Ugh. This was slightly painful process, heres what I ended up doing:
apt-get source darkice
apt-get install liblame-dev
apt-get build-dep darkice
cd darkice*
vi debian/rules
# remove --without-lame
dpkg-buildpackage
cd ../
dpkg -i darkice*.deb
apt-get install libgtk2.0-dev
Find and download Darksnow, as of this writing, i was able to get the latest deb release here:http://www.twiki.ufba.br/twiki/pub/RadioFACED/ComoFunciona/darksnow_0.5.2-1_i386.deb
unzip
cd darksnow-0.X.X
./configure
make
make install
Added these to /etc/apt/sources.list
deb http://archive.ubuntu.com/ubuntu dapper main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu dapper main restricted universe multiverse
sudo apt-get install lame liblame0
This will need some updating, still tweaking...use at your own risk.
Saturday, November 8, 2008
Wednesday, November 5, 2008
Upgrading Snort Schema from 1.06 to 1.07
Use this if you need to update you snort DB Schema from 1.06 to 1.07:
USE snort;
ALTER TABLE signature ADD sig_gid INT UNSIGNED;
INSERT INTO `schema` (vseq, ctime) VALUES ('107', now());
DELETE FROM `schema` where vseq = '106';
The only change to the tables comes from the second line. The last two lines are just for updating the version number.
USE snort;
ALTER TABLE signature ADD sig_gid INT UNSIGNED;
INSERT INTO `schema` (vseq, ctime) VALUES ('107', now());
DELETE FROM `schema` where vseq = '106';
The only change to the tables comes from the second line. The last two lines are just for updating the version number.
Install Base and Apache2 Ubuntu 8.10 interpid
sudo apt-get install apache2 php5-mysql libphp-adodb
If you get a message about the path to adodb changing, take note on what the new path is.
cd /var/www
sudo wget http://downloads.sourceforge.net/secureideas/base-1.4.1.tar.gz?modtime=1217804205&big_mirror=0
You might not want to copy and paste the above code as it could be outdated. Just download the newest version and drop it in /var/www and unpack.
sudo tar -xvzf base-1.4.1.tar.gz
sudo rm base-1.4.1.tar.gz
sudo mv base-php4 base
Change "base" to whatever you want your path to base to be: IE http://mywebserver/base
sudo apt-get install php-pear php5-gd
sudo pear install Mail Mail_Mime Image_Color Image_Canvas-alpha Image_Graph-alpha
Open a web browser and navigate to you website, http://localhost/base/ which should take you to, http://localhost/base/setup/setup1.php
Make sure it says that your config file is writable. If not, you could try something like:
sudo chmod -R 777 base
The next screen will ask you for the path to adodb. If you are not sure what that is, you could try something like:
sudo find / -name adodb
The next screen will ask for your DB connection information. Since this guide does not cover getting snort set up I will assume you already have snort set up and know you database information. Add information as necessary.
The final screen will ask if you want would like to require authentication to access the BASE website. I highly recommend setting up a user.
Should be all set up after that. Depending on how many snort alerts are in your DB and various other hardware related factors, it could take some time for BASE to query the data in the database, so be patient if it doesn't come up right away!
If you get a message about the path to adodb changing, take note on what the new path is.
cd /var/www
sudo wget http://downloads.sourceforge.net/secureideas/base-1.4.1.tar.gz?modtime=1217804205&big_mirror=0
You might not want to copy and paste the above code as it could be outdated. Just download the newest version and drop it in /var/www and unpack.
sudo tar -xvzf base-1.4.1.tar.gz
sudo rm base-1.4.1.tar.gz
sudo mv base-php4 base
Change "base" to whatever you want your path to base to be: IE http://mywebserver/base
sudo apt-get install php-pear php5-gd
sudo pear install Mail Mail_Mime Image_Color Image_Canvas-alpha Image_Graph-alpha
Open a web browser and navigate to you website, http://localhost/base/ which should take you to, http://localhost/base/setup/setup1.php
Make sure it says that your config file is writable. If not, you could try something like:
sudo chmod -R 777 base
The next screen will ask you for the path to adodb. If you are not sure what that is, you could try something like:
sudo find / -name adodb
The next screen will ask for your DB connection information. Since this guide does not cover getting snort set up I will assume you already have snort set up and know you database information. Add information as necessary.
The final screen will ask if you want would like to require authentication to access the BASE website. I highly recommend setting up a user.
Should be all set up after that. Depending on how many snort alerts are in your DB and various other hardware related factors, it could take some time for BASE to query the data in the database, so be patient if it doesn't come up right away!
Thursday, October 30, 2008
Keys not working In VMware
I'm posting this primarily as a reminder to me, but perhaps it will help some else as well. I just upgraded to Ubuntu 8.10 beta 64bit, installed VMware 6.5 and my up and down arrows were not working (one was opening the windows menu and some other crazy stuff). A co-worker of mine pointed me towards this handy little fix:
Function/arrow keys, etc. not working
This is an upstream bug in VMware’s code. If your keyboard is not functioning correctly in VMware, add this line to ~/.vmware/config (create file if necessary):
xkeymap.nokeycodeMap = true
http://www.ultimalinux.com/wiki/VMware
Worked like a charm. Awesome.
Thursday, October 23, 2008
Microsoft Emergency Patch
"Microsoft is about to issue an emergency security update to plug a vulnerability which could allow an internet worm to be spread via a computer without the user doing anything.
The update is rated as critical for users of Windows 2000, XP and Server 2003 and the less severe rating of "important" for users of Windows Server 2008 and Windows Vista. The patch is scheduled for 10.00am Pacific Time (6pm BST).
There will be a webcast at 1.00pm Pacific Time (9pm BST) explaining the issue in more detail.
The exploit potentially allows remote code to be executed.
The Advance Notification is here.
Microsoft tries to make life easier for administrators by bundling its updates into one monthly slot, known as Patch Tuesday, in the second week of every month. It has broken this cycle before, but it is unusual. "
http://www.theregister.co.uk/2008/10/23/windows_emergency_update/
Monday, October 1, 2007
I'm Not Allowed In Canada
As a kid, I always wanted to travel for business. The lure of distant cities and strange adventures has always had a mysterious glowing appeal to me. A month or so ago I was promoted, and with the promotion came the opportunity to do just that. Now I would get to travel, and I'd be getting paid to do it.
My first trip was to a relatively small island North West of Seattle. Not bad for getting my feet wet. Throw a ferry in there, a cool rent a car, a nice little hotel, and it was a pretty nice trip overall.
The thing is though, when I think of travel, be it business or leisure, I'm looking for some action. I don't mean that like A-Team style action either, just a little good old fashioned excitement. Upon making my way up to a small city of Regina, in the Canadian province of Saskatchewan I got a little more than I bargained for.
I walked out of my front door at the brisk hour of 5AM. I began the 10 minute walk to the airport bus in style, nodding my head un-rhythmically to Tool's epic 46 and 2.
My timing was bad, as I approached the intersection upon where I would catch the elusive AB bus to DIA. As I began to cross the street, going a list of items in my head. At that moment, it struck my sharply and painfully. My passport was still sitting on my desk at home. This seemed to set the tone of the day. If I only knew what I was in for.
I angrily walked home grabbed my passport and caught the next bus. This put me at the air port about 60 minutes before departure. Not ideal for an international flight, but it would do. As I snaked though the rapidly moving and dreadfully long lines of security I recalled an unfortunate even that had landed me in a Denver court a little over a year before. How I had forgot to remove a knife from my book bag I can't say. Why I had an illegal switch blade in the first place is easy. It was a gift from a friend a few years ago who was leaving town on a plane and knew better than taking it to the air port. As I put my shoes back on and headed for the terminal I felt a sigh of relief move though my body, no arguing with the TSA goons about what constitutes an illegal knife this time. Things were looking up.
Upon arriving in Calgary, I quickly made my way to customs and started in on the rat race. Upon refection, this is the one place I could have strategically avoided the mess I was about to be in. "I'm just visiting a friend" is all I would have had to say. Instead I said I was on business, which then lead to the inevitable "what kind of business?" and catastrophically to "you ever been arrested?". At this point I did what I have done for the past 9 years when asked that question, or at least some situational variation there of. I though of course he was looking at my conviction for brining an illegal switch blade into the airport. I threw it out there, being truthful, "I accidentally brought a knife to the air port". He pried, "what kind of kife?" I dropped the bomb. "a switch blade". A tense silence gripped the air. "ever been arrested for anything else?" he dropped nonchalantly. "uhh yeah, I stumbled" quickly catching pace. "Once in Ohio, for disturbing the peace." "and what happened there" he quickly questioned. I knew I could leave out the details on this one. There was no need for me to dip into the gritty details. What good would do for him to know about how we were snaked from the back and chased down that icy river bank by an unknown number of cops with lazer guided tazers. "Oh you know, my and a buddy drank a little to much, just out side causing a ruckus." I though about sitting in that cop car on Christmas eve, as the cops tried to mad dog me. "we know what you did, if you admit we'll let you go" there wasn't a chance I was going to fess up. Apparently my buddy already had, and even though I refused to break, they let us go with a pay out ticket. It was then that the real bomb dropped. "what about 99, you get in any trouble then?" I knew right away this was a problem. Confused and shook, I answered with a question "in 99?", in the same way that Ron Burgandy might if some one were to throw a question mark on his teleprompter. "yeah it uhh says here you have a felony, trafficking a controlled substance, Marijuana". The last time I had heard or seen a word about this case was just over 9 years ago, and I was signing away some plea, that apparently I did not read closely enough. For the last 9 years I was under the impression that as my lawyer told me, the charge was dropped to some minuscule offense, "attempting to bring prescription pills into interstate commerce with out a prescription." This apparently was not the case. I pushed the confusion aside to deal with the matter at hand. If I was denied entry into Canada it could potentially have a relatively unsavory effect on my job. I was not prepared to let this happen. I was search and questioned relentlessly. Every credit card was removed from my wallet, the bottoms of my pockets searched for residue. I realized how bad things could really get it they were to run some swabs on my ID or probably half the cards in my wallet. I stared coldly into the air as the woman sifted though my underwear. I was taken back to the customs officer and asked to wait while they discussed what was to happen next. I pondered the Canadian law that kept felons from entering the country. I pondered the idea that I had been felon for the last 9 years and not known it. I was called to the desk by the customs official. I was convinced I was going home. He engaged me in some conversation about the quantity of marijuana I had on my possession at the time. "funny thing is I told him, we didnt even have any", Which is entirely true. (we did have Hash but they didn't even know what it was) He looked at me blankly. I though about explaining to him what had actually happened on that cool Nevada night. I though about the cute blond girl back home that I had a crush on, and couldn't stop thinking about. "two grams" I corrected. "thats it?" he said. "Yeah, Nevada is no tolerance state there is no such thing as a 'personal amount'." I said. "Really?" he said, "well in Canada there is, and there is also a thing up here that we practice called balance, I'm going to seize your passport, and let you go do your business, but I'm not actually admitting you into Canada". For that moment, I had a small amount of faith in humanity temporarily restored. I signed a few papers, he took my passport, I headed to nearest airport bar, gulped down two large Heineken's just in time to jump on my connecting flight to Regina.
My first trip was to a relatively small island North West of Seattle. Not bad for getting my feet wet. Throw a ferry in there, a cool rent a car, a nice little hotel, and it was a pretty nice trip overall.
The thing is though, when I think of travel, be it business or leisure, I'm looking for some action. I don't mean that like A-Team style action either, just a little good old fashioned excitement. Upon making my way up to a small city of Regina, in the Canadian province of Saskatchewan I got a little more than I bargained for.
I walked out of my front door at the brisk hour of 5AM. I began the 10 minute walk to the airport bus in style, nodding my head un-rhythmically to Tool's epic 46 and 2.
I wanna feel the change consume me,
Feel the outside turning in.
I wanna feel the metamorphosis and
Cleansing I've endured within
My timing was bad, as I approached the intersection upon where I would catch the elusive AB bus to DIA. As I began to cross the street, going a list of items in my head. At that moment, it struck my sharply and painfully. My passport was still sitting on my desk at home. This seemed to set the tone of the day. If I only knew what I was in for.
I angrily walked home grabbed my passport and caught the next bus. This put me at the air port about 60 minutes before departure. Not ideal for an international flight, but it would do. As I snaked though the rapidly moving and dreadfully long lines of security I recalled an unfortunate even that had landed me in a Denver court a little over a year before. How I had forgot to remove a knife from my book bag I can't say. Why I had an illegal switch blade in the first place is easy. It was a gift from a friend a few years ago who was leaving town on a plane and knew better than taking it to the air port. As I put my shoes back on and headed for the terminal I felt a sigh of relief move though my body, no arguing with the TSA goons about what constitutes an illegal knife this time. Things were looking up.
Upon arriving in Calgary, I quickly made my way to customs and started in on the rat race. Upon refection, this is the one place I could have strategically avoided the mess I was about to be in. "I'm just visiting a friend" is all I would have had to say. Instead I said I was on business, which then lead to the inevitable "what kind of business?" and catastrophically to "you ever been arrested?". At this point I did what I have done for the past 9 years when asked that question, or at least some situational variation there of. I though of course he was looking at my conviction for brining an illegal switch blade into the airport. I threw it out there, being truthful, "I accidentally brought a knife to the air port". He pried, "what kind of kife?" I dropped the bomb. "a switch blade". A tense silence gripped the air. "ever been arrested for anything else?" he dropped nonchalantly. "uhh yeah, I stumbled" quickly catching pace. "Once in Ohio, for disturbing the peace." "and what happened there" he quickly questioned. I knew I could leave out the details on this one. There was no need for me to dip into the gritty details. What good would do for him to know about how we were snaked from the back and chased down that icy river bank by an unknown number of cops with lazer guided tazers. "Oh you know, my and a buddy drank a little to much, just out side causing a ruckus." I though about sitting in that cop car on Christmas eve, as the cops tried to mad dog me. "we know what you did, if you admit we'll let you go" there wasn't a chance I was going to fess up. Apparently my buddy already had, and even though I refused to break, they let us go with a pay out ticket. It was then that the real bomb dropped. "what about 99, you get in any trouble then?" I knew right away this was a problem. Confused and shook, I answered with a question "in 99?", in the same way that Ron Burgandy might if some one were to throw a question mark on his teleprompter. "yeah it uhh says here you have a felony, trafficking a controlled substance, Marijuana". The last time I had heard or seen a word about this case was just over 9 years ago, and I was signing away some plea, that apparently I did not read closely enough. For the last 9 years I was under the impression that as my lawyer told me, the charge was dropped to some minuscule offense, "attempting to bring prescription pills into interstate commerce with out a prescription." This apparently was not the case. I pushed the confusion aside to deal with the matter at hand. If I was denied entry into Canada it could potentially have a relatively unsavory effect on my job. I was not prepared to let this happen. I was search and questioned relentlessly. Every credit card was removed from my wallet, the bottoms of my pockets searched for residue. I realized how bad things could really get it they were to run some swabs on my ID or probably half the cards in my wallet. I stared coldly into the air as the woman sifted though my underwear. I was taken back to the customs officer and asked to wait while they discussed what was to happen next. I pondered the Canadian law that kept felons from entering the country. I pondered the idea that I had been felon for the last 9 years and not known it. I was called to the desk by the customs official. I was convinced I was going home. He engaged me in some conversation about the quantity of marijuana I had on my possession at the time. "funny thing is I told him, we didnt even have any", Which is entirely true. (we did have Hash but they didn't even know what it was) He looked at me blankly. I though about explaining to him what had actually happened on that cool Nevada night. I though about the cute blond girl back home that I had a crush on, and couldn't stop thinking about. "two grams" I corrected. "thats it?" he said. "Yeah, Nevada is no tolerance state there is no such thing as a 'personal amount'." I said. "Really?" he said, "well in Canada there is, and there is also a thing up here that we practice called balance, I'm going to seize your passport, and let you go do your business, but I'm not actually admitting you into Canada". For that moment, I had a small amount of faith in humanity temporarily restored. I signed a few papers, he took my passport, I headed to nearest airport bar, gulped down two large Heineken's just in time to jump on my connecting flight to Regina.
Thursday, July 19, 2007
I hate Myspace
Yes I did have a profile or two for some time, but for the love all things holy. Now that my job involves me to work on the internet all day, I don't get the same pleasure out of surfing the web. Its no secret the way these things work, its fun until it becomes your job and then no more right? Well maybe not. These days I am permitted to flow as I please across networks across the world. For the most part I am confined to the states, but on special occasions I make connections abroad. Dealing with IT folks is for the most part a pleasure. I guess that part of it is really relative to who you are though right? Back to the subject at hand though. I am convinced that internet is by far the most amazing and strange change we will ever see in our life time, or I should say has the greatest impact on the largest amount of people that we have ever seen. What that impact is or whether is good or bad is not my place to say. I am a participant, along for the ride so to speak. So where does myspace fit into this? And when I say myspace, I don't mean literally "my", "space" on the web. Funny thing is, I know that anyone and everyone who reads this knows what I am talking about. There are catchy buzz words to categorize this concept of interactive web, shedding light for the masses on transition of life and culture. But does it really matter where you lie in the whole spectrum of these things? At a company meeting/party today (yeah my work kicks ass) the president discussed with us Mircosoft's four postitions one can take on soft ware in respect to age. Cutting edge, not cutting edge, slow but steady, and 19 80. Well at least thats what I remember from it. Where do you stand? Does it really matter? Does it change? Myspace is so 2000 and I hate it. Perhaps I should make a list.
I hate Myspace because:
1. I did not come up with the idea.
2. I wasn't friends with the person that did.
3. If I add all my real friends I will be taken to court and my child support will go up.
4. Advertisements.
5. I thought I was bleeding edge because I made a fake profile to sell VIOP service.
6. It further complicate strange social circles that I never understood in the first place.
7. They sold out.
8. It introduced HTML to the masses.
Well thats about all I can come up with. Can anybody help me out with some of the finer points that I have missed?
I hate Myspace because:
1. I did not come up with the idea.
2. I wasn't friends with the person that did.
3. If I add all my real friends I will be taken to court and my child support will go up.
4. Advertisements.
5. I thought I was bleeding edge because I made a fake profile to sell VIOP service.
6. It further complicate strange social circles that I never understood in the first place.
7. They sold out.
8. It introduced HTML to the masses.
Well thats about all I can come up with. Can anybody help me out with some of the finer points that I have missed?
Subscribe to:
Posts (Atom)