#! /bin/sh

SNORTALERT="/var/log/snort/alert"
SAVEDALERT="/root/alert"
SNORTLOGDIR="/var/log/snort"
MAILADDRESS="kaball@libero.it"

mv $SNORTALERT $SAVEDALERT
rm -r $SNORTLOGDIR/*
size=`ls -la $SAVEDALERT | awk {'print $5'}`
if test $size -ge 10000000
  then
    echo "SUBJECT: alert pieno" > mestemp
    echo "Il file di log di snort del server supera i 10 Mb" >> mestemp
    echo . >> mestemp
    sendmail -v $MAILADDRESS < `pwd`/mestemp
    rm mestemp
fi