Windows Snort (自由軟體IDS)系統建立程序-3

14.安裝Pear
Setp1. cmd->cd c:\php
*pear config-set http_proxy xxx.xxx.xxx.xxx:8080*有proxy需設  (xxx.xxx.xxx.xxx=proxy ip)
Setp3.pear install Image_Color
Setp4.pear install Log
Setp5.pear install Numbers_Roman
Setp6.pear install http://pear.php.net/get/Image_Canvas
Setp7.pear install http://pear.php.net/get/Numbers_Words-0.15.0
Setp8.pear install http://download.pear.php.net/package/Image_Graph-0.7.2.tgz

15.安裝 ADODB
Setp1.Download ADODB  http://adodb.sourceforge.net/#download
Setp2.解壓縮至C:\

16.安裝BASE
Setp1.http://base.secureideas.net/
Setp2.解壓縮至C:\Apache\htdocs\ 安裝目錄改成Base
Setp3.設定base_conf.php C:\Apache\htdocs\base\base_conf.php.dist 更名base_conf.php
$BASE_urlpath = '';改$BASE_urlpath = 'http://localhost/base';
$DBlib_path = "";改$DBlib_path = "c:\adodb";
$alert_dbname = 'snort_log';
$alert_host = 'localhost';
$alert_port = '';
$alert_user = 'snort';
$alert_password = 'mypassword';
改
$alert_dbname = 'snort_log';
$alert_host = 'localhost';
$alert_port = '3306';
$alert_user = 'root';
$alert_password =  'mysql密碼';
$archive_exists = 0; # Set this to 1 if you have an archive DB
$archive_dbname = 'snort_archive';
$archive_host = 'localhost';
$archive_port = '';
$archive_user = 'snort';
$archive_password = 'mypassword';
修改成
$archive_exists = 1; # Set this to 1 if you have an archive DB
$archive_dbname = 'snort_archive';
$archive_host = 'localhost';
$archive_port = '3306';
$archive_user = 'root';
$archive_password = 'mysql密碼';
$portscan_file = ''; 改 $portscan_file = 'c:\snort\log\portscan.log'; 存檔關閉
C:\snort\doc\signatures Copy to C:\Apache\htdocs\base #Alert 可以查詢 文字說明
17.建立BASE 資料庫欄位
 開始 >執行 cmd
 cd C:\apache\htdocs\base\sql\

c:\mysql\bin\mysql -D snort_log -u root -p密碼 < create_base_tbls_mysql.sql
c:\mysql\bin\mysql -D snort_archive -u root -p密碼 < create_base_tbls_mysql.sql
http://hocalhost/BASE/index.php "大功告成"

(之後設定增加管理與安全性 ）

18 建立PphpMyadmin 管理
 http://www/phpmyadmin.net/home_page/index.php 下載 解壓縮至 c:\Apache\htdocs\
目錄改名稱phpMyadmin
修改目錄檔案config.inc.php
$cfg['PmaAbsoluteUri'] = ''; 改$cfg['PmaAbsoluteUri'] =http://localhost/phpMyAdmin/;
$cfg['Servers'][$i]['password'] = ''; 改$cfg['Servers'][$i]['password'] = '密碼';
http://hocalhost/phpmyadmin/index.php  可以正常登入表示安裝OK

19 網頁安全性登入

命令模式 cd \apache\bin
c:\apache\bin> htpasswd -c c:\apache\pwd\pwd  帳號
請輸入兩次密碼
c:\apache\conf\httpd.conf

#增加以下設定#


AuthType Basic
AuthName "BASE"
AuthUserFile c:\apache\pwd\pwd
Require user base


AuthType Basic
AuthName "phpMyAdmin"
AuthUserFile c:\apache\pwd\pwd
Require user base


增加以下設定
DirectoryIndex index.php

DirectoryIndex base_main.php

找到Options Indexes FollowSymLinks 改 Options -Indexes FollowSymLinks