Re: snort script

[Nigel Houghton <nigel () sourcefire com>]

On  0, "paul.johnson8 () gmail com" <paul.johnson8 () gmail com> wrote:
> I have a script for Solaris which is used to stopping and starting
> snort.  Unfortuantly, the script keeps coming up with a syntax errror.
>  Could some kind person shed some light on this.
>
> Thanks for your help.
>
> #!/sbin/sh
> SnortBin=/usr/local/bin
> ConfDir=/usr/local/snort/etc
> RuleDir=/usr/local/snort/rules
> case "$1" in
> 'start')
>         [ -f $ConfDir/snort.conf ] && $SnortBin/snort -u snort -g
> snort -d -D -i eri0 -c $ConfDir/snort.conf
>     echo "snort starting."
>         ;;
>
> 'stop')
>         kill `cat /var/run/snort_eri0.pid`
>     echo "snort stopping."
>         ;;
>
> *)
>         echo "Usage: $0 { start | stop }"

You don't say what the error is, but I'm guessing it's here:

>         exit 1)

Which should look like this:

          exit 1
          ;;

> esac
> exit 0

+--------------------------------------------------------------------+
     Nigel Houghton      Research Engineer       Sourcefire Inc.
                   Vulnerability Research Team

         There is no theory of evolution, just a list
            of creatures Vin Diesel allows to live.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users