CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Do not stop curator since imported data will now be placed into a longer term so-import index

Browse Source
This commit is contained in:
Jason Ertel
2020-07-10 13:58:46 -04:00
parent 811bbb4cb0
commit 358ef78cd9
1 changed files with 2 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
salt/common/tools/sbin/so-import-pcap
View File

@@ -25,7 +25,8 @@ function usage {
cat << EOF cat << EOF
Usage: $0 <pcap-file-1> [pcap-file-2] [pcap-file-N] Usage: $0 <pcap-file-1> [pcap-file-2] [pcap-file-N]
Imports one or more PCAP files for analysis. If available, curator will be automatically stopped. Imports one or more PCAP files onto a sensor node. The PCAP traffic will be analyzed and
made available for review in the Security Onion toolset.
EOF EOF
} }
@@ -112,14 +113,6 @@ for i in "$@"; do
fi fi
done done
if ! [ -d /opt/so/conf/curator ]; then
echo "Curator is not installed on this node and cannot be stopped automatically."
else
echo -n "Stopping curator..."
so-curator-stop > /dev/null 2>&1
echo "Done"
fi
# track if we have any valid or invalid pcaps # track if we have any valid or invalid pcaps
INVALID_PCAPS="no" INVALID_PCAPS="no"
VALID_PCAPS="no" VALID_PCAPS="no"