snort.init

   1 #!/bin/sh
   2 #
   3 # snort         Start/Stop the snort IDS daemon.
   4 #
   5 # chkconfig: 2345 40 60
   6 # description:  snort is a lightweight network intrusion detection tool that
   7 #               currently detects more than 1100 host and network
   8 #               vulnerabilities, portscans, backdoors, and more.
   9 #
  10
  11 # Source function library.
  12 . /etc/rc.d/init.d/functions
  13 . /etc/sysconfig/network
  14
  15 # Get service config - may override defaults
  16 [ -f /etc/sysconfig/snort ] && . /etc/sysconfig/snort
  17
  18 # Check that networking is up.
  19 if is_yes "${NETWORKING}"; then
  20         if [ ! -f /var/lock/subsys/network ]; then
  21                 # nls "ERROR: Networking is down. %s can't be run." <service>
  22                 msg_network_down snort
  23                 exit 1
  24         fi
  25 else
  26         exit 0
  27 fi
  28
  29 # See how we were called.
  30 case "$1" in
  31   start)
  32         # Check if the service is already running?
  33         if [ ! -f /var/lock/subsys/snort ]; then
  34                 # show "Starting %s service." <service>
  35                 msg_starting snort
  36                 # we need full path here; see SnortUsersManual.pdf
  37                 daemon  /usr/sbin/snort \
  38                         -u snort -g snort -s -d -D \
  39                         -l /var/log/snort -c /etc/snort/snort.conf
  40                 RETVAL=$?
  41                 [ $RETVAL -eq 0 ] && touch /var/lock/subsys/snort
  42         else
  43                 # show "%s service is already running." <service>
  44                 msg_already_running snort
  45                 exit 1
  46         fi
  47         ;;
  48   stop)
  49         # Stop daemons.
  50         # show "Stopping %s service" <service>
  51         if [ -f /var/lock/subsys/snort ]; then
  52                 msg_stopping snort
  53                 killproc snort
  54                 RETVAL=$?
  55                 rm -f /var/lock/subsys/snort
  56         else
  57                 # show "%s service is not running." <service>
  58                 msg_not_running snort
  59                 exit 1
  60         fi
  61         ;;
  62   reload)
  63         msg_reloading snort
  64         killproc snort -HUP
  65         RETVAL=$?
  66         ;;
  67   restart)
  68         $0 stop
  69         $0 start
  70         ;;
  71   status)
  72         status snort
  73         ;;
  74   *)
  75         echo "Usage: $0 {start|stop|reload|restart|status}"
  76         exit 1
  77 esac
  78
  79 exit $RETVAL