Anonymous

--- log_packets.sh.diff 2007-04-03 09:57:22.000000000 -0400
+++ log_packets.sh      2007-04-03 10:06:15.000000000 -0400
@@ -30,7 +30,7 @@
 #       for each instance (ie sensor1, sensor2, sensor-eth0, sensor-eth1, etc)
 HOSTNAME="myhost"
 # Path to snort binary
-SNORT_PATH="/usr/local/bin/snort"
+SNORT_PATH="/usr/local/bin/daemonlogger"
 # Directory to log pcap data to (date dirs will be created in here)
 # Note: The path $HOSTNAME/dailylogs, will be appended to this.
 LOG_DIR="/snort_data"
@@ -40,8 +40,10 @@
 INTERFACE="eth0"
 # Other options to use when starting snort
 #OPTIONS="-u sguil -g sguil -m 122"
+# Daemonlogger-specifc options (mandatory for Sguil compatibility)
+DOPTIONS="-n snort.log"
 # Where to store the pid
-PIDFILE="/var/run/snort_log-${HOSTNAME}.pid"
+PIDFILE="/var/run/daemonlogger_log-${HOSTNAME}.pid"
 # How do we run ps
 PS="ps awx"
 # Where is grep
@@ -83,9 +85,9 @@
       chmod 777 $LOG_DIR/$today
     fi
     if [ -n "$FILTER" ]; then
-      eval exec $SNORT_PATH $OPTIONS -l $LOG_DIR/$today -b -i $INTERFACE $FILTER > /tmp/snort.log 2>&1 &
+      eval exec $SNORT_PATH $OPTIONS $DOPTIONS -l $LOG_DIR/$today -i $INTERFACE $FILTER > /tmp/daemonlogger.log 2>&1 &
     else
-      eval exec $SNORT_PATH $OPTIONS -l $LOG_DIR/$today -b -i $INTERFACE > /tmp/snort.log 2>&1 &
+      eval exec $SNORT_PATH $OPTIONS $DOPTIONS -l $LOG_DIR/$today -b -i $INTERFACE > /tmp/daemonlogger.log 2>&1 &
     fi
     PID=$!
     if [ $? = 0 ]; then