#!/bin/sh

# Proof of concept snort plugin written by Edward Bjarte Fjellskål.

if [ "$1" = "config" ]; then
        echo 'graph_title Snort Avg KBytes per pkt'
        echo 'graph_args --base 1000 -l 0'
        echo 'graph_vlabel KBytes / pkt'
        echo 'graph_scale no'
        echo 'bytespkt.label KBytes/pkt'
        #echo 'bytespkt.warning 80'
        #echo 'bytespkt.critical 92'
        echo 'graph_category Snort'

        exit 0
fi

echo -n "bytespkt.value "
echo $( tail -n1 /your/path/to/snort.stats| awk -F, '{ print $6 }')
