Skip to content

Instantly share code, notes, and snippets.

@peasead
Last active March 9, 2020 20:59
Show Gist options
  • Save peasead/2b5c8ee25e83487e16fcd898387a859d to your computer and use it in GitHub Desktop.
Save peasead/2b5c8ee25e83487e16fcd898387a859d to your computer and use it in GitHub Desktop.
ROCKNSM Startup & Shutdown
# For creating NSM data from targeted pcaps, trying to get minimal noise
# This is for VirtualBox, but would likely work elsewhere
# startup.sh
#!/bin/bash
sudo -u suricata suricata-update
sudo ip link set dev [mon-int] mtu 16110
sudo ifup [mon-interface]
sleep 5
sudo systemctl start kafka zeek suricata
rockctl status
# shutdown.sh
#!/bin/bash
sudo ifdown [mon-interface]
sudo systemctl stop zeek suricata
rockctl status
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment