using wireshark with Gargoyle

General discussion about Gargoyle, OpenWrt or anything else even remotely related to the project

Moderator: Moderators

Lantis
Moderator
Posts: 6920
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: using wireshark with Gargoyle

Post by Lantis »

viewtopic.php?f=5&t=11432

This if you don’t want to upgrade
https://lantisproject.com/downloads/gargoylebuilds for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

Improvement but:

Code: Select all

ERROR: Not enough space in destination root to install specified packages:
        tcpdump, libpcap
Could this be because I am using adblock? Is it taking up all the space? If so could I just delete the adblock url list temporarily? Last time I ran out of space the device locked itself and I had to upgrade which wasn't a massive problem but I prefer that didn't happen again.

Code: Select all

root@Gargoyle:/etc# df
Filesystem           1K-blocks      Used Available Use% Mounted on
rootfs                     768       552       216  72% /
/dev/root                 6144      6144         0 100% /rom
tmpfs                    63040       644     62396   1% /tmp
/dev/mtdblock3             768       552       216  72% /overlay
overlayfs:/overlay         768       552       216  72% /
tmpfs                      512         0       512   0% /dev
root@Gargoyle:/etc#
I can update to 1.10.x if that has tcpdump installed?

Lantis
Moderator
Posts: 6920
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: using wireshark with Gargoyle

Post by Lantis »

No it doesn’t have it included.
Check the size of each of those
gpkg info packagename

Then you’ll know how much to free up
https://lantisproject.com/downloads/gargoylebuilds for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

Thanks Lantis. The combined installed size of both is 351453

Currently the adblock block.hosts file is 369407!

So unless there is something else somewhere that I can delete I am not sure I can install this and have adblock running as well?

Lantis
Moderator
Posts: 6920
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: using wireshark with Gargoyle

Post by Lantis »

Doesn’t look like it.
You could add an external storage device?
https://lantisproject.com/downloads/gargoylebuilds for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

OK I did that and changed the plugin root. Refreshed. Uninstalled adblock. Reinstalled adblock. Rebooted. BUT...

Code: Select all

root@Gargoyle:~# df
Filesystem           1K-blocks      Used Available Use% Mounted on
rootfs                     768       456       312  59% /
/dev/root                 6144      6144         0 100% /rom
tmpfs                    63040       108     62932   0% /tmp
/dev/mtdblock3             768       456       312  59% /overlay
overlayfs:/overlay         768       456       312  59% /
tmpfs                      512         0       512   0% /dev
/dev/sda1              3902400      1400   3901000   0% /tmp/usb_mount/7a94e0c6-01
root@Gargoyle:~#
I have no idea why the freespace only went up by 100k? Anything else I can try?

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

OK I have now setup extroot and I can install tcpdump BUT all the plugins now report insufficient disk space and I can't install adblock. Is this a known bug?

EDIT: I have manually added Teffalump's original adblock script and all appears to be well but if I could have done this better then please let me know.

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

OK for future readers I have this working. What you need to do is:

1. Follow the instructions here EXCEPT for the capturing section: https://medium.com/openwrt-iot/lede-ope ... de3e020cbb

2. Install Wireshark on your Windows PC. Note the install path for the fourth step

3. Download and put somewhere easily accessible (like c:\temp) the command line program plink from here: https://www.chiark.greenend.org.uk/~sgt ... atest.html

4. Open a command line window on your windows machine and change directory to where you put plink. Then modify this line and run it and wireshark will launch.

Code: Select all

plink.exe -ssh -pw yourGargoylePassword root@192.168.1.254 "tcpdump -i br-lan -U -s0 -w - host 192.168.1.168" | "F:\Program Files\Wireshark\Wireshark.exe" -k -i -
You need to change the above to reflect your Gargoyle password.
Change 192.168.1.254 to the ip address of your Gargoyle router.
Change 192.168.1.168 to the ip address of the device you want to monitor.
Change the path to Wireshark as necessary.

IanBlakeley
Posts: 32
Joined: Mon Nov 27, 2017 6:10 am
Location: Penang, Malaysia
Contact:

Re: using wireshark with Gargoyle

Post by IanBlakeley »

Hercules wrote:OK I have now setup extroot and I can install tcpdump BUT all the plugins now report insufficient disk space and I can't install adblock. Is this a known bug?

EDIT: I have manually added Teffalump's original adblock script and all appears to be well but if I could have done this better then please let me know.
Is there a possibility you ran into the same issue I did in which case viewtopic.php?f=8&t=11375&p=47977#p47977 might help

Hercules
Posts: 23
Joined: Sun Sep 29, 2013 6:58 pm

Re: using wireshark with Gargoyle

Post by Hercules »

Yep thanks Ian that fixed it!

Post Reply