#!/bin/sh

(tail --follow=name /var/log/snort/portscan.log | \
  awk '
   $0 ~ /INVALIDACK/ {
      system("/usr/local/bin/audio_block/blocksound_ack");
    }
   $0 ~ /SYN/ {
      system("/usr/local/bin/audio_block/blocksound_syn");
    }
   $0 ~ /NULL/ {
      system("/usr/local/bin/audio_block/blocksound_null");
    }
   ')
&
(tail --follow=name /var/log/snort/alert | \
  awk '
   $0 ~ /Portscan/ {
      system("/usr/local/bin/audio_block/blocksound_portscan");
    }
   $0 ~ /Portsweep/ {
      system("/usr/local/bin/audio_block/blocksound_portsweep");
    }
   $0 ~ /PING/ {
      system("/usr/local/bin/audio_block/blocksound_ping");
    }
   ')
&
(tail --follow=name /var/smoothwall/ipblock/config | \
  awk '
   $0 ~ /DROP/ {
      system("/usr/local/bin/audio_block/blocksound_ip");
    }
   ')