Snort
[Top] [All Lists]

Re: [Snort-users] BASE config problem - update

To: David.Ryan@Quintiles.com
Subject: Re: [Snort-users] BASE config problem - update
From: Luis Torres <al1629608@yahoo.com>
Date: Tue, 6 Feb 2007 13:11:46 -0800 (PST)
Cc: snort-users@lists.sourceforge.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
Sender: snort-users-bounces@lists.sourceforge.net
David,

Actually I jumped to conclusions and setting up a new IDS box I ran into the exact same problem... php-mysql is not really the problem here.

The problem is that on version 5 of php they disabled mysql support and ADODB relied on that to be on (I didn't go into much detail on the 'why'). If you are running "normal" PHP scripts that use the built in mysql functions then php-mysql gives you all that's needed.

So, long story short. You can compile your own version of PHP --with-mysql or you can just install PHP 4.3.9 or your favorite php4 binary.

I took the second option because my box is for use only by the IDS and my focus was on getting it up and running, not on building my own PHP binary... for now at least  =)

Good luck,

Luis

----- Original Message ----
From: "David.Ryan@Quintiles.com" <David.Ryan@Quintiles.com>
To: Luis Torres <al1629608@yahoo.com>
Cc: snort-users@lists.sourceforge.net
Sent: Tuesday, February 6, 2007 10:39:58 AM
Subject: Re: [Snort-users] BASE config problem - update


Luis,

Thanks for the reply.  I have been away from the machine for a while and am only now getting to run these commands.

php --version ->
PHP 5.1.6 (cli) (built: Nov  3 2006 07:27:53)
Copyright (c) 1997-2006 The PHP Group
Zend Engine v2.1.0, Copyright (c) 1998-2006 Zend Technologies

rpm -qa | grep -i mysql ->
mysql-5.0.27-1.fc5
mysql-server-5.0.27-1.fc5
perl-DBD-MySQL-3.0007-1.fc5
php-mysql-5.1.6-1.2
snort-mysql+flexresp-2.6.1.1-4.fc5

The output of phpinfo( ) includes the following. I guess the '- -without-mysql' is the main problem -
"
magic' '--without-sqlite' '--with-libxml-dir=/usr' '--with-xml' '--with-apxs2=/usr/sbin/apxs'  --without-mysql' '--without-gd' '--without-odbc' '--disable-dom' '--disable-dba' '--without-unixODBC' '--disable-pdo' '--disable-xmlreader

"

Based on your mail it looks like I'm not going anywhere until I get mysql support added/included to my php install.  I originally didn't have php-mysql installed, but I added it before running the rom query above.  I retried the setup script, but unfortunately I still get the same errors.

Any other suggestions ?

Thanks,

David
=================================
David Ryan
IT Security Engineer, Global IT Security
Quintiles SIS, QDUB

david.ryan@quintiles.com
=================================



Luis Torres <al1629608@yahoo.com>

29/01/2007 14:55

To
David.Ryan@Quintiles.com, snort-users@lists.sourceforge.net
cc

Subject
Re: [Snort-users] BASE config problem - update







Hi,

the PHP interpreter generates the errors you see on apache's error_log. The error is saying your php can't find the mysql_pconnect function so:

1. What version of php do you have? (use php --version)
2. Is it compiled with php support or have php-mysql? (create a script only with phpinfo() inside and/or run rpm -qa | grep -i mysql if you're on an rpm based system)
3. what happens if you create a little script just to open a connection to mysql? does it work? (just call mysql_pconnect, then close)

Good luck

Luis

----- Original Message ----
From: "David.Ryan@Quintiles.com" <David.Ryan@Quintiles.com>
To: snort-users@lists.sourceforge.net
Sent: Friday, January 26, 2007 11:12:15 AM
Subject: [Snort-users] BASE config problem - update


Sorry, shortly after posting to the list I did some further research and found this in the error_log for Apache -
'PHP Fatal error:  Call to undefined function mysql_pconnect() in /var/www/html/adodb/drivers/adodb-mysql.inc.php on line 376'


This line is repeated for multiple attempts so I guess this is part of the problem.


Any suggestions ?  I am connecting to a mysql database, but it looks like it is the function calll itself that is the problem rather than the connection itself.


Thanks,


David

=================================
David Ryan
IT Security Engineer, Global IT Security
Quintiles SIS, QDUB

**********************  IMPORTANT--PLEASE READ  ************************
This electronic message, including its attachments, is COMPANY CONFIDENTIAL
and may contain PROPRIETARY or LEGALLY PRIVILEGED information. If you are
not the intended recipient, you are hereby notified that any use, disclosure,
copying, or distribution of this message or any of the information included
in it is unauthorized and strictly prohibited. If you have received this
message in error, please immediately notify the sender by reply e-mail and
permanently delete this message and its attachments, along with any copies
thereof. If this electronic message contains a zipped attachment and you do
not have a decompression tool, you may download unZIP (free of cost) from:
http://www.mk-net-work.com/us/uz/unzip.htm. Alternatively, you may request
that the attachment be resent in an uncompressed format. Thank you.
************************************************************************




Have a burning question? Go to Yahoo! Answers and get answers from real people who know.
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
<Prev in Thread] Current Thread [Next in Thread>