2016-05-29 12:48:17 +00:00
|
|
|
[Unit]
|
|
|
|
|
Description=suricata
|
|
|
|
|
Requires=docker.service
|
|
|
|
|
After=docker.service
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Restart=always
|
|
|
|
|
ExecStartPre=-/usr/bin/docker stop suricata
|
|
|
|
|
ExecStartPre=-/usr/bin/docker rm -v suricata
|
2016-08-09 23:26:03 +00:00
|
|
|
# Get IF, disable offloading, enable promiscious mode
|
|
|
|
|
ExecStartPre=-myIF=$(/sbin/ip route | /bin/grep $(/bin/hostname -I | /usr/bin/awk '{print $1 }') | /usr/bin/awk '{print $3 }')
|
|
|
|
|
ExecStartPre=-/sbin/ethtool --offload $myIF rx off tx off
|
|
|
|
|
ExecStartPre=-/sbin/ethtool -K $myIF gso off gro off
|
|
|
|
|
ExecStartPre=-/sbin/ip link set $myIF promisc on
|
2016-05-29 12:48:17 +00:00
|
|
|
ExecStartPre=/bin/bash -c '/usr/bin/clean.sh suricata off'
|
2016-05-30 14:51:32 +00:00
|
|
|
ExecStart=/usr/bin/docker run --name suricata --cap-add=NET_ADMIN --net=host --rm=true -v /data/suricata:/data/suricata dtagdevsec/suricata:latest1610
|
2016-05-29 12:48:17 +00:00
|
|
|
ExecStop=/usr/bin/docker stop suricata
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
