I've done my best to search this and other forums for an answer, but can't come up with anything. I'm running snort/BASE on OS X 10.6. Everything runs perfectly, except for the fact that whenever I try to generate a graph in BASE I get a broken image link. I've turned up my error logging (php.ini and httpd.conf) as high as it will go, but the only messages I get related to this problem are:
Deprecated: Function ereg_replace() is deprecated in /Library/WebServer/Documents/base/includes/base_state_common.inc.php on line 184
Deprecated: Function ereg_replace() is deprecated in /Library/WebServer/Documents/base/includes/base_state_criteria.inc.php on line 255.
Deprecated: Assigning the return value of new by reference is deprecated in /usr/lib/php/Image/Graph.php on line 450.
Is there something obvious I've overlooked here? I see tons of error reporting in the base_graph_xxx.php files, but it never gets output anywhere - either in my apache logs or to the screen.
these messages are all "just" warnings, if I'm not mistaken. So you can ignore them.
The broken link image is caused by something more severe, i.e. by a fatal error. Maybe you could
try and find out what this fatal error might be?
And maybe it is a good idea to start with the CVS version of BASE.
Anonymous CVS access is described at: http://sourceforge.net/scm/?type=cvs&group_id=103348
We see a similar problem when running BASE on our new version of the Network Security Toolkit distribution (based off of Fedora 13).
The problem isn't directly in BASE, but in the Image_Graph PHP library BASE uses for its chart drawing. It looks to me like the Image_Graph PHP package is no longer being maintained (based on the web page: http://pear.php.net/package/Image_Graph/redirected) and hasn't been updated since 2006. In its current state, Image_Graph doesn't seem to run under PHP 5.3.
If someone knows how to work around this issue, I'd appreciate hearing what you did.
Paul, thanks for the comment. We are aware of this issue and the next release of BASE will no longer utilize the Image_Graph library. As you mentioned, it has not been maintained for quite some time and there are better, more flexible charting tools available out there. In the meantime, if you are able to get the BASE graphs to work please let us know.