|
Lines 4-10
Link Here
|
| 4 |
|
4 |
|
| 5 |
EAPI=5 |
5 |
EAPI=5 |
| 6 |
|
6 |
|
| 7 |
inherit user |
7 |
inherit user systemd |
| 8 |
|
8 |
|
| 9 |
MY_PV="${PV/_p/p}" |
9 |
MY_PV="${PV/_p/p}" |
| 10 |
DESCRIPTION="Sensor part of sguil Network Security Monitoring" |
10 |
DESCRIPTION="Sensor part of sguil Network Security Monitoring" |
|
Lines 77-82
Link Here
|
| 77 |
dobin sensor/pcap_agent-sancp.tcl |
77 |
dobin sensor/pcap_agent-sancp.tcl |
| 78 |
dobin sensor/sancp_agent.tcl |
78 |
dobin sensor/sancp_agent.tcl |
| 79 |
dobin sensor/snort_agent.tcl |
79 |
dobin sensor/snort_agent.tcl |
|
|
80 |
newbin "${FILESDIR}/systemd-log_packets_rotate.sh" log_packets_rotate |
| 80 |
|
81 |
|
| 81 |
newinitd "${FILESDIR}/log_packets.initd" log_packets |
82 |
newinitd "${FILESDIR}/log_packets.initd" log_packets |
| 82 |
newinitd "${FILESDIR}/pads_agent.initd" pads_agent |
83 |
newinitd "${FILESDIR}/pads_agent.initd" pads_agent |
|
Lines 85-90
Link Here
|
| 85 |
newinitd "${FILESDIR}/sancp_agent.initd" sancp_agent |
86 |
newinitd "${FILESDIR}/sancp_agent.initd" sancp_agent |
| 86 |
newinitd "${FILESDIR}/snort_agent.initd" snort_agent |
87 |
newinitd "${FILESDIR}/snort_agent.initd" snort_agent |
| 87 |
newconfd "${FILESDIR}/log_packets.confd" log_packets |
88 |
newconfd "${FILESDIR}/log_packets.confd" log_packets |
|
|
89 |
systemd_dounit "${FILESDIR}/pads_agent.service" |
| 90 |
systemd_dounit "${FILESDIR}/pcap_agent.service" |
| 91 |
systemd_dounit "${FILESDIR}/pcap_agent-sancp.service" |
| 92 |
systemd_dounit "${FILESDIR}/sancp_agent.service" |
| 93 |
systemd_dounit "${FILESDIR}/snort_agent.service" |
| 94 |
systemd_dounit "${FILESDIR}/log_packets_rotate.timer" |
| 95 |
systemd_dounit "${FILESDIR}/log_packets_rotate.service" |
| 96 |
systemd_newunit "${FILESDIR}/log_packets_at.service" log_packets\@.service |
| 88 |
|
97 |
|
| 89 |
insinto /etc/sguil |
98 |
insinto /etc/sguil |
| 90 |
doins sensor/pads_agent.conf |
99 |
doins sensor/pads_agent.conf |
|
Lines 116-119
Link Here
|
| 116 |
elog "You should crontab the /etc/init.d/log_packets script to restart" |
125 |
elog "You should crontab the /etc/init.d/log_packets script to restart" |
| 117 |
elog "each hour." |
126 |
elog "each hour." |
| 118 |
elog |
127 |
elog |
|
|
128 |
elog "If you are using systemd, the log_packets@.service unit will" |
| 129 |
elog "automatically start the log_packets_rotate.timer unit which" |
| 130 |
elog "will take care of that. Just enable this unit with the device" |
| 131 |
elog "name you are monitoring, for example: log_packets@eth0.service." |
| 132 |
elog "As well as all the agents like snort_agent.service," |
| 133 |
elog "pcap_agent.service etc. you need." |
| 134 |
elog |
| 119 |
} |
135 |
} |
