mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
Installer upgrade
This commit is contained in:
28
installer/upstart/suricata.conf
Normal file
28
installer/upstart/suricata.conf
Normal file
@ -0,0 +1,28 @@
|
||||
########################################################
|
||||
# T-Pot Community Edition #
|
||||
# Suricata upstart script #
|
||||
# #
|
||||
# v0.50 by mo, DTAG, 2015-01-27 #
|
||||
########################################################
|
||||
|
||||
description "Suricata"
|
||||
author "mo"
|
||||
start on started docker and filesystem
|
||||
stop on runlevel [!2345]
|
||||
respawn
|
||||
pre-start script
|
||||
# Remove any existing suricata containers
|
||||
myCID=$(docker ps -a | grep suricata | awk '{ print $1 }')
|
||||
if [ "$myCID" != "" ];
|
||||
then docker rm $myCID;
|
||||
fi
|
||||
myIF=$(route | grep default | awk '{ print $8 }')
|
||||
/sbin/ethtool --offload $myIF rx off tx off
|
||||
/sbin/ethtool -K $myIF gso off gro off
|
||||
/sbin/ip link set $myIF promisc on
|
||||
end script
|
||||
script
|
||||
# Delayed start to avoid rapid respawning
|
||||
sleep $(((RANDOM % 5)+5))
|
||||
/usr/bin/docker run --name suricata --cap-add=NET_ADMIN --net=host --rm=true -v /data/suricata/ dtagdevsec/suricata
|
||||
end script
|
Reference in New Issue
Block a user