rendered paste body grep -v ^# pcap_agent.conf | grep -v ^$
set DEBUG 1
set DAEMON 0
set SERVER_HOST 10.0.1.13
set SERVER_PORT 7736
set HOSTNAME metro
set NET_GROUP metro
set LOG_DIR /nsm/snort_data
set RAW_LOG_DIR ${LOG_DIR}/${HOSTNAME}/dailylogs
set TCPDUMP "/usr/sbin/tcpdump"
set VLAN 0
set TMP_DIR "/tmp"
set WATCH_DIR ${LOG_DIR}/${HOSTNAME}
set FILE_CHECK_IN_MSECS 300000
set DISK_CHECK_DELAY_IN_MSECS 1800000
set PING_DELAY 300000
[root@metro sguil]# tclsh /usr/local/sguil/sensor/pcap_agent.tcl -c /etc/sguil/pcap_agent-metro.conf -O
Connected to 10.0.1.13
Sending sguild (sock3) RegisterAgent pcap metro metro
Sending sguild (sock3) DiskReport /nsm/snort_data/metro
Sending sguild (sock3) PING
Sensor Data Rcvd: AgentInfo metro pcap metro 5 0
Error: can't read "logFile": no such variable
can't read "logFile": no such variable
while executing
"file stat $logFile fileStat"
(procedure "CheckLastPcapFile" line 25)
invoked from within
"CheckLastPcapFile 1"
(procedure "AgentInfo" line 6)
invoked from within
"AgentInfo [lindex $data 1] [lindex $data 2] [lindex $data 3] [lindex $data 4] "
("AgentInfo" arm line 1)
invoked from within
"switch -exact -- $sguildCmd {
PONG { if {$DEBUG} {puts "PONG received"} }
PING { SendToSgui..."
(procedure "SguildCmdRcvd" line 22)
invoked from within
"SguildCmdRcvd sock3"
[root@metro sguil]# ls /nsm/snort_data/metro/dailylogs
2007-09-14 2007-10-22 2007-11-29 2008-01-06 2008-02-13 2008-03-22
2007-09-15 2007-10-23 2007-11-30 2008-01-07 2008-02-14 2008-03-23
2007-09-16 2007-10-24 2007-12-01 2008-01-08 2008-02-15 2008-03-24
2007-09-17 2007-10-25 2007-12-02 2008-01-09 2008-02-16 2008-03-25
2007-09-18 2007-10-26 2007-12-03 2008-01-10 2008-02-17 2008-03-26
2007-09-19 2007-10-27 2007-12-04 2008-01-11 2008-02-18 2008-03-27
2007-09-20 2007-10-28 2007-12-05 2008-01-12 2008-02-19 2008-03-28
2007-09-21 2007-10-29 2007-12-06 2008-01-13 2008-02-20 2008-03-29
2007-09-22 2007-10-30 2007-12-07 2008-01-14 2008-02-21 2008-03-30
2007-09-23 2007-10-31 2007-12-08 2008-01-15 2008-02-22 2008-03-31
2007-09-24 2007-11-01 2007-12-09 2008-01-16 2008-02-23 2008-04-01
2007-09-25 2007-11-02 2007-12-10 2008-01-17 2008-02-24 2008-04-02
2007-09-26 2007-11-03 2007-12-11 2008-01-18 2008-02-25 2008-04-03
2007-09-27 2007-11-04 2007-12-12 2008-01-19 2008-02-26 2008-04-04
2007-09-28 2007-11-05 2007-12-13 2008-01-20 2008-02-27 2008-04-05
2007-09-29 2007-11-06 2007-12-14 2008-01-21 2008-02-28 2008-04-06
2007-09-30 2007-11-07 2007-12-15 2008-01-22 2008-02-29 2008-04-07
2007-10-01 2007-11-08 2007-12-16 2008-01-23 2008-03-01 2008-04-08
2007-10-02 2007-11-09 2007-12-17 2008-01-24 2008-03-02 2008-04-09
2007-10-03 2007-11-10 2007-12-18 2008-01-25 2008-03-03 2008-04-10
2007-10-04 2007-11-11 2007-12-19 2008-01-26 2008-03-04 2008-04-11
2007-10-05 2007-11-12 2007-12-20 2008-01-27 2008-03-05 2008-04-12
2007-10-06 2007-11-13 2007-12-21 2008-01-28 2008-03-06 2008-04-13
2007-10-07 2007-11-14 2007-12-22 2008-01-29 2008-03-07 2008-04-14
2007-10-08 2007-11-15 2007-12-23 2008-01-30 2008-03-08 2008-04-15
2007-10-09 2007-11-16 2007-12-24 2008-01-31 2008-03-09 2008-04-16
2007-10-10 2007-11-17 2007-12-25 2008-02-01 2008-03-10 2008-04-17
2007-10-11 2007-11-18 2007-12-26 2008-02-02 2008-03-11 2008-04-18
2007-10-12 2007-11-19 2007-12-27 2008-02-03 2008-03-12 2008-04-19
2007-10-13 2007-11-20 2007-12-28 2008-02-04 2008-03-13 2008-04-20
2007-10-14 2007-11-21 2007-12-29 2008-02-05 2008-03-14 2008-04-21
2007-10-15 2007-11-22 2007-12-30 2008-02-06 2008-03-15 2008-04-22
2007-10-16 2007-11-23 2007-12-31 2008-02-07 2008-03-16
2007-10-17 2007-11-24 2008-01-01 2008-02-08 2008-03-17
2007-10-18 2007-11-25 2008-01-02 2008-02-09 2008-03-18
2007-10-19 2007-11-26 2008-01-03 2008-02-10 2008-03-19
2007-10-20 2007-11-27 2008-01-04 2008-02-11 2008-03-20
2007-10-21 2007-11-28 2008-01-05 2008-02-12 2008-03-21