From 154ea080f6428bdd4be2fe2c8b399e2e37e2d567 Mon Sep 17 00:00:00 2001 From: t3chn0m4g3 Date: Mon, 29 Aug 2016 19:10:39 +0000 Subject: [PATCH] fix bug suricata systemd ethtool is unable to change interface settings --- installer/data/systemd/suricata.service | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/installer/data/systemd/suricata.service b/installer/data/systemd/suricata.service index cf0aa2dc..c5accd93 100644 --- a/installer/data/systemd/suricata.service +++ b/installer/data/systemd/suricata.service @@ -8,10 +8,9 @@ Restart=always ExecStartPre=-/usr/bin/docker stop suricata ExecStartPre=-/usr/bin/docker rm -v suricata # Get IF, disable offloading, enable promiscious mode -ExecStartPre=-myIF=$(/sbin/ip route | /bin/grep $(/bin/hostname -I | /usr/bin/awk '{print $1 }') | /usr/bin/awk '{print $3 }') -ExecStartPre=-/sbin/ethtool --offload $myIF rx off tx off -ExecStartPre=-/sbin/ethtool -K $myIF gso off gro off -ExecStartPre=-/sbin/ip link set $myIF promisc on +ExecStartPre=/bin/bash -c '/sbin/ethtool --offload $(/sbin/ip route | /bin/grep $(/bin/hostname -I | /usr/bin/awk \'{print $1 }\') | /usr/bin/awk \'{print $3 }\') rx off tx off' +ExecStartPre=/bin/bash -c '/sbin/ethtool -K $(/sbin/ip route | /bin/grep $(/bin/hostname -I | /usr/bin/awk \'{print $1 }\') | /usr/bin/awk \'{print $3 }\') gso off gro off' +ExecStartPre=/bin/bash -c '/sbin/ip link set $(/sbin/ip route | /bin/grep $(/bin/hostname -I | /usr/bin/awk \'{print $1 }\') | /usr/bin/awk \'{print $3 }\') promisc on' ExecStartPre=/bin/bash -c '/usr/bin/clean.sh suricata off' ExecStart=/usr/bin/docker run --name suricata --cap-add=NET_ADMIN --net=host --rm=true -v /data/suricata:/data/suricata dtagdevsec/suricata:latest1610 ExecStop=/usr/bin/docker stop suricata