/php.ini
>>
>> service apache2 reload should be enough for the module to load but you
>> may need to do a full restart,s*ervice apache2 restart*
>>
>>
>> It should just work for you at this point.  The instructions I had read
>> from the snort site, do say to install apache using apt-get and a ppa for
>> the PHP 5.6, but in case you are missing any dependencies:
>>
>> https://snort-org-site.s3.amazonaws.com/production/document_
>> files/files/000/000/122/original/Snort_2.9.9.x_on_Ubun
>> tu_14-16.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-
>> Credential=AKIAIXACIED2SPMSC7GA%2F20180828%2Fus-east-1%2Fs3%
>> 2Faws4_request&X-Amz-Date=20180828T163354Z&X-Amz-Expires=
>> 172800&X-Amz-SignedHeaders=host&X-Amz-Signature=a00e58932
>> 244b7289e87399a70de3a12aca5df094c547ed0072b5aae64dda400
>>
>>
>> You should make sure that your adodb libraries are built and installed
>> properly btw. :)
>>
>> Now edit the config file: sudo vi /var/www/html/base/base_conf.php with
>> the following settings (*note that the trailing slash on line 80 is
>> required, despite the instructions in the configuration file*):
>> $BASE_urlpath = '/base'; # line 50
>> $DBlib_path = '/var/adodb/'; #line 80
>> $alert_dbname = 'snort'; # line 102
>> $alert_host = 'localhost';
>> $alert_port = '';
>> $alert_user = 'snort';
>> $alert_password = 'MySqlSNORTpassword'; # line 106
>>
>>
>> On Tue, Aug 28, 2018 at 12:41 PM Ryan via Snort-users <
>> snort-users at lists.snort.org> wrote:
>>
>>> Here are my build notes for PHP5....this is what you probably
>>> missed...because I missed it too. :)
>>>
>>> a2enmod php5.6
>>>
>>>
>>> # Notes
>>> # Download ADODB
>>> https://downloads.sourceforge.net/project/adodb/adodb-php5-o
>>> nly/adodb-520-for-php5/adodb-5.20.13.zip
>>>
>>> # Install ADODB per directions (google)
>>> adodb-5.20.13.zip
>>>
>>> # Install PHP5
>>> apt-get install ca-certificates apt-transport-https
>>> wget -q https://packages.sury.org/php/apt.gpg -O- | sudo apt-key add -
>>> echo "deb https://packages.sury.org/php/ stretch main" | sudo tee
>>> /etc/apt/sources.list.d/php.list
>>>
>>> apt-get update
>>> apt-get install php5.6
>>> apt-get install php5.6-cli php5.6-common php5.6-curl php5.6-mbstring
>>> php5.6-mysql php5.6-xml
>>> apt-get install libapache2-mod-php5.6 php5.6-mysql php5.6-common
>>> php5.6-gd php5.6-cli php-pear
>>>
>>> pear install -f Image_Graph
>>>
>>> service apache2 reload
>>>
>>> a2dismod php7.0
>>>
>>> a2enmod php5.6
>>>
>>> systemctl restart apache2
>>>
>>>
>>> -Ryan
>>>
>>>
>>>
>>>
>>>
>>> On Tue, Aug 28, 2018 at 8:58 AM Eric Albert <ealbert at wilsons.ca> wrote:
>>>
>>>> Took a bit more than I thought, but a php -v shows that it's running
>>>> php5.6.32.  Still can't get on the base site though, not sure what else it
>>>> could be.  I can get on the apache site no problem, just the base link
>>>> doesn't want to work.
>>>>
>>>>
>>>>
>>>> *Eric Albert **Network & Infrastructure Specialist*
>>>>
>>>> *902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*
>>>>
>>>> On Tue, Aug 28, 2018 at 11:43 AM, Ryan <ryan95842 at gmail.com> wrote:
>>>>
>>>>> Hi Eric,
>>>>>
>>>>> I just completed this build on Debian 9 a couple of weeks ago and had
>>>>> to install PHP 5.6 for BASE to work. It was an easy install. Set the
>>>>> preferred PHP to use version 5 (or unistall 7) and BASE worked perfectly.
>>>>>
>>>>> -Ryan
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Aug 28, 2018 at 4:27 AM Eric Albert <ealbert at wilsons.ca>
>>>>> wrote:
>>>>>
>>>>>> So I installed PHP, but I think the problem is that base is supposed
>>>>>> to use PHP5, and PHP7 is installed because 16.04 uses it by default.  It
>>>>>> did say in the docs to install the proper PPA to get around it, but I don't
>>>>>> think it works.  I can get to the apache page, but as soon as I try to go
>>>>>> to base_main.php the page cannot be found.  I made the changes that the doc
>>>>>> said to make in the base_conf.php, is there some other change to some
>>>>>> config file that needs to be done so that apache knows where to go when
>>>>>> that page is requested?
>>>>>>
>>>>>>
>>>>>>
>>>>>> *Eric Albert **Network & Infrastructure Specialist*
>>>>>>
>>>>>> *902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*
>>>>>>
>>>>>> On Mon, Aug 27, 2018 at 3:57 PM, Eric Albert <ealbert at wilsons.ca>
>>>>>> wrote:
>>>>>>
>>>>>>> Right, the docs didn't say to install apache and I had to do that,
>>>>>>> but I didn't think about PHP support, I'll give it a go
>>>>>>>
>>>>>>> Thx
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> *Eric Albert **Network & Infrastructure Specialist*
>>>>>>>
>>>>>>> *902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*
>>>>>>>
>>>>>>> On Mon, Aug 27, 2018 at 3:53 PM, Jason Gates <
>>>>>>> jason.gates at longmontcolorado.gov> wrote:
>>>>>>>
>>>>>>>> Probably missing PHP support on your webserver. Don’t forget to
>>>>>>>> restart your webserver if you did install PHP.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>>
>>>>>>>> Jason Gates
>>>>>>>>
>>>>>>>> Security Analyst
>>>>>>>>
>>>>>>>> Enterprise Technology Services
>>>>>>>>
>>>>>>>> City of Longmont
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> *From:* Snort-users <snort-users-bounces at lists.snort.org> *On
>>>>>>>> Behalf Of *Eric Albert
>>>>>>>> *Sent:* Monday, August 27, 2018 12:40 PM
>>>>>>>> *To:* snort-users at lists.snort.org
>>>>>>>> *Subject:* [Snort-users] Base setup
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> I'm playing around with snort for the first time and I followed the
>>>>>>>> doc to install on ubuntu with no problem except this last part.  I'm
>>>>>>>> getting the attached when I try to finish the web install, and I'm not sure
>>>>>>>> where I went wrong.  Has anyone had this particular issue?
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> *Eric Albert  **Network & Infrastructure Specialist*
>>>>>>>>
>>>>>>>> *902-237-7889 | help at wilsons.ca  <help at wilsons.ca>*
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> _______________________________________________
>>>>>> Snort-users mailing list
>>>>>> Snort-users at lists.snort.org
>>>>>> Go to this URL to change user options or unsubscribe:
>>>>>> https://lists.snort.org/mailman/listinfo/snort-users
>>>>>>
>>>>>>         To unsubscribe, send an email to:
>>>>>>         snort-users-leave at lists.snort.org
>>>>>>
>>>>>> Please visit http://blog.snort.org to stay current on all the latest
>>>>>> Snort news!
>>>>>>
>>>>>> Please follow these rules: https://snort.org/faq/what-is-
>>>>>> the-mailing-list-etiquette
>>>>>>
>>>>>
>>>> _______________________________________________
>>> Snort-users mailing list
>>> Snort-users at lists.snort.org
>>> Go to this URL to change user options or unsubscribe:
>>> https://lists.snort.org/mailman/listinfo/snort-users
>>>
>>>         To unsubscribe, send an email to:
>>>         snort-users-leave at lists.snort.org
>>>
>>> Please visit http://blog.snort.org to stay current on all the latest
>>> Snort news!
>>>
>>> Please follow these rules: https://snort.org/faq/what-is-
>>> the-mailing-list-etiquette
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180828/fb3e92d8/attachment.html>


More information about the Snort-users mailing list