Many of you have already installed a previous version of the SteelScript VM, and rather than re-install a completely new VM, would prefer to upgrade in-place, preserving any existing reports or scripts you’ve already developed. This post describes how to accomplish upgrading from SteelScript VM version 1.3 to version 1.4.
There are two primary methods: the easy way and the manual way.
The easy way requires downloading the tar file attached to the post, sending it to your existing SteelScript 1.3 VM. Then execute the following steps in an SSH shell on the VM using vagrant:vagrant which are the default admin credentials:
tar xvf steelscript-vm-upgrade-13-to14.tar.gz
Then your VM should have installed/upgraded SteelScript packages and have new example scripts inside directory of '/home/vagrant/steelscript_workspace_new'.
If you prefer to perform the steps manually, your VM will need to have access to the internet to download the required packages. The steps are as follows:
- First SSH into SteelScript VM 1.3 using vagrant:vagrant
- Confirm you are in the virtual environment – the SSH prompt should start with the text “(virtualenv)”.
- Update the steelscript packages by executing the following commands:
pip install sleepwalker==0.6
pip install steelscript.appresponse
pip install steelscript.packets
pip install steelscript.wireshark==1.3
pip install steelscript.appfwk==1.5
- Edit the local settings file to add default location for PCAP file storage by adding the following line to the end of /steelscript/www/local_settings.py. Note the line should be aligned to the left. The file is owned by user 'apache', so you have to edit it as user 'root' or 'apache'.
- PCAP_STORE = '/steelscript/www/data/datacache'
- Update the appfwk server with the latest code by executing the following commands:
manage reset_appfwk --force
- Update the example scripts by executing the commands below in the directory of /home/vagrant:
steel mkworkspace -d <path_to_new_workspace>
Now you should be able to run AppResponse example scripts and report and use PCAP manager to upload PCAP files!