Comments on: Snort IDS & BASE on Server Core 2008

By: Clay

Clay — Tue, 22 Dec 2009 14:14:54 +0000

Hi Emilio. It sounds like the mysql extension is not enabled in your php.ini file. See my previous post on getting mysql & php running for what needs to be done: http://blog.techscrawl.com/2008/11/12/iis-php-and-mysql-on-server-core/ . Hope that helps.

By: Emilio

Emilio — Sat, 19 Dec 2009 14:03:44 +0000

Hi, Clay.
I followed your indications but for Windows7
These are the results:
a) snort is up an running and sending data to mysql database
b) After this, I installed base, php and adodb but when I go to http://localhost/base/base_main.php I have the following error:
*Fatal error*: Call to undefined function mysql_pconnect() in *C:\PHP\adodb\drivers\adodb-mysql.inc.php* on line *382

Can you help?
Regards Emilio

By: Clay

Clay — Mon, 28 Sep 2009 19:14:08 +0000

Hi David,

Not quite. Those lines reference copying those 5 files from a non-server core system over to your server core system. Since the WinPcap installer does not run on Server Core, you will need to run the installer on a full server installation, then copy those 5 files over to the same location on your Server Core system.

Hope that helps. – Clay

By: David

David — Mon, 28 Sep 2009 16:18:22 +0000

I’m wondering about these lines:

From / To c:\windows\system32 : Packet.dll, WanPacket.dll, WPcap.dll, npptools.dll
From / To c:\windows\system32\drivers : npf.sys

Do you mean to copy c:\windows\system32\packet.dll to a new file at c:\windows\system32\wanpacket.dll? (the same for wpcap.dll to npptools.dll, overwriting an existing version)

By: Teenam

Teenam — Mon, 27 Apr 2009 06:14:56 +0000

Dear Sir,
I am a begginer in to use snort. will you please tell the sequence to run snort in Linux System. and how to use Base with it. i am trying to use acid with it as frontend but i m facing some problem with it.
Thanks in advance