User manual

Sensor Name is an arbitrary string that is prepended to the log output. This may be
useful if you have deployed more than one intrusion detection system.
Enter the User name and Password required for authentication to the remote database.
Click Submit to apply your changes.
Setting up the analysis server
Specific open source tools are required to be installed on the analysis server for a
straightforward evaluation.
The analysis server is typically a Pentium 4 level system running Linux (Red Hat, Debian,
etc.) with sufficient memory and disk capacity to run a database and web server with at
least one ethernet port. With these tools installed, web pages can be created that
display, analyze and graph data stored in the MySQL database from the SnapGear unit
running Advanced Instrusion Detection. They should be installed in the following order:
MySQL database
http://www.mysql.com/downloads/mysql-4.0.html
http://www.mysql.com/doc/en/index.html
Apache web server
http://httpd.apache.org/download.cgi
http://httpd.apache.org/docs-2.0/
PHP scripting language for developing web pages
http://www.php.net/downloads.php
http://www.php.net/download-docs.php
ADODB library to hide differences between databases used by PHP
http://php.weblogs.com/adodb#downloads
GD graphics library for GIF image creation used by PHP
http://www.boutell.com/gd/
169
Firewall