Add squert for web reporting

[security-onion-solutions]

Add squert for web reporting

[GoogleCodeExporter]

Original comment by [email protected] on 16 Aug 2010 at 3:50

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

Original comment by [email protected] on 14 Oct 2010 at 11:56

• Added labels: Type-Enhancement
• Removed labels: Type-Defect

[GoogleCodeExporter]

http://www.pintumbler.org/Code/squert

Original comment by [email protected] on 1 Nov 2010 at 8:18

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

aptitude install php5-mysql graphviz

Original comment by [email protected] on 12 Nov 2010 at 9:04

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

################################################
# Squert
################################################
cd /var/www
wget http://sourceforge.net/projects/squert/files/squert_0.6.tgz/download
tar zxvf download
rm download
mysql -N -B --user=root --password -e "GRANT SELECT ON server1_db.* TO 
'readonly'@'localhost' IDENTIFIED BY 'securityonion';"
cat squert/.scripts/Ip2c/ip2c.sql | mysql -uroot -p -U server1_db
sed -i 's|exec /usr/local/bin/tclsh|exec /usr/bin/tclsh|g' 
squert/.scripts/Ip2c/ip2c.tcl
sed -i 's|set DBPASS "apassword"|set DBPASS "securityonion"|g' 
squert/.scripts/Ip2c/ip2c.tcl
sed -i 's|set DBNAME sguildb|set DBNAME server1_db|g' 
squert/.scripts/Ip2c/ip2c.tcl
mysql -N -B --user=root --password -e "GRANT ALL PRIVILEGES ON 
server1_db.mappings TO 'readonly'@'localhost' IDENTIFIED BY 'securityonion';"
sed -i 's|$rulePath = "/rules/et_rules";|$rulePath = 
"/etc/snort/rules/snort.rules";|g' squert/config.php
sed -i 's|//$ip2c = 'no';|$ip2c = 'no';|g' squert/config.php
sed -i 's|$ip2c = 'yes';|//$ip2c = 'yes';|g' squert/config.php
# The following lines don't work due to the single tick marks.  Perform 
manually for now.
sed -i 's|$dbName = 'sguildb';|$dbName = 'server1_db';|g' squert/config.php
sed -i 's|$dbPass = 'readonly';|$dbPass = 'securityonion';|g' squert/config.php

# Squert is now available at:
# http://localhost/squert/squert.php

Original comment by [email protected] on 13 Nov 2010 at 3:44

• Changed state: Fixed
• Added labels: ****
• Removed labels: ****