| 0,0 → 1,60 |
|---|
| #!/bin/bash |
| |
| # alcasar-iot_capture.sh |
| # by Guillaume Gellusseau, Dorian Lemoine & REXY |
| # This script is distributed under the Gnu General Public License (GPL) |
| |
| # Ce script lance une capture de flux réseau en fonction d'une adresse IP source ($1) |
| # This script performs a network flow capture based on source ip address ($1) |
| |
| CONF_FILE="/usr/local/etc/alcasar.conf" |
| INTIF=`grep ^INTIF= $CONF_FILE|cut -d"=" -f2` # INTernal InterFace |
| |
| function info |
| { |
| _PID=$(ps -ef | grep tcpdump | grep $1 | awk {'print $2'}) |
| if [[ -n $_PID ]] |
| then |
| echo "CaptureON" |
| else |
| echo "CaptureOFF" |
| fi |
| } |
| |
| function kill |
| { |
| _PID=$(ps -ef | grep tcpdump | grep $1 | awk {'print $2'}) |
| sudo kill -2 $_PID |
| } |
| |
| function launch |
| { |
| tcpdump ether host $1 -i $INTIF -n -w /tmp/capture_$1.pcap |
| } |
| |
| function flush |
| { |
| sudo rm /tmp/capture_$1.pcap -f |
| } |
| |
| |
| while getopts "l k i f" option; do |
| |
| case "${option}" in |
| |
| l) |
| launch $2 |
| ;; |
| k) |
| kill $2 |
| ;; |
| i) |
| info $2 |
| ;; |
| f) |
| flush $2 |
| ;; |
| esac |
| done |
| |
| #End |
| Property changes: |
|---|
| Added: svn:eol-style |
|---|
| +native |
|---|
| \ No newline at end of property |
|---|
| Added: svn:executable |
|---|
| +* |
|---|
| \ No newline at end of property |
|---|