grep -v ^# pcap_agent.conf | grep -v ^$
set DEBUG 1
set DAEMON 0
set SERVER_HOST 10.0.1.13
set SERVER_PORT 7736
set HOSTNAME metro
set NET_GROUP metro
set LOG_DIR /nsm/snort_data
set RAW_LOG_DIR ${LOG_DIR}/${HOSTNAME}/dailylogs
set TCPDUMP "/usr/sbin/tcpdump"
set VLAN 0
set TMP_DIR "/tmp"
set WATCH_DIR ${LOG_DIR}/${HOSTNAME}
set FILE_CHECK_IN_MSECS 300000
set DISK_CHECK_DELAY_IN_MSECS 1800000
set PING_DELAY 300000

[root@metro sguil]# tclsh /usr/local/sguil/sensor/pcap_agent.tcl -c /etc/sguil/pcap_agent-metro.conf -O
Connected to 10.0.1.13
Sending sguild (sock3) RegisterAgent pcap metro metro
Sending sguild (sock3) DiskReport /nsm/snort_data/metro 
Sending sguild (sock3) PING
Sensor Data Rcvd: AgentInfo metro pcap metro 5 0
Error: can't read "logFile": no such variable
can't read "logFile": no such variable
    while executing
"file stat $logFile fileStat"
    (procedure "CheckLastPcapFile" line 25)
    invoked from within
"CheckLastPcapFile 1"
    (procedure "AgentInfo" line 6)
    invoked from within
"AgentInfo [lindex $data 1] [lindex $data 2] [lindex $data 3] [lindex $data 4] "
    ("AgentInfo" arm line 1)
    invoked from within
"switch -exact -- $sguildCmd {

            PONG                  { if {$DEBUG} {puts "PONG received"} }
            PING                  { SendToSgui..."
    (procedure "SguildCmdRcvd" line 22)
    invoked from within
"SguildCmdRcvd sock3"

[root@metro sguil]# ls /nsm/snort_data/metro/dailylogs
2007-09-14  2007-10-22  2007-11-29  2008-01-06  2008-02-13  2008-03-22
2007-09-15  2007-10-23  2007-11-30  2008-01-07  2008-02-14  2008-03-23
2007-09-16  2007-10-24  2007-12-01  2008-01-08  2008-02-15  2008-03-24
2007-09-17  2007-10-25  2007-12-02  2008-01-09  2008-02-16  2008-03-25
2007-09-18  2007-10-26  2007-12-03  2008-01-10  2008-02-17  2008-03-26
2007-09-19  2007-10-27  2007-12-04  2008-01-11  2008-02-18  2008-03-27
2007-09-20  2007-10-28  2007-12-05  2008-01-12  2008-02-19  2008-03-28
2007-09-21  2007-10-29  2007-12-06  2008-01-13  2008-02-20  2008-03-29
2007-09-22  2007-10-30  2007-12-07  2008-01-14  2008-02-21  2008-03-30
2007-09-23  2007-10-31  2007-12-08  2008-01-15  2008-02-22  2008-03-31
2007-09-24  2007-11-01  2007-12-09  2008-01-16  2008-02-23  2008-04-01
2007-09-25  2007-11-02  2007-12-10  2008-01-17  2008-02-24  2008-04-02
2007-09-26  2007-11-03  2007-12-11  2008-01-18  2008-02-25  2008-04-03
2007-09-27  2007-11-04  2007-12-12  2008-01-19  2008-02-26  2008-04-04
2007-09-28  2007-11-05  2007-12-13  2008-01-20  2008-02-27  2008-04-05
2007-09-29  2007-11-06  2007-12-14  2008-01-21  2008-02-28  2008-04-06
2007-09-30  2007-11-07  2007-12-15  2008-01-22  2008-02-29  2008-04-07
2007-10-01  2007-11-08  2007-12-16  2008-01-23  2008-03-01  2008-04-08
2007-10-02  2007-11-09  2007-12-17  2008-01-24  2008-03-02  2008-04-09
2007-10-03  2007-11-10  2007-12-18  2008-01-25  2008-03-03  2008-04-10
2007-10-04  2007-11-11  2007-12-19  2008-01-26  2008-03-04  2008-04-11
2007-10-05  2007-11-12  2007-12-20  2008-01-27  2008-03-05  2008-04-12
2007-10-06  2007-11-13  2007-12-21  2008-01-28  2008-03-06  2008-04-13
2007-10-07  2007-11-14  2007-12-22  2008-01-29  2008-03-07  2008-04-14
2007-10-08  2007-11-15  2007-12-23  2008-01-30  2008-03-08  2008-04-15
2007-10-09  2007-11-16  2007-12-24  2008-01-31  2008-03-09  2008-04-16
2007-10-10  2007-11-17  2007-12-25  2008-02-01  2008-03-10  2008-04-17
2007-10-11  2007-11-18  2007-12-26  2008-02-02  2008-03-11  2008-04-18
2007-10-12  2007-11-19  2007-12-27  2008-02-03  2008-03-12  2008-04-19
2007-10-13  2007-11-20  2007-12-28  2008-02-04  2008-03-13  2008-04-20
2007-10-14  2007-11-21  2007-12-29  2008-02-05  2008-03-14  2008-04-21
2007-10-15  2007-11-22  2007-12-30  2008-02-06  2008-03-15  2008-04-22
2007-10-16  2007-11-23  2007-12-31  2008-02-07  2008-03-16  
2007-10-17  2007-11-24  2008-01-01  2008-02-08  2008-03-17
2007-10-18  2007-11-25  2008-01-02  2008-02-09  2008-03-18
2007-10-19  2007-11-26  2008-01-03  2008-02-10  2008-03-19
2007-10-20  2007-11-27  2008-01-04  2008-02-11  2008-03-20
2007-10-21  2007-11-28  2008-01-05  2008-02-12  2008-03-21