Snort mailing list archives

Re: a little perl and a touch of cron


From: Jörgen Persson <jpn () tlth lth se>
Date: Fri, 3 Aug 2001 08:26:30 +0200

On Thu, Aug 02, 2001 at 03:26:23PM +0200, Andreas Brenk wrote:
Hi.

Has anybody already done similar work in order to use Snort and Demarc
under Dan Bernstein's Daemontools?

This would take over the work of checking if the processes are running
and restarting them if necessary.

A script running out of cron doesn't sound that nice to me...

AB


Easy and works like a charm....

The only thing to remember is _not_ to background Snort (i.e. -D). The
test option (-T) is not too clever either...

The ''run'' file can be as simple as 

#!/bin/sh
exec snort

But you to ought to handle the output in some way...


In my script I'm connecting stderr to stdout and sends stdout to
multilog.

#!/bin/sh
exec 2>&1
exec snort yada yada

The log run file looks like:
#! /bin/sh
exec /usr/local/bin/multilog t ./main


Check Bernsteins page[1] for more info.

Jörgen
[1] http://cr.yp.to/daemontools.html

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: