Re: Does any have this script?

[Bryan H <nve_this () yahoo com>]

#!/bin/sh
#
# snortd         Start/Stop the snort IDS daemon.
#
# chkconfig: 2345 40 60
# description:  snort is a lightweight network
intrusion detection tool that
#               currently detects more than 1100 host
and network
#               vulnerabilities, portscans, backdoors,
and more.
#
# June 10, 2000 -- Dave Wreski
<dave () linuxsecurity com>
#   - initial version
#
# July 08, 2000 Dave Wreski <dave () guardiandigital com>
#   - added snort user/group
#   - support for 1.6.2
# July 31, 2000 Wim Vandersmissen <wim () bofh st>
#   - added chroot support

# Source function library.
. /etc/rc.d/init.d/functions

# Specify your network interface here
INTERFACE=eth0

# See how we were called.
case "$1" in
  start)
        echo -n "Starting snort: "
        cd /var/log/snort
        daemon /usr/local/bin/snort  -vdeo -b -l
/var/log/snort -d -D \
                 -i $INTERFACE -c
/etc/snort/snort.conf
        touch /var/lock/subsys/snort
        echo
        ;;
  stop)
        echo -n "Stopping snort: "
        killproc snort
        rm -f /var/lock/subsys/snort
        echo
        ;;
  restart)
        $0 stop
        $0 start
        ;;
  status)
        status snort
        ;;
  *)
        echo "Usage: $0 {start|stop|restart|status}"
        exit 1
esac

exit 0

Hope that is it.

-bryan
--- The infoSphere <mgalvin001 () mac com> wrote:
> Thanks Steve
>
>
> On Wednesday, October 16, 2002, at 12:59  PM,
> Beckett, Josh wrote:
>
> > -----Original Message-----
> > From: Steve Scott
> [mailto:sjscott007 () earthlink net]
> > Sent: Thursday, October 10, 2002 1:40 PM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] Snort Implementation Guide
> - Redhat 7.3 / MySQL 
> > /
> > ACID
> >
> >
> >
> > Earthlink cut me off due to bandwidth.  You can
> find the guide at
> > http://www.superhac.com/snort from now on.
> >
> > Regards,
> >
> > Steve
> >
> >
> > -----Original Message-----
> > From: The infoSphere [mailto:mgalvin001 () mac com]
> > Sent: Wednesday, October 16, 2002 8:55 AM
> > To: Snort (E-mail)
> > Subject: [Snort-users] Does any have this script?
> >
> >
> > Hi all,
> >
> >     I was going thru that installation manual by
> Steven J. Scott and
> > there
> > is a link to download the snortd init script file
> but his site has been
> > down for a while. Does anyone have this script or
> any other good init
> > script that I can use on a system that has the
> following setup:  eth0
> > is set up with an IP for management not for
> sniffing, eth1 has no IP
> > and will be used to run a stealthy snort. I can
> write a simple script
> > but wanted to know if there are any good ones that
> are widely used!
> > Thanks in advance
> >
> > The infoSphere
-------------------------------------------------------
> > This sf.net email is sponsored by: viaVerio will
> pay you up to
> > $1,000 for every account that you consolidate with
> us.
> > http://ad.doubleclick.net/clk;4749864;7604308;v?
> > http://www.viaverio.com/consolidator/osdn.cfm
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> unsubscribe:
> >
https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------------------------------------------------
> This sf.net email is sponsored by: viaVerio will pay
> you up to
> $1,000 for every account that you consolidate with
> us.
> http://ad.doubleclick.net/clk;4749864;7604308;v?
> http://www.viaverio.com/consolidator/osdn.cfm
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by: viaVerio will pay you up to
$1,000 for every account that you consolidate with us.
http://ad.doubleclick.net/clk;4749864;7604308;v?
http://www.viaverio.com/consolidator/osdn.cfm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users