Snort Analysis Front End

S.A.F.E.

Getting Started

S.A.F.E is a Front End to the Popular Open Source Intrusion Detection system Snort.

Linux Install Guide:

Requirements:
Apache ver 1.3.x or 2.x
PHP ver 4.x with GD and FreeType support
Snort 2.x with MySQL support compiled in.

1) Unzip safe_final.zip to a location on the server viewable by Apache and PHP.
2) chmod the following directories to 777
   /templates/templates_c
   /templates/templates
3) Using your favorite MySQL tool, import install.sql into the database that snort is logging events to.
4) using your favorite editor, edit /inc/vars.inc.php
   Edit the following fields:
   define('DB_HOST', 'localhost');   // host on which DB runs
   define('DB_NAME', '');       // DB name
   define('DB_USER', '');        // username to access DB
   define('DB_PASS', '');            // password to access DB
   Replacing what's inbetween the '' with values that are applicable to your setup. When finished, save and exit.
5) Open up a browser to the url where s.A.F.E is installed. If installation was successful, then you should see the S.A.F.E Home page.
6) Next broswe to the configuration page by using the "configuration" menu option. Here you can set your variables. Most can be left at default except for    Email.

If there are any questions or problems, please email support@alkasis.com and we can help.

Windows Install Guide:
Requirements:
IIS 5 or 6 or Apache 1.3.x or 2.x
PHP version 4.x
Snort 2.x with MySQL support compiled in.

1) Unzip safe_final.zip into the location of your web root directory (default IIS is C:Inetpubwwwroot)
2) Install PHP using the installer http://www.php.net/downloads.php you will also need to download the zip PHP Archive.(we need the gd library from it)
3) After PHP install, You will need to verify that IIS is configured correctly for PHP. Please see Install.txt in the C:Php directory.
4) Unzip the PHP Archive that you downloaded and look for php_gd2.dll, copy this to the C:Php directory.
5) Next locate the php.ini in C:WINNT. Open it with notepad.exe and locate the line ;Windows Extensions and uncomment the one titled    extension=php_gd2.dll. So it should look like this:

;Windows Extensions
;Note that MySQL and ODBC support is now built in, so no dll is needed for it.
;
;extension=php_bz2.dll
;extension=php_cpdf.dll
;extension=php_crack.dll
;extension=php_curl.dll
;extension=php_db.dll
;extension=php_dba.dll
;extension=php_dbase.dll
;extension=php_dbx.dll
;extension=php_domxml.dll
;extension=php_exif.dll
;extension=php_fdf.dll
;extension=php_filepro.dll
extension=php_gd2.dll
;extension=php_gettext.dll
;extension=php_hyperwave.dll

Save and close the file.
6) Using your favorite MySQL tool, import install_win.sql into the database that snort is logging events to.
7) Open up a browser to the url where s.A.F.E is installed. If installation was successful, then you should see the S.A.F.E Home page.
8) Next broswe to the configuration page by using the "configuration" menu option. Here you can set your variables. Most can be left at default except for Email.

If you have any questions please click here to contact us.