All pastes #432137 Raw Edit

Snort init script

public text v1 · immutable
·published 2007-04-10 02:12 UTC
rendered paste body
-bash-3.00# cat rc.snort
#!/usr/local/bin/bash
# Copyright (c) 2007, Daniel de Kok <moc.mikciat@leinad>
# All rights reserved.
#
# Redistribution and use of this script, with or without modification, is
# permitted provided that the following conditions are met:
#
# 1. Redistributions of this script must retain the above copyright
#    notice, this list of conditions and the following disclaimer.
#
#  THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
#  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO
#  EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
#  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
#  PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
#  OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
#  OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
#  ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#

SNORTD=/usr/local/bin/snort
PIDFILE=/var/run/snort_dc1.pid
SNORTD_OPTIONS="-dennXvz -c /usr/local/snort/snort.conf.internal -i dc1 -D"

is_pidof() {
  local STATE=$(/bin/ps -p $1 -o cmd= | grep "$2" > /dev/null ; echo $?)
}

snortd_start() {
  echo "Starting snortd: $SNORTD"
  if [ -r $PIDFILE ] && is_pidof $(cat $PIDFILE) snortd ; then
    echo "Already running!"
    return
  fi
  $SNORTD $SNORTD_OPTIONS
}

snortd_stop() {
  echo "Stopping snortd: $SNORTD"
  if [ -r $PIDFILE ] && is_pidof $(cat $PIDFILE) snortd ; then
    kill $(cat $PIDFILE)
    rm -f $PIDFILE
  else
    echo "Not running!"
  fi
}


snortd_restart() {
  snortd_stop
  sleep 1
  snortd_start
}

snortd_reload() {
  kill -s HUP $(cat $PIDFILE)
}

case "$1" in
'start')
  snortd_start
  ;;
'stop')
  snortd_stop
  ;;
restart)
  snortd_restart
  ;;
reload)
  snortd_reload
  ;;
*)
  echo "usage $0 start|stop|restart"
esac
-bash-3.00#