#!/bin/bash
# $Id: S99snort,v 1.1 2001/12/18 22:14:37 cazz Exp $
# /etc/init.d/snort : start or stop the SNORT Intrusion Database System
#
# Written by Lukasz Szmit <ptashek@scg.gliwice.pl>
# Modificado por João Paulo de Oliveira Faria <joaopaulo@deoliveira.com.br>
#
# Configuration

# set config file & path to snort executable
SNORT_PATH=/usr/sbin
CONFIG=/etc/snort/snort.conf

# set interface or all for all
IFACE=eth0

# set GID/Group Name
SNORT_GID=snort

# set UID/User Name
SNORT_UID=snort


# other options
OPTIONS="-A fast -l /var/log/snort -D "

# End of configuration


test -x $SNORT_PATH/snort || exit 0

case "$1" in
     start)
        echo "Starting Intrusion Database System: SNORT"
        $SNORT_PATH/snort -c $CONFIG -i $IFACE -g $SNORT_GID -u $SNORT_UID $OPTIONS
        guardian.pl
        if [ "`pidof $SNORT_PATH/snort`" ]; then
                echo "SNORT is up and running!"
        else  
                exit 0
        fi
        echo -n "."
        ;;

     stop)
        killall guardian.pl
        echo "Stoping Intrusion Database System: SNORT"
        if [ "`pidof $SNORT_PATH/snort`" ] ; then

            kill -TERM `pidof $SNORT_PATH/snort`
    
            # Wait until the timeout
            count=120
            numdots=0
            while ([ $count != 0 ]) do
                let count=$count-1
                if [ "`pidof $SNORT_PATH/snort`" ] ; then
                    echo -n .
                    let numdots=$numdots+1
                    sleep 1
                else
                    count=0
                fi
            done
        
            # If it's not dead yet, kill it.

            if [ "`pidof $SNORT_PATH/snort`" ] ; then
                echo " TIMEOUT!"
                kill -KILL `$SNORT_PATH/snort`
            else
                case $numdots in
                  0) echo "." ;;
                  1) echo ;;
                  *) echo " done." ;;
                esac
            fi
        else
            echo "SNORT is  not running!";
        fi
        ;;
     restart)  
        $0 stop
        $0 start
        ;;
     *)
        echo 'Usage: /etc/rc.d/rc.snortd {start|stop|restart}'
        exit 1
        ;;
esac
exit 0
;;

# Start the Snort + Guardian:
if [ -x /etc/rc.d/rc.snortd ]; then
  . /etc/rc.d/rc.snortd start
fi