1*4882a593Smuzhiyun#!/bin/sh 2*4882a593Smuzhiyun 3*4882a593SmuzhiyunDAEMON=suricata 4*4882a593SmuzhiyunPIDFILE=/var/run/$DAEMON.pid 5*4882a593Smuzhiyun 6*4882a593SmuzhiyunSURICATA_ARGS="-c /etc/suricata/suricata.yaml -i eth0" 7*4882a593Smuzhiyun 8*4882a593SmuzhiyunSURICATA_RELOAD=0 9*4882a593Smuzhiyun 10*4882a593Smuzhiyun[ -r "/etc/default/$DAEMON" ] && . "/etc/default/$DAEMON" 11*4882a593Smuzhiyun 12*4882a593Smuzhiyunstart() { 13*4882a593Smuzhiyun printf 'Starting %s: ' "$DAEMON" 14*4882a593Smuzhiyun mkdir -p /var/log/suricata 15*4882a593Smuzhiyun start-stop-daemon -b -m -S -q -p "$PIDFILE" -x "/usr/bin/$DAEMON" \ 16*4882a593Smuzhiyun -- $SURICATA_ARGS 17*4882a593Smuzhiyun status=$? 18*4882a593Smuzhiyun if [ "$status" -eq 0 ]; then 19*4882a593Smuzhiyun echo "OK" 20*4882a593Smuzhiyun else 21*4882a593Smuzhiyun echo "FAIL" 22*4882a593Smuzhiyun fi 23*4882a593Smuzhiyun return "$status" 24*4882a593Smuzhiyun} 25*4882a593Smuzhiyun 26*4882a593Smuzhiyunstop() { 27*4882a593Smuzhiyun printf 'Stopping %s: ' "$DAEMON" 28*4882a593Smuzhiyun start-stop-daemon -K -q -p "$PIDFILE" 29*4882a593Smuzhiyun status=$? 30*4882a593Smuzhiyun if [ "$status" -eq 0 ]; then 31*4882a593Smuzhiyun rm -f "$PIDFILE" 32*4882a593Smuzhiyun echo "OK" 33*4882a593Smuzhiyun else 34*4882a593Smuzhiyun echo "FAIL" 35*4882a593Smuzhiyun fi 36*4882a593Smuzhiyun return "$status" 37*4882a593Smuzhiyun} 38*4882a593Smuzhiyun 39*4882a593Smuzhiyunrestart() { 40*4882a593Smuzhiyun stop 41*4882a593Smuzhiyun sleep 1 42*4882a593Smuzhiyun start 43*4882a593Smuzhiyun} 44*4882a593Smuzhiyun 45*4882a593Smuzhiyun# SIGUSR2 makes suricata reload rules 46*4882a593Smuzhiyunreload() { 47*4882a593Smuzhiyun printf 'Reloading %s: ' "$DAEMON" 48*4882a593Smuzhiyun start-stop-daemon -K -s "$SURICATA_RELOAD" -q -p "$PIDFILE" 49*4882a593Smuzhiyun status=$? 50*4882a593Smuzhiyun if [ "$status" -eq 0 ]; then 51*4882a593Smuzhiyun echo "OK" 52*4882a593Smuzhiyun else 53*4882a593Smuzhiyun echo "FAIL" 54*4882a593Smuzhiyun fi 55*4882a593Smuzhiyun return "$status" 56*4882a593Smuzhiyun} 57*4882a593Smuzhiyun 58*4882a593Smuzhiyuncase "$1" in 59*4882a593Smuzhiyun start|stop|restart|reload) 60*4882a593Smuzhiyun "$1";; 61*4882a593Smuzhiyun *) 62*4882a593Smuzhiyun echo "Usage: $0 {start|stop|restart|reload}" 63*4882a593Smuzhiyun exit 1 64*4882a593Smuzhiyunesac 65