@${SH} ${PKGINSTALL} ${PKGNAME} POST-INSTALL

MD5 (sancp-1.6.1-stable.tar.gz) = ffa64f2fdb49afd7ef16fbefda21e251

USER=sancp

GROUP=${USER}

if [ ! -d ${LOG_DIR} ]; then mkdir ${LOG_DIR}; fi

if pw group show "${GROUP}" 2>/dev/null; then

	echo "You already have a group \"${GROUP}\", so I will use it."

else

	if pw groupadd ${GROUP}; then

		echo "Added group \"${GROUP}\"."

	else

		echo "Adding group \"${GROUP}\" failed..."

		exit 1

	fi

fi

if pw user show "${USER}" 2>/dev/null; then

	echo "You already have a user \"${USER}\", so I will use it."

	if pw usermod ${USER} -d ${LOG_DIR}

	then

		echo "Changed home directory of \"${USER}\" to \"${LOG_DIR}\""

	else

		echo "Changing home directory of \"${USER}\" to \"${LOG_DIR}\" failed..."

		exit 1

	fi

else

	if pw useradd ${USER} -g ${GROUP} -h - \

		-d ${LOG_DIR} -s /sbin/nologin -c "SANCP Daemon"

	then

		echo "Added user \"${USER}\"."

	else

		echo "Adding user \"${USER}\" failed..."

		exit 1

	fi

fi

chown -R ${USER}:${GROUP} ${LOG_DIR}

#!/bin/sh

# 

# PROVIDE: sancp

# REQUIRE: DAEMON

# BEFORE: LOGIN

# KEYWORD: shutdown

# Add the following lines to /etc/rc.conf to enable sancp:

# sancp_enable (bool):	Set to YES to enable sancp

# 				Default: NO

# sancp_flags (str):		Extra flags passed to sancp

#				Default: -D

# sancp_conf (str):		Sancp configuration file

#				Default: %%PREFIX%%/etc/sancp.conf

# sancp_interface (str):	Default: none - MUST BE SET

#

# Command Line Options: (cmdline)

#   ---------------------

#

#	-? or -h  this help screen

#	-c <filename>  specify the configuration/rules filename

#	-d <directory>  specify the directory for output files

#	-i <device>  set the network device to listen on (default: 'any')

#	-g <gid>   set a group identity

#	-u <uid>   set a user identity

#	-r <pcapfile>  pcap file to read (overrides -i)

#	-B "<bpf expression>"  set a bpf expression (alternative to -F <filename>)

#	-D (daemon) forks, prints msgs to syslog only and overrides -C option

#	-K (console) enable additional printing of 'realtimes' to stdout (suppressed by option -D)

#	-F <bpf filename>  file containing a bpf filter expression, overrides (alternative to -B)

#	-H --human-readable  write IP addresses in dotted notation and TCPflag fields in hex 

#	-R  Set default for realtime to 'pass' (default is 'log') disables realtime, but rules can override

#	-S  Set default for stats to 'pass' (default is 'log') disables stats, but rules can override

#	-P  Set default for pcap to 'pass' (default is 'log') disables pcap, but rules can override

#	-I or --enable_icmp_mixed  record 'code' and 'type' fields for ICMP

#		to the fields 's_port' and 'd_port'.

#		note: affects how related icmp packets are correlated 

#	-V  display version

#    --shift  (debug) force interpretation of packet starting at byte[2] 

#                    normally performed when reading from the 'any' interface

#	--strip-80211  strip 802.1Q headers from 802.1Q packets; used to 

# 	  decode 802.1Q encapsulated packets - affects -A option, 

#	--log-facility <facility>  where facility can be 'LOCAL1' - 'LOCAL7'

#		The default log facility used by SANCP is LOG_DAEMON 

#

#      Debug mode for pcap data logging

#	-A  records ALL traffic frames to a pcap file named 'debug_pcap_raw'

#	  (despite rules). Packets are logged here prior to decoding or handling. 

#	  Use -F or -B option to restrict what is collectedi.

#	  Pcap data logged using this option is affected by the --strip-80211 cmdline option

#	  The configuration file equivalent to this is 'default debug_pcap_raw enable'

. /etc/rc.subr

name="sancp"

rcvar=`set_rcvar`

command="%%PREFIX%%/bin/sancp"

start_precmd=start_precmd

start_precmd()

{

	if [ -z "${sancp_interface}" ]; then

		err 1 "sancp_interface must set."

	fi

}

# set some defaults

load_rc_config $name

: ${sancp_enable="NO"}

: ${sancp_flags="-D"}

: ${sancp_conf="%%PREFIX%%/etc/sancp.conf"}

: ${sancp_interface=""}

command_args="${sancp_flags} -c ${sancp_conf} -i ${sancp_interface}"

run_rc_command "$1"