#!/bin/sh

date=`date +%Y-%m-%d`
logfile="/snort/logs/$date/pigsentry"
alertfile="/snort/logs/$date/alert"

# bah, forget the PIDfile
kill_by_token () {
    tok=$1

    pid=`ps auxw | fgrep "$tok" | fgrep -v fgrep | awk -F' ' '{print $2}'`
    for p in $pid ; do
        if [ "$p" -gt 1 ]; then
            kill $p
        fi
    done
}

kill_by_token "/snort/bin/pigsentry"

tail -f $alertfile | /snort/bin/pigsentry >> $logfile &