Summary of Snort installation on Ubuntu

I have installed snort and configured it more than once on Ubuntu. I have also referred to many articles. Therefore, I would like to summarize this experience:

Main reference http://www.howtoforge.com/intrusion-detection-with-snort-mysql-apache2-on-ubuntu-7.10

Because the above URL is very detailed, I will only talk about the problems I encountered during the installation and configuration process.

PS: when we develop snort, we need to add the parameter:./configure -- enable-dynamicplugin -- enable-Debug -- With-mysql in the configuration phase.

1. In 12. Time to test snort, "detection" may appear. Select either of them. Edit snort. conf (line 1) and comment out a detection.

2. Comment out all dynamicdetection related lines in Snort. conf.

3. Then, access localhost/www/web/base-1.3.8 at the end of "14. Base setup via the Web .".

Warning: include_once (mail. PHP) [function. include-once]: failed to open stream: no such file or directory in/var/www/web/base-php4/DES/base_action.inc.php on line 29

Warning: include_once () [function. include]: Failed opening 'mail. PHP 'for declaration (include_path = '. :/usr/share/PHP ') in/var/www/web/base-php4/schemdes/base_action.inc.php on line 29

Warning: include_once (mail/mime. PHP) [function. include-once]: failed to open stream: no such file or directory in/var/www/web/base-php4/DES/base_action.inc.php on line 30

Warning: include_once () [function. include]: Failed opening 'mail/mime. PHP 'for declaration (include_path = '. :/usr/share/PHP ') in/var/www/web/base-php4/schemdes/base_action.inc.php on line 30

Warning: cannot modify header information-headers already sent by (output started at/var/www/web/base-php4/DES/base_action.inc.php: 29) in/var/www/web/base-php4/base_common.php on line 1077

Solution:

 

It was resolve by installing the following:

Pear install mail

Pear install mail_mime

4. simplechinese may occur in the language interface Selection: remove the blank lines in the last line of simplechinese. php.