schema.sql return error

[empuast]

trying to follow your guide , when create DB schema return error , "snorby.iphdr" doesnt exist ..
please advice with complete step by step

Best regards

[elmaxid]

Do you have snorby installed ?

[rwrocket]

I am trying to implement your solution with Security Onion
I believe the latest SecurityOnion Distro doesn't use Snorby according to this:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Passwords

Perhaps Empuast was using the ISO install of security onion also for Suricata.

Are you able to help/advise on what we should do ? do we have no option but to try to install snorby manually?

[elmaxid]

Sorry for that. I didn't knew that SecurityOnion will remove Snorby.
I think the most easy way to install my script is install the squema (sql) of Snorby (not the app, only the schema). Then you can install the IPS.

I will try to update the script but i'm complicated with my time.

Stay in touch

M.

[rwrocket]

Ok so would I install the schema into the security onion myself database? Or squil? Which database sorry I'm pretty new to all this

…

On 30 Nov. 2017 11:09 pm, "Max Dobladez" ***@***.***> wrote: Sorry for that. I didn't knew that SecurityOnion will remove Snorby. I think the most easy way to install my script is install the squema (sql) of Snorby (not the app, only the schema). Then you can install the IPS. I will try to update the script but i'm complicated with my time. Stay in touch M. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AXLlD1pFvOVfEOReuaHcwipDATqIbuu4ks5s7prfgaJpZM4Qm32E> .