My snort graphs have no words

Question

I just got Security+ certified and stared to care about my network (or use my newly aquired knowledge to make everything better)

I just installed Snort the open source IDS. I am having one issue erything working correctly, but the graphs in BASE have no words.

I have googled and found no answers. Haas anyone else seen anything like this?

Wild guess mode: you're missing whatever font files BASE thinks it's using for creating the labels. You might be getting error messages logged in your webserver's error log if this is the case (depending on your webserver, its setup, and how it's running PHP).
@DerfK It was a font problem. I did some more googling with the errors in the apache log file and found some unhelpful answers. I finally did get it to work after copying font files all over the place. I would make this as the answer, if you can post it without it being a comment.
Take a couple of minutes, find which of those copies is the one it really needed, then answer it yourself (it'll ask you to wait a bit before marking it as the correct answer). That would be a much better answer for posterity than my wild guess.

BLAKE · Answer 1 · 2011-02-28 21:55:38Z

I did this on CentOS. It looks like the PEAR::Image_Graph doesn't use the OS's default font cache.

I had to copy a font file to the Pear folder and edit a config file.

I created a "Fonts" folder in /usr/share/pear/Image/Canvas/

A copied a font file from /usr/share/fonts to the new Fonts folder

$ cp /usr/share/fonts/dejavu-lgc/DejaVuLGCSerif.ttf /usr/share/pear/Image/Canvas/Fonts/

I then had to edit base_conf.php, I changed the $graph_font_name value to DejaVuLGCSerif.ttf

1 Answer