[Oisf-users] Startup

[Anas.B]

Please, help me,
what is  the adequate time exactly to run the command :
*# suricata -c /etc/suricata/suricata.yaml -q 0*

and how ?
 I've already searched in google,

I think the adequate time is just after running the interface, so
i've added the command in * /etc/network/if-up.d/upstart*

but now the probleme is, it's run Twice !!!



2010/6/29 Anas.B <a.bouhsaina at gmail.com>

> As an IPS , we do not mention the interface in the runing command,
>
> so what do you advise me.
>
>
> 2010/6/29 Anas.B <a.bouhsaina at gmail.com>
>
>> I've found two ways,
>>
>> wrinting the start script in /etc/network/if-up.d/upstart
>>
>> !/bin/sh
>> [ "$IFACE" == "etho" ] || exit 0
>> ....
>>
>> or writing it in rc.local
>>
>>
>>
>>
>> 2010/6/29 Anas.B <a.bouhsaina at gmail.com>
>>
>>  #echo "Démarrage du module ip_queue
>>>  #lsmod | grep ip_queue >/dev/null || /sbin/modprobe ip_queue;
>>> these lines are "comments", i can even remove it
>>>
>>>
>>> Le 29 juin 2010 10:20, Eric Leblond <eleblond at edenwall.com> a écrit :
>>>
>>> Hi,
>>>>
>>>> Le mardi 29 juin 2010 à 10:09 +0100, Anas.B a écrit :
>>>> > I'm sorry , this is my script
>>>> >
>>>> > ### BEGIN INIT INFO
>>>> > # Provides:          scriptname
>>>> > # Required-Start:    $remote_fs $syslog
>>>> > # Required-Stop:     $remote_fs $syslog
>>>> > # Default-Start:     2 3 4 5
>>>> > # Default-Stop:      0 1 6
>>>> > # Short-Description: Start daemon at boot time
>>>> > # Description:       Enable service provided by daemon.
>>>> > ### END INIT INFO
>>>> > #!/bin/bash
>>>> > #
>>>> > # suricata_inline
>>>> >
>>>> > start(){
>>>> > # Démarrrer les démons.
>>>> > #echo "Démarrage du module ip_queue:"
>>>> > #lsmod | grep ip_queue >/dev/null || /sbin/modprobe ip_queue;
>>>>
>>>> strictly useless, ip_queue is *deprecated* and not used by suricata.
>>>> You need to load the real module: nfnetlink_queue
>>>>
>>>> It may be enough to make things work.
>>>>
>>>> Cordialement,
>>>> --
>>>> Éric Leblond, eleblond at edenwall.com
>>>> Téléphone : +33 1 40 24 65 04, Fax : +33 9 57 21 48 75
>>>> EdenWall, http://www.edenwall.com
>>>>
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20100629/b6f4bf07/attachment-0002.html>