ROCKNSM Startup & Shutdown

startup-stop.sh

# For creating NSM data from targeted pcaps, trying to get minimal noise
# This is for VirtualBox, but would likely work elsewhere

# startup.sh
#!/bin/bash

sudo -u suricata suricata-update
sudo ip link set dev [mon-int] mtu 16110
sudo ifup [mon-interface]
sleep 5
sudo systemctl start kafka zeek suricata
rockctl status

# shutdown.sh
#!/bin/bash

sudo ifdown [mon-interface]
sudo systemctl stop zeek suricata
rockctl status