From 358ef78cd940afe8f6c0f483cf8f0c659b6c973f Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Fri, 10 Jul 2020 13:58:46 -0400 Subject: [PATCH] Do not stop curator since imported data will now be placed into a longer term so-import index --- salt/common/tools/sbin/so-import-pcap | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/salt/common/tools/sbin/so-import-pcap b/salt/common/tools/sbin/so-import-pcap index d6815c450..289d27024 100755 --- a/salt/common/tools/sbin/so-import-pcap +++ b/salt/common/tools/sbin/so-import-pcap @@ -25,7 +25,8 @@ function usage { cat << EOF Usage: $0 [pcap-file-2] [pcap-file-N] -Imports one or more PCAP files for analysis. If available, curator will be automatically stopped. +Imports one or more PCAP files onto a sensor node. The PCAP traffic will be analyzed and +made available for review in the Security Onion toolset. EOF } @@ -112,14 +113,6 @@ for i in "$@"; do fi done -if ! [ -d /opt/so/conf/curator ]; then - echo "Curator is not installed on this node and cannot be stopped automatically." -else - echo -n "Stopping curator..." - so-curator-stop > /dev/null 2>&1 - echo "Done" -fi - # track if we have any valid or invalid pcaps INVALID_PCAPS="no" VALID_PCAPS="no"