-bash-3.00# cat rc.snort
#!/usr/local/bin/bash
# Copyright (c) 2007, Daniel de Kok <moc.mikciat@leinad>
# All rights reserved.
#
# Redistribution and use of this script, with or without modification, is
# permitted provided that the following conditions are met:
#
# 1. Redistributions of this script must retain the above copyright
# notice, this list of conditions and the following disclaimer.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#
SNORTD=/usr/local/bin/snort
PIDFILE=/var/run/snort_dc1.pid
SNORTD_OPTIONS="-dennXvz -c /usr/local/snort/snort.conf.internal -i dc1 -D"
is_pidof() {
local STATE=$(/bin/ps -p $1 -o cmd= | grep "$2" > /dev/null ; echo $?)
}
snortd_start() {
echo "Starting snortd: $SNORTD"
if [ -r $PIDFILE ] && is_pidof $(cat $PIDFILE) snortd ; then
echo "Already running!"
return
fi
$SNORTD $SNORTD_OPTIONS
}
snortd_stop() {
echo "Stopping snortd: $SNORTD"
if [ -r $PIDFILE ] && is_pidof $(cat $PIDFILE) snortd ; then
kill $(cat $PIDFILE)
rm -f $PIDFILE
else
echo "Not running!"
fi
}
snortd_restart() {
snortd_stop
sleep 1
snortd_start
}
snortd_reload() {
kill -s HUP $(cat $PIDFILE)
}
case "$1" in
'start')
snortd_start
;;
'stop')
snortd_stop
;;
restart)
snortd_restart
;;
reload)
snortd_reload
;;
*)
echo "usage $0 start|stop|restart"
esac
-bash-3.00#