Differences

This shows you the differences between two versions of the page.

--- full_packet_capture_system [2014/06/16 19:54] – [Full packet capture system (Work in progress...)] admin
+++ full_packet_capture_system [2014/06/17 08:48] – admin
@@ Line 1: / Line 1: @@
 {{tag>[hardware security apu]}}
+~~TOC~~
 =====Full packet capture system=====
@@ Line 137: / Line 137: @@
 stop() {
-	[ "$EUID" != "0" ] && exit 4
+        [ "$EUID" != "0" ] && exit 4
         echo -n $"$prog, syncing RAM disk to NAS before shutdown."
         echo " ---- STOP runlevel: `/sbin/runlevel` date:  `date`" >> /var/log/rsync.log
         /usr/bin/rsync --quiet -a --log-file=/var/log/rsync.log $ramdisk/ $nas
-	RETVAL=$?
+        RETVAL=$?
-	echo
+        echo
-	[ $RETVAL -eq 0 ] && rm -f $lockfile
+        [ $RETVAL -eq 0 ] && rm -f $lockfile
-	return $RETVAL
+        return $RETVAL
 }
 start() {
-	[ "$EUID" != "0" ] && exit 4
+        [ "$EUID" != "0" ] && exit 4
         echo -n $"$prog, sync not needed at start-up."
         echo " ---- START runlevel: `/sbin/runlevel` date: `date`" >> /var/log/rsync.log
-	RETVAL=$?
+        RETVAL=$?
-	echo
+        echo
-	[ $RETVAL -eq 0 ] && touch $lockfile
+        [ $RETVAL -eq 0 ] && touch $lockfile
-	return $RETVAL
+        return $RETVAL
 }
 sync() {
         [ "$EUID" != "0" ] && exit 4
-        # Sync all files but last (the one tcpdump is writing to)
+        # Sync all files but last (the one tcpdump is writing to) to nas dir and year/day subdirs.
         # remove source files from RAM disk, if sync was succesful.
-        ls $ramdisk | sort -t. -k2 | head -n -1 | /usr/bin/rsync --quiet -a --remove-source-files --log-file=/var/log/rsync.log --files-from=- $ramdisk/ $nas
+        # first create directory structure
+        mkdir -p $nas/`date +%Y/%m/%d`
+        # sync files
+        ls $ramdisk | sort -t. -k2 | head -n -1 | /usr/bin/rsync --quiet -a --remove-source-files --log-file=/var/log/rsync.log --files-from=- $ramdisk/ $nas/`date +%Y/%m/%d`
         RETVAL=$?
         return $RETVAL
@@ Line 168: / Line 173: @@
 # See how we were called.
 case "$1" in
   stop)
-	stop
+        stop
-	;;
+        ;;
   start)
-	start
+        start
-	;;
+        ;;
   sync)
-	sync
+        sync
-	;;
+        ;;
   *)
-	echo $"Usage: $0 {start|stop|sync}"
+        echo $"Usage: $0 {start|stop|sync}"
-	exit 2
+        exit 2
-esac</code>
+esac
+</code>
 ===Enable rsync===
   * Run a cronjob to sync data to NAS every minute. Add to **/etc/crontab** <code>* *  *  *  * root service rsync-capture sync</code>