rendered paste body#!/bin/sh
tail --follow=name /var/log/snort/portscan.log | \
awk '
$0 ~ /INVALIDACK/ {
system("/usr/local/bin/audio_block/blocksound_ack");
}
$0 ~ /SYN/ {
system("/usr/local/bin/audio_block/blocksound_syn");
}
$0 ~ /NULL/ {
system("/usr/local/bin/audio_block/blocksound_null");
}
'
tail --follow=name /var/log/snort/alert | \
awk '
$0 ~ /Portscan/ {
system("/usr/local/bin/audio_block/blocksound_portscan");
}
$0 ~ /Portsweep/ {
system("/usr/local/bin/audio_block/blocksound_portsweep");
}
$0 ~ /PING/ {
system("/usr/local/bin/audio_block/blocksound_ping");
}
'
tail --follow=name /var/ipblock/config | \
awk '
$0 ~ /DROP/ {
system("/usr/local/bin/audio_block/blocksound_ip");
}
'