Do not edit. This page has been migrated. See Converting_Wiki_Documentation_to_Sphinx.

PostgreSQL¶

If you do not have PostgreSQL installed:

sudo apt-get update && sudo apt-get upgrade
sudo apt-get install postgresql

sudo vim /etc/postgresql/9.1/main/pg_hba.conf

change the line:

local   all             all                                     trust

to

local   all             all                                     md5

login and change passwords

sudo -u postgres psql postgres
\password postgres

Then -

create database filejsondb;
\c filejsondb;
create user filejson with password 'PASSWORD123';
CREATE TABLE filejson( time_received VARCHAR(64), ipver VARCHAR(4),  srcip VARCHAR(40), dstip VARCHAR(40), protocol INTEGER, sp INTEGER, dp INTEGER, http_uri TEXT, http_host TEXT, http_referer TEXT, filename TEXT, magic TEXT, state VARCHAR(32), md5 VARCHAR(32), stored VARCHAR(32), size BIGINT);
grant all privileges on database filejsondb to filejson;

Log out and log in again (with the "filejson" user) to test if everything is ok:

psql -d filejson -U filejson

Optionally you could create and import the MD5 white list data if you wish - generally the same guidance as described in:
Filemd5 and white/black listing with MD5

Some more general info and basic commands/queries:
http://jazstudios.blogspot.se/2010/06/postgresql-login-commands.html
http://www.thegeekstuff.com/2009/05/15-advanced-postgresql-commands-with-examples/

now you can go ahead and execute the script - Script FollowJSON

Peter Manev