Subversion Repositories ALCASAR

#!/bin/bash

# alcasar-iot_capture.sh
# by Guillaume Gellusseau, Dorian Lemoine & REXY
# This script is distributed under the Gnu General Public License (GPL)

# Ce script lance une capture de flux réseau en fonction d'une adresse IP source ($1) 
# This script performs a network flow capture based on source ip address ($1) 

CONF_FILE="/usr/local/etc/alcasar.conf"
INTIF=`grep ^INTIF= $CONF_FILE|cut -d"=" -f2`                           # INTernal InterFace

function info
{
        _PID=$(ps -ef | grep tcpdump | grep $1 | awk {'print $2'})
        if [[ -n $_PID ]]
        then
                echo "CaptureON"
        else
                echo "CaptureOFF"
        fi 
}

function kill
{
        _PID=$(ps -ef | grep tcpdump | grep $1 | awk {'print $2'})
        sudo kill -2 $_PID
}

function launch
{
        tcpdump ether host $1 -i $INTIF -n -w /tmp/capture_$1.pcap
}

function flush
{
        sudo rm /tmp/capture_$1.pcap -f
}


while getopts "l k i f" option; do

        case "${option}" in

                l)
                        launch $2
                        ;;
                k)
                        kill $2
                        ;;
                i)
                        info $2
                        ;;
                f)
                        flush $2
                        ;;
        esac
done

#End