s = '(cat alertpause | wc -l) 

awk 'BEGIN{RS="\n\n"; FS="\n"}
{
gsub(" COMMUNITY","",$1);c=split($1,one," ");
for (x=3;x<c;x++){printf one[x] " "};
gsub("^.*] ","",$2); printf $2 " " $3 "\n";
}' snortlog > alertpause

if [$S > 10 ] ; then
  rm -f alertpause
else
 snortlog > alertpause

else
 snortlog > alertpause

s = '$(cat alertpause | wc -l)' 

awk 'BEGIN{RS="\n\n"; FS="\n"}
{
gsub(" COMMUNITY","",$1);c=split($1,one," ");
for (x=3;x<c;x++){printf one[x] " "};
gsub("^.*] ","",$2); printf $2 " " $3 "\n";
}' snortlog > alertpause

if [$s > 10 ] ; then
  rm -f alertpause
else
 snortlog > alertpause
fi

#!/usr/bin/env python

# Testing support ke nokia 6610
# basis minicom dan AT Command
# program untuk mengirim pesan
# Andrew Raharjo


import sys
import time
import serial

#definisi untuk port serial

def command(device,cmd):
	device.flush()
	device.write(cmd)
	time.sleep(0.2)
	wait=device.inWaiting()
	read=device.read(wait)
	result=read.strip().split('\r\n')
	return result

def sendSMS(device,number,text):
	
	#cek komunikasi AT command
	command(device,'AT\r')
	time.sleep(0.2)	
	#OK

	#komunikasi dalam mode Protocol Data Unit
	command(device,'AT+CMGF=1\r')
	time.sleep(0.2)
	#OK	
		

	command(device,'AT+CMGS="%s"\r'%(number))
	time.sleep(0.2)
	#OK

	#masukkan text
        #baca file
	command(device,'%s\n'%(text))
	time.sleep(0.2)
	#OK	

	#program selesai
	command(device, chr(26)) #Definisi untuk CTRL+Z

	#main program

if __name__=='__main__':
	try:
		#mengembalikan nilai dari input- reverse input return value
		number=sys.argv[1]	
		f=open('/home/andrewraharjo/Desktop/alertpause','r') #here's the file alertpause should be sent by sms
		text=f.read()

		#chr(26) CTRL+Z
	except:
		#perintah apabila no belum dimasukkan 
             #text and usage for text
		print 'usage : %s <number> <text>'%(sys.argv[0])
		sys.exit(1)

	try:
		#perintah untuk komunikasi dengan serial USB
          #to comm from serial port
		dev=serial.Serial(port='/dev/ttyUSB0')

	except Exception, e:
		print e
		sys.exit(2)

	#sending sms
	#sendSMS(dev,number)
	sendSMS(dev,number,text)
	dev.close()

#!/bin/bash

# check if 'alertpause' exists;
# see if there are more than 10 lines in the file:
# if there are, delete the file or whatever action you like.

if [ -f alertpause ]; then
        S=$(cat alertpause | wc -l)
        if [ $S -gt 10 ]; then
                : # this line can be removed if you put some real code inside this if/fi statement.
                # There are more than 10 entries in the file. Do something here, such 
                # as maybe run that python program.
        fi
fi

# let's touch the alertpause file to make sure it exists, so we don't get a 
# file not found error from awk later:
touch alertpause


# now run the awk, and dump new data into alertpause file. We will APPEND
# the data to any pre-existing file, i.e. if the file did not get deleted
# at the start, we will now add some more lines to it:

awk 'BEGIN{RS="\n\n"; FS="\n"}
{
gsub(" COMMUNITY","",$1);c=split($1,one," ");
for (x=3;x<c;x++){printf one[x] " "};
gsub("^.*] ","",$2); printf $2 " " $3 "\n";
}' snortlog >> alertpause

# Now, if you like, let's display our new alertpause file on screen, using `less`.
# you could do whatever you want with the file.. Maybe use that python program now??
less alertpause

# Done

snort running in daemon mode and logging @/var/log/snort/alert

  if (there's an attack)
    alert parsed by bash command
    alert saved @/var/log/snort/alertpause

     if (alertpause <= 160 character alert)
         sent by sms python-calling python sending sms procedure
     else 
         parse the file into 2 sms
   
     if (alertpause <=10 trigger alert)
         Log into alertpause.1
     else
          remove the files
     
fi
     snort keep running in daemon mode

echo > alertlog

: > alterlog

wc -l alterlog

S=$(cat alertpause | wc -l)
if [ $S -gt 10 ]; then

new snort alert @/var/log/snort/alert

  while (there's a new line on snort alert)
    do 
    print the last line on alertpause
    call python sms program

 if (alertpause > 10 entries)
    then
   remove alertpause
    else
    keep logged and printed in [new format]

#!/bin/bash

# check if 'alertpause' exists;
# see if there are more than 10 lines in the file:
# if there are, delete the file or whatever action you like.

if [ -f alertpause ]; then
        S=$(cat alertpause | wc -l | echo alertlog) 
        if [ $S -gt 10 ]; then
                 
                 #how to run python program in here ? calling python maybe ?
                  python /home/andrewraharjo/belajar-python/smsgateway.py "<cellphone number>"
         
                 # this line can be removed if you put some real code inside this if/fi statement.
                # There are more than 10 entries in the file. Do something here, such 
                # as maybe run that python program.
        fi
fi

# let's touch the alertpause file to make sure it exists, so we don't get a 
# file not found error from awk later:
touch alertpause


# now run the awk, and dump new data into alertpause file. We will APPEND
# the data to any pre-existing file, i.e. if the file did not get deleted
# at the start, we will now add some more lines to it:

awk 'BEGIN{RS="\n\n"; FS="\n"}
{
gsub(" COMMUNITY","",$1);c=split($1,one," ");
for (x=3;x<c;x++){printf one[x] " "};
gsub("^.*] ","",$2); printf $2 " " $3 "\n";
}' snortlog >> alertpause

# Now, if you like, let's display our new alertpause file on screen, using `less`.
# you could do whatever you want with the file.. Maybe use that python program now??
less alertpause