From 4af1f8d57f2b7c9e5439d56454ff9a498d637cbb Mon Sep 17 00:00:00 2001 From: Marco Ochse Date: Fri, 17 Nov 2017 14:59:14 +0100 Subject: [PATCH] AWS and OTC do not permit rx off / tx off To ensure compatability with dtag-dev-sec/t-pot-autoinstall and AWS / OTC `tpot.service` no longer expects successful execution of disabling offloading. --- host/etc/systemd/tpot.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/host/etc/systemd/tpot.service b/host/etc/systemd/tpot.service index bcad4477..e030aa30 100644 --- a/host/etc/systemd/tpot.service +++ b/host/etc/systemd/tpot.service @@ -21,7 +21,7 @@ ExecStartPre=-/bin/bash -c 'docker rm -v $(docker ps -aq)' ExecStartPre=-/bin/bash -c 'docker rmi $(docker images | grep "" | awk \'{print $3}\')' # Get IF, disable offloading, enable promiscious mode for p0f and suricata -ExecStartPre=/bin/bash -c '/sbin/ethtool --offload $(/sbin/ip address | grep "^2: " | awk \'{ print $2 }\' | tr -d [:punct:]) rx off tx off' +ExecStartPre=-/bin/bash -c '/sbin/ethtool --offload $(/sbin/ip address | grep "^2: " | awk \'{ print $2 }\' | tr -d [:punct:]) rx off tx off' ExecStartPre=/bin/bash -c '/sbin/ethtool -K $(/sbin/ip address | grep "^2: " | awk \'{ print $2 }\' | tr -d [:punct:]) gso off gro off' ExecStartPre=/bin/bash -c '/sbin/ip link set $(/sbin/ip address | grep "^2: " | awk \'{ print $2 }\' | tr -d [:punct:]) promisc on'