I am completely new to entware and I would like to run it on my Voxel Frimware Orbi. Is there a beginner guide on how to set this up? I tried reading Voxel’s readme file with no luck. I tried searching forums but it was a bit complex for me. If anyone can point me in the right direction, I would really appreciate it. Thanks!
Voxel
Part of the Furniture
There is QuickStart.txt instruction included into ZIP with firmware for RBR and RBS. IMO it is simplified as much as possible:
. . .
4. Entware.
You can use Entware prepared by me for R7500/R7800/R9000. It works fine with Orbi.
(1) Prepare new USB stick or disk with ext2 or ext3 or ext4 filesystem from telnet/ssh
console. Label it “optware”. ext4 is highly recommended for USB HDD. Example how
to create ext4 filesystem with label “optware”:
mkfs.ext4 -L optware /dev/sda1
or
mkfs.ext4 -L optware -O ^metadata_csum /dev/sda1
to provide compatibility for routers having kernel < 3.6, such as R7500/R7800.
(2) Unpack entware-cortexa15-3x-initial.tar at the root of your stick/disk:
cd /mnt/sda1
wget https://www.voxel-firmware.com/Downloads/Voxel/Entware/entware-cortex-a15-3x-initial-generic.tar.gz
tar xf entware-cortexa15-3x-initial.tar
(3) Run the command from telnet/ssh console:
nvram set nocloud=1
nvram commit
(4) Create the file /overlay/root/ .profile to set PATH for Entware:
------------------------------------------------------------------------
#!/bin/sh
export PATH=/opt/bin:/opt/sbin:/bin:/sbin:/usr/bin:/usr/sbin
------------------------------------------------------------------------
(5) Reboot the router/satellite. Check that “ls -l /opt/*” shows entware directories
or symlinks (bin, usr, share, var etc.)
. . .
After that you may install the package you want. List of packages is available from:
https://voxel-firmware.com/Downloads/Voxel/html/entware.html
Briefly how to use Entware:
https://github.com/Entware/Entware/wiki
[Edited]:
Found the place in instruction what I need to change because of upgraded version mkfs.ext4. In example. Should be:
. . .
(1) Prepare new USB stick or disk with ext2 or ext3 or ext4 filesystem from telnet/ssh
console. Label it “optware”. ext4 is highly recommended for USB HDD. Example how
to create ext4 filesystem with label “optware”:
mkfs.ext4 -L optware -O ^64bit /dev/sda1
or
mkfs.ext4 -L optware -O ^metadata_csum -O ^64bit /dev/sda1
to provide compatibility for routers having kernel < 3.6, such as R7500/R7800.
. . .
Voxel.
Last edited:
I have now thanks to @Voxel and @kamoj (for their great firmware) and a beginner book for Linux been able to test Suricata IDS/IPS.
I bluntly stole @rgnldo set up for the Asus guys. It seems to work pretty good I have allot more learning to do about Suricata to tell for sure how good it is working.
But I can see in the logs that it at least is giving me output on some of what is happening in the network.
www.snbforums.com
With my r9000 running with always updated Voxel and updated Kamoj, Wireguard, DNS-crypt defended with Aegis and now also Suricata I checked with netdata how the router seem to handle the extra load.
The router is besides the extra programs used to download and to watch plex and work with the daily activites of a household in Corona times.
CPU is steady around 7-12 percent and at a peak time 60 percent.
Ram is about 60 percent used and no heat spikes in the router that worry me. Wifi-speed dont seem to have taken any noticeably hit ether. It is to early to tell for me but it is possible I lost some percent in output.
If anyone else on the Netgear side will be playing around with Suricata it would be really fun to know how you set it up.
To fully trust the system is set up correctly it would be wonderful if if some of our Netgear experts here started to dig in this program.
Well just wanted to share some possibilities with Voxel/Kamojs firmware.
I bluntly stole @rgnldo set up for the Asus guys. It seems to work pretty good I have allot more learning to do about Suricata to tell for sure how good it is working.
But I can see in the logs that it at least is giving me output on some of what is happening in the network.
Suricata - Suricata - IDS on AsusWRT Merlin
Suricata is a free and open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects the network...
www.snbforums.com
With my r9000 running with always updated Voxel and updated Kamoj, Wireguard, DNS-crypt defended with Aegis and now also Suricata I checked with netdata how the router seem to handle the extra load.
The router is besides the extra programs used to download and to watch plex and work with the daily activites of a household in Corona times.
CPU is steady around 7-12 percent and at a peak time 60 percent.
Ram is about 60 percent used and no heat spikes in the router that worry me. Wifi-speed dont seem to have taken any noticeably hit ether. It is to early to tell for me but it is possible I lost some percent in output.
If anyone else on the Netgear side will be playing around with Suricata it would be really fun to know how you set it up.
To fully trust the system is set up correctly it would be wonderful if if some of our Netgear experts here started to dig in this program.
Well just wanted to share some possibilities with Voxel/Kamojs firmware.
Last edited:
Hello Voxel,
is there any reason why pyLoad is not included anymore?
Some time ago there was a pyLoad update and I tried to install it from https://github.com/pyload/pyload/releases on my R7800 but it (or I
) failed to install.
is there any reason why pyLoad is not included anymore?
Some time ago there was a pyLoad update and I tried to install it from https://github.com/pyload/pyload/releases on my R7800 but it (or I
) failed to install.I have humble question about the Suricata. I am now confident I have it up and running. Thanks so much Voxel and Kamoj for the opportunity to play around with this and make it possible.
But as always the grass is greener on the other side and suricata have a newer version. On the entware list its 4.1.8.1. The newest version is 5.0.3 and I want that one. Tried to install it myself but when I got to the installation of .config it didn't work out.
Is it possible to get that 5 version in the entware list as a ipk file for our netgear routers? If it is that would make my day.
suricata-ids.org
Edit: Suricata v5 config.log
But as always the grass is greener on the other side and suricata have a newer version. On the entware list its 4.1.8.1. The newest version is 5.0.3 and I want that one. Tried to install it myself but when I got to the installation of .config it didn't work out.
Is it possible to get that 5 version in the entware list as a ipk file for our netgear routers? If it is that would make my day.
Download - Suricata
suricata-ids.org
Edit: Suricata v5 config.log
Code:
$ ./configure
## --------- ##
## Platform. ##
## --------- ##
hostname = R9000
uname -m = armv7l
uname -r = 3.10.20-al-5.0-ga_na
uname -s = Linux
uname -v = #1 SMP Fri Jul 24 08:05:54 UTC 2020
/usr/bin/uname -p = unknown
/bin/uname -X = unknown
/bin/arch = unknown
/usr/bin/arch -k = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo = unknown
/bin/machine = unknown
/usr/bin/oslevel = unknown
/bin/universe = unknown
PATH: /bin
PATH: /sbin
PATH: /usr/bin
PATH: /usr/sbin
## ----------- ##
## Core tests. ##
## ----------- ##
configure:2764: checking whether make supports nested variables
configure:2781: result: no
configure:2841: checking for a BSD-compatible install
configure:2909: result: ./install-sh -c
configure:2920: checking whether build environment is sane
configure:2975: result: yes
configure:3126: checking for a thread-safe mkdir -p
configure:3165: result: ./install-sh -c -d
configure:3172: checking for gawk
configure:3202: result: no
configure:3172: checking for mawk
configure:3202: result: no
configure:3172: checking for nawk
configure:3202: result: no
configure:3172: checking for awk
configure:3188: found /usr/bin/awk
configure:3199: result: awk
configure:3210: checking whether make sets $(MAKE)
configure:3236: result: no
configure:3328: checking whether UID '0' is supported by ustar format
configure:3331: result: yes
configure:3338: checking whether GID '0' is supported by ustar format
configure:3341: result: yes
configure:3349: checking how to create a ustar tar archive
configure:3360: tar --version
tar (GNU tar) 1.32
Copyright (C) 2019 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Written by John Gilmore and Jay Fenlason.
configure:3363: $? = 0
configure:3403: tardir=conftest.dir && eval tar --format=ustar -chf - "$tardir" >conftest.tar
configure:3406: $? = 0
configure:3410: tar -xf - <conftest.tar
configure:3413: $? = 0
configure:3415: cat conftest.dir/file
GrepMe
configure:3418: $? = 0
configure:3431: result: gnutar
configure:3500: checking for style of include used by make
configure:3528: result: none
configure:3599: checking for gcc
configure:3629: result: no
configure:3692: checking for cc
configure:3739: result: no
configure:3795: checking for cl.exe
configure:3825: result: no
configure:3849: error: in `/tmp/mnt/sdc1/suricata-5.0.3':
configure:3852: error: no acceptable C compiler found in $PATH
See `config.log' for more details
## ---------------- ##
## Cache variables. ##
## ---------------- ##
ac_cv_env_CC_set=''
ac_cv_env_CC_value=''
ac_cv_env_CFLAGS_set=''
ac_cv_env_CFLAGS_value=''
ac_cv_env_CPPFLAGS_set=''
ac_cv_env_CPPFLAGS_value=''
ac_cv_env_CPP_set=''
ac_cv_env_CPP_value=''
ac_cv_env_LDFLAGS_set=''
ac_cv_env_LDFLAGS_value=''
ac_cv_env_LIBHTPDEVVERSION_CFLAGS_set=''
ac_cv_env_LIBHTPDEVVERSION_CFLAGS_value=''
ac_cv_env_LIBHTPDEVVERSION_LIBS_set=''
ac_cv_env_LIBHTPDEVVERSION_LIBS_value=''
ac_cv_env_LIBHTPMINVERSION_CFLAGS_set=''
ac_cv_env_LIBHTPMINVERSION_CFLAGS_value=''
ac_cv_env_LIBHTPMINVERSION_LIBS_set=''
ac_cv_env_LIBHTPMINVERSION_LIBS_value=''
ac_cv_env_LIBPCREVERSION_CFLAGS_set=''
ac_cv_env_LIBPCREVERSION_CFLAGS_value=''
ac_cv_env_LIBPCREVERSION_LIBS_set=''
ac_cv_env_LIBPCREVERSION_LIBS_value=''
ac_cv_env_LIBS_set=''
ac_cv_env_LIBS_value=''
ac_cv_env_LT_SYS_LIBRARY_PATH_set=''
ac_cv_env_LT_SYS_LIBRARY_PATH_value=''
ac_cv_env_LUAJIT_CFLAGS_set=''
ac_cv_env_LUAJIT_CFLAGS_value=''
ac_cv_env_LUAJIT_LIBS_set=''
ac_cv_env_LUAJIT_LIBS_value=''
ac_cv_env_LUA_CFLAGS_set=''
ac_cv_env_LUA_CFLAGS_value=''
ac_cv_env_LUA_LIBS_set=''
ac_cv_env_LUA_LIBS_value=''
ac_cv_env_PCAP_CFLAGS_set=''
ac_cv_env_PCAP_CFLAGS_value=''
ac_cv_env_PCAP_LIBS_set=''
ac_cv_env_PCAP_LIBS_value=''
ac_cv_env_PKG_CONFIG_LIBDIR_set=''
ac_cv_env_PKG_CONFIG_LIBDIR_value=''
ac_cv_env_PKG_CONFIG_PATH_set=''
ac_cv_env_PKG_CONFIG_PATH_value=''
ac_cv_env_PKG_CONFIG_set=''
ac_cv_env_PKG_CONFIG_value=''
ac_cv_env_build_alias_set=''
ac_cv_env_build_alias_value=''
ac_cv_env_host_alias_set=''
ac_cv_env_host_alias_value=''
ac_cv_env_libhs_CFLAGS_set=''
ac_cv_env_libhs_CFLAGS_value=''
ac_cv_env_libhs_LIBS_set=''
ac_cv_env_libhs_LIBS_value=''
ac_cv_env_libhtp_CFLAGS_set=''
ac_cv_env_libhtp_CFLAGS_value=''
ac_cv_env_libhtp_LIBS_set=''
ac_cv_env_libhtp_LIBS_value=''
ac_cv_env_libnetfilter_queue_CFLAGS_set=''
ac_cv_env_libnetfilter_queue_CFLAGS_value=''
ac_cv_env_libnetfilter_queue_LIBS_set=''
ac_cv_env_libnetfilter_queue_LIBS_value=''
ac_cv_env_libnspr_CFLAGS_set=''
ac_cv_env_libnspr_CFLAGS_value=''
ac_cv_env_libnspr_LIBS_set=''
ac_cv_env_libnspr_LIBS_value=''
ac_cv_env_libnss_CFLAGS_set=''
ac_cv_env_libnss_CFLAGS_value=''
ac_cv_env_libnss_LIBS_set=''
ac_cv_env_libnss_LIBS_value=''
ac_cv_env_target_alias_set=''
ac_cv_env_target_alias_value=''
ac_cv_prog_AWK='awk'
ac_cv_prog_make_make_set='no'
am_cv_make_support_nested_variables='no'
am_cv_prog_tar_ustar='gnutar'
Last edited:
Code:
## ----------------- ##
## Output variables. ##
## ----------------- ##
ACLOCAL='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing aclocal-1.15'
AMDEPBACKSLASH='\'
AMDEP_FALSE='#'
AMDEP_TRUE=''
AMTAR='$${TAR-tar}'
AM_BACKSLASH='\'
AM_DEFAULT_V='0'
AM_DEFAULT_VERBOSITY='0'
AM_V='0'
AR=''
AUTOCONF='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing autoconf'
AUTOHEADER='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing autoheader'
AUTOMAKE='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing automake-1.15'
AWK='awk'
BUILD_EBPF_FALSE=''
BUILD_EBPF_TRUE=''
BUILD_UNITTESTS_FALSE=''
BUILD_UNITTESTS_TRUE=''
CARGO=''
CARGO_HOME=''
CC=''
CCDEPMODE=''
CFLAGS=''
CLANG=''
CLANG_CFLAGS=''
CONFIGURE_DATAROOTDIR=''
CONFIGURE_LOCALSTATEDIR=''
CONFIGURE_PREFIX=''
CONFIGURE_SYSCONDIR=''
CPP=''
CPPFLAGS=''
CYGPATH_W='echo'
DEBUG_FALSE=''
DEBUG_TRUE=''
DEFS=''
DEPDIR='.deps'
DLLTOOL=''
DSYMUTIL=''
DUMPBIN=''
ECHO_C=''
ECHO_N='-n'
ECHO_T=''
EGREP=''
EXEEXT=''
FGREP=''
GCC_CFLAGS=''
GREP=''
HAVE_CARGO_VENDOR_FALSE=''
HAVE_CARGO_VENDOR_TRUE=''
HAVE_COCCINELLE_CONFIG=''
HAVE_COCCINELLE_FALSE=''
HAVE_COCCINELLE_TRUE=''
HAVE_CURL=''
HAVE_CYGPATH=''
HAVE_CYGPATH_FALSE=''
HAVE_CYGPATH_TRUE=''
HAVE_FETCH_COMMAND_FALSE=''
HAVE_FETCH_COMMAND_TRUE=''
HAVE_GETCONF_CMD=''
HAVE_GIT_CMD=''
HAVE_LUA_FALSE=''
HAVE_LUA_TRUE=''
HAVE_PCAP_CONFIG=''
HAVE_PDFLATEX=''
HAVE_PDFLATEX_FALSE=''
HAVE_PDFLATEX_TRUE=''
HAVE_PKG_CONFIG=''
HAVE_PYTHON=''
HAVE_PYTHON_DISTUTILS_FALSE=''
HAVE_PYTHON_DISTUTILS_TRUE=''
HAVE_PYTHON_FALSE=''
HAVE_PYTHON_TRUE=''
HAVE_PYTHON_YAML_FALSE=''
HAVE_PYTHON_YAML_TRUE=''
HAVE_RUST_FALSE=''
HAVE_RUST_TRUE=''
HAVE_RUST_VENDOR_FALSE=''
HAVE_RUST_VENDOR_TRUE=''
HAVE_SPHINXBUILD=''
HAVE_SPHINXBUILD_FALSE=''
HAVE_SPHINXBUILD_TRUE=''
HAVE_SURICATA_MAN_FALSE=''
HAVE_SURICATA_MAN_TRUE=''
HAVE_WGET=''
HAVE_WGET_COMMAND_FALSE=''
HAVE_WGET_COMMAND_TRUE=''
HTP_DIR=''
HTP_LDADD=''
INSTALL_DATA='${INSTALL} -m 644'
INSTALL_PROGRAM='${INSTALL}'
INSTALL_SCRIPT='${INSTALL}'
INSTALL_STRIP_PROGRAM='$(install_sh) -c -s'
INSTALL_SURICATA_UPDATE_FALSE=''
INSTALL_SURICATA_UPDATE_TRUE=''
LD=''
LDFLAGS=''
LIBHTPDEVVERSION_CFLAGS=''
LIBHTPDEVVERSION_LIBS=''
LIBHTPMINVERSION_CFLAGS=''
LIBHTPMINVERSION_LIBS=''
LIBOBJS=''
LIBPCREVERSION_CFLAGS=''
LIBPCREVERSION_LIBS=''
LIBPRELUDE_CFLAGS=''
LIBPRELUDE_CONFIG=''
LIBPRELUDE_CONFIG_PREFIX=''
LIBPRELUDE_LDFLAGS=''
LIBPRELUDE_LIBS=''
LIBPRELUDE_PREFIX=''
LIBPRELUDE_PTHREAD_CFLAGS=''
LIBS=''
LIBTOOL=''
LIPO=''
LLC=''
LN_S=''
LTLIBOBJS=''
LT_SYS_LIBRARY_PATH=''
LUAJIT_CFLAGS=''
LUAJIT_LIBS=''
LUA_CFLAGS=''
LUA_INT8=''
LUA_LIBS=''
MAKEINFO='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing makeinfo'
MANIFEST_TOOL=''
MKDIR_P='./install-sh -c -d'
NM=''
NMEDIT=''
OBJDUMP=''
OBJEXT=''
OPTIMIZATION_CFLAGS=''
OTOOL64=''
OTOOL=''
PACKAGE='suricata'
PACKAGE_BUGREPORT=''
PACKAGE_NAME='suricata'
PACKAGE_STRING='suricata 5.0.3'
PACKAGE_TARNAME='suricata'
PACKAGE_URL=''
PACKAGE_VERSION='5.0.3'
PATH_SEPARATOR=':'
PCAP_CFLAGS=''
PCAP_LIBS=''
PKG_CONFIG=''
PKG_CONFIG_LIBDIR=''
PKG_CONFIG_PATH=''
RANLIB=''
RUSTC=''
RUSTUP_HOME_PATH=''
RUST_CROSS_COMPILE_FALSE=''
RUST_CROSS_COMPILE_TRUE=''
RUST_FEATURES=''
RUST_LDADD=''
RUST_SURICATA_LIB=''
SECCFLAGS=''
SECLDFLAGS=''
SED=''
SET_MAKE='MAKE=make'
SHELL='/bin/ash'
STRIP=''
SURICATA_UPDATE_DIR=''
VERSION='5.0.3'
ac_ct_AR=''
ac_ct_CC=''
ac_ct_DUMPBIN=''
am__EXEEXT_FALSE=''
am__EXEEXT_TRUE=''
am__fastdepCC_FALSE=''
am__fastdepCC_TRUE=''
am__include='#'
am__isrc=''
am__leading_dot='.'
am__nodep='_no'
am__quote=''
am__tar='tar --format=ustar -chf - "$$tardir"'
am__untar='tar -xf -'
bindir='${exec_prefix}/bin'
build=''
build_alias=''
build_cpu=''
build_os=''
build_vendor=''
datadir='${datarootdir}'
datarootdir='${prefix}/share'
docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
dvidir='${docdir}'
e_datarulesdir=''
e_defaultruledir=''
e_enable_evelog=''
e_localstatedir=''
e_logcertsdir=''
e_logdir=''
e_logfilesdir=''
e_magic_file=''
e_magic_file_comment=''
e_rundir=''
e_rustdir=''
e_sysconfdir=''
exec_prefix='NONE'
have_cargo_vendor_bin=''
have_rustup=''
host=''
host_alias=''
host_cpu=''
host_os=''
host_vendor=''
htmldir='${docdir}'
includedir='${prefix}/include'
infodir='${datarootdir}/info'
install_sh='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/install-sh'
libdir='${exec_prefix}/lib'
libexecdir='${exec_prefix}/libexec'
libhs_CFLAGS=''
libhs_LIBS=''
libhtp_CFLAGS=''
libhtp_LIBS=''
libnetfilter_queue_CFLAGS=''
libnetfilter_queue_LIBS=''
libnspr_CFLAGS=''
libnspr_LIBS=''
libnss_CFLAGS=''
libnss_LIBS=''
localedir='${datarootdir}/locale'
localstatedir='${prefix}/var'
mandir='${datarootdir}/man'
mkdir_p='$(MKDIR_P)'
oldincludedir='/usr/include'
pdfdir='${docdir}'
prefix='NONE'
program_transform_name='s,x,x,'
psdir='${docdir}'
runstatedir='${localstatedir}/run'
rust_vendor_comment=''
rustup_home=''
sbindir='${exec_prefix}/sbin'
sharedstatedir='${prefix}/com'
subdirs=''
sysconfdir='${prefix}/etc'
target_alias=''
## ----------- ##
## confdefs.h. ##
## ----------- ##
/* confdefs.h */
#define PACKAGE_NAME "suricata"
#define PACKAGE_TARNAME "suricata"
#define PACKAGE_VERSION "5.0.3"
#define PACKAGE_STRING "suricata 5.0.3"
#define PACKAGE_BUGREPORT ""
#define PACKAGE_URL ""
#define PACKAGE "suricata"
#define VERSION "5.0.3"
configure: exit 1Dear Voxel,
Thanks for Entware upgrade!
I am using following unbound packages:
unbound-checkconf - 1.10.1-1
unbound-daemon - 1.10.1-1
unbound-host - 1.10.1-1
When running:
/opt/bin/opkg update
/opt/bin/opkg upgrade
getting following error:
Upgrading unbound-daemon on root from 1.9.6-1 to 1.10.1-1...
Downloading http://www.voxel-firmware.com/Downl...xel/unbound-daemon_1.10.1-1_cortex-a15-3x.ipk
Installing libunbound-light (1.10.1-1) to root...
Downloading http://www.voxel-firmware.com/Downl...l/libunbound-light_1.10.1-1_cortex-a15-3x.ipk
Collected errors:
* check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
But that file is already provided by package * libunbound
I am ignoring it. Messages are present even already performed upgrade.
ll /opt/lib/libun*
-rwxr-xr-x 1 root root 847180 Jan 21 2020 /opt/lib/libunbound.so.8.1.6
lrwxrwxrwx 1 root root 19 Jul 26 07:40 /opt/lib/libunbound.so.8 -> libunbound.so.8.1.6
Also experimenting with suricata. Would like to experiment with the most recent version too.
Thanks again!
Thanks for Entware upgrade!
I am using following unbound packages:
unbound-checkconf - 1.10.1-1
unbound-daemon - 1.10.1-1
unbound-host - 1.10.1-1
When running:
/opt/bin/opkg update
/opt/bin/opkg upgrade
getting following error:
Upgrading unbound-daemon on root from 1.9.6-1 to 1.10.1-1...
Downloading http://www.voxel-firmware.com/Downl...xel/unbound-daemon_1.10.1-1_cortex-a15-3x.ipk
Installing libunbound-light (1.10.1-1) to root...
Downloading http://www.voxel-firmware.com/Downl...l/libunbound-light_1.10.1-1_cortex-a15-3x.ipk
Collected errors:
* check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
But that file is already provided by package * libunbound
I am ignoring it. Messages are present even already performed upgrade.
ll /opt/lib/libun*
-rwxr-xr-x 1 root root 847180 Jan 21 2020 /opt/lib/libunbound.so.8.1.6
lrwxrwxrwx 1 root root 19 Jul 26 07:40 /opt/lib/libunbound.so.8 -> libunbound.so.8.1.6
Also experimenting with suricata. Would like to experiment with the most recent version too.
Thanks again!
kamoj
Very Senior Member
What is your - now long! - experience of Suricata?
Seems like Suricata 5 will not come to Entware:
https://github.com/Entware/Entware/issues/471
Seems like Suricata 5 will not come to Entware:
https://github.com/Entware/Entware/issues/471
I have humble question about the Suricata. I am now confident I have it up and running. Thanks so much Voxel and Kamoj for the opportunity to play around with this and make it possible.
But as always the grass is greener on the other side and suricata have a newer version. On the entware list its 4.1.8.1. The newest version is 5.0.3 and I want that one. Tried to install it myself but when I got to the installation of .config it didn't work out.
Is it possible to get that 5 version in the entware list as a ipk file for our netgear routers? If it is that would make my day.
Download - Suricata
Edit: Suricata v5 config.log
I believe it on my router with the setup I have as I took from @rgnldo, it works like a IDS, it log when you mess up the security but maybe dont react and stop it. (maybe it does but I dont know) I am very happy with IDS log. I think you need a computer if you want suricata do much more. @kamoj it's worth playing with if its why you ask
.
rgnldo
Very Senior Member
Version 4 will still be maintained.
Voxel
Part of the Furniture
Sorry, it is not my action. Decision of Entware team:Hello Voxel,
is there any reason why pyLoad is not included anymore?
Some time ago there was a pyLoad update and I tried to install it from https://github.com/pyload/pyload/releases on my R7800 but it (or I
pyload: removed as obsolete, still not python3 ready · Entware/entware-oldpackages-ports@e6c8afc
Adopted from old OpenWrt feeds. Contribute to Entware/entware-oldpackages-ports development by creating an account on GitHub.
github.com
pyload: removed as obsolete, still not python3 ready
Voxel.
Voxel
Part of the Furniture
@Voxel you are great
I think I can say pretty confident now the cost of suricata on the router. Its a demanding software even as IDS, (security monitoring). The cost of my internet speed is around 20 percent +. It also eats memory, but that memory need to used for something anyway.
I think it's worth it but dont want to make it sunshine tale ether, it is a cost for what you get. In daily life I do not notice any drawbacks in how the router perform. It's only when I want to check numbers I notice it.
But I am pretty convinced that Suricata will not be a IPS on the router. Maybe if some genius optimize it, but I will need to be proven wrong on that point
Edit: I like the combo with IDS that keep you paranoid and our own Aegis that act and block the sh´t.
I think I can say pretty confident now the cost of suricata on the router. Its a demanding software even as IDS, (security monitoring). The cost of my internet speed is around 20 percent +. It also eats memory, but that memory need to used for something anyway.
I think it's worth it but dont want to make it sunshine tale ether, it is a cost for what you get. In daily life I do not notice any drawbacks in how the router perform. It's only when I want to check numbers I notice it.
But I am pretty convinced that Suricata will not be a IPS on the router. Maybe if some genius optimize it, but I will need to be proven wrong on that point
Edit: I like the combo with IDS that keep you paranoid and our own Aegis that act and block the sh´t.
Last edited:
Similar threads
Latest threads
-
-
Netgear EAX20 BTRM messages
- Started by makak
- Replies: 0
-
-
-
Support SNBForums w/ Amazon
If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!