Page 2 of 2
Re: using wireshark with Gargoyle
Posted: Sun Jan 14, 2018 3:42 pm
by Lantis
viewtopic.php?f=5&t=11432
This if you don’t want to upgrade
Re: using wireshark with Gargoyle
Posted: Sun Jan 14, 2018 10:29 pm
by Hercules
Improvement but:
Code: Select all
ERROR: Not enough space in destination root to install specified packages:
tcpdump, libpcap
Could this be because I am using adblock? Is it taking up all the space? If so could I just delete the adblock url list temporarily? Last time I ran out of space the device locked itself and I had to upgrade which wasn't a massive problem but I prefer that didn't happen again.
Code: Select all
root@Gargoyle:/etc# df
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 768 552 216 72% /
/dev/root 6144 6144 0 100% /rom
tmpfs 63040 644 62396 1% /tmp
/dev/mtdblock3 768 552 216 72% /overlay
overlayfs:/overlay 768 552 216 72% /
tmpfs 512 0 512 0% /dev
root@Gargoyle:/etc#
I can update to 1.10.x if that has tcpdump installed?
Re: using wireshark with Gargoyle
Posted: Sun Jan 14, 2018 10:57 pm
by Lantis
No it doesn’t have it included.
Check the size of each of those
gpkg info packagename
Then you’ll know how much to free up
Re: using wireshark with Gargoyle
Posted: Sun Jan 14, 2018 11:06 pm
by Hercules
Thanks Lantis. The combined installed size of both is 351453
Currently the adblock block.hosts file is 369407!
So unless there is something else somewhere that I can delete I am not sure I can install this and have adblock running as well?
Re: using wireshark with Gargoyle
Posted: Mon Jan 15, 2018 12:42 am
by Lantis
Doesn’t look like it.
You could add an external storage device?
Re: using wireshark with Gargoyle
Posted: Mon Jan 15, 2018 1:32 am
by Hercules
OK I did that and changed the plugin root. Refreshed. Uninstalled adblock. Reinstalled adblock. Rebooted. BUT...
Code: Select all
root@Gargoyle:~# df
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 768 456 312 59% /
/dev/root 6144 6144 0 100% /rom
tmpfs 63040 108 62932 0% /tmp
/dev/mtdblock3 768 456 312 59% /overlay
overlayfs:/overlay 768 456 312 59% /
tmpfs 512 0 512 0% /dev
/dev/sda1 3902400 1400 3901000 0% /tmp/usb_mount/7a94e0c6-01
root@Gargoyle:~#
I have no idea why the freespace only went up by 100k? Anything else I can try?
Re: using wireshark with Gargoyle
Posted: Mon Jan 15, 2018 2:21 am
by Hercules
OK I have now setup extroot and I can install tcpdump BUT all the plugins now report insufficient disk space and I can't install adblock. Is this a known bug?
EDIT: I have manually added Teffalump's original adblock script and all appears to be well but if I could have done this better then please let me know.
Re: using wireshark with Gargoyle
Posted: Mon Jan 15, 2018 8:25 am
by Hercules
OK for future readers I have this working. What you need to do is:
1. Follow the instructions here EXCEPT for the capturing section:
https://medium.com/openwrt-iot/lede-ope ... de3e020cbb
2. Install Wireshark on your Windows PC. Note the install path for the fourth step
3. Download and put somewhere easily accessible (like c:\temp) the command line program plink from here:
https://www.chiark.greenend.org.uk/~sgt ... atest.html
4. Open a command line window on your windows machine and change directory to where you put plink. Then modify this line and run it and wireshark will launch.
Code: Select all
plink.exe -ssh -pw yourGargoylePassword root@192.168.1.254 "tcpdump -i br-lan -U -s0 -w - host 192.168.1.168" | "F:\Program Files\Wireshark\Wireshark.exe" -k -i -
You need to change the above to reflect your Gargoyle password.
Change 192.168.1.254 to the ip address of your Gargoyle router.
Change 192.168.1.168 to the ip address of the device you want to monitor.
Change the path to Wireshark as necessary.
Re: using wireshark with Gargoyle
Posted: Mon Jan 22, 2018 12:40 am
by IanBlakeley
Hercules wrote:OK I have now setup extroot and I can install tcpdump BUT all the plugins now report insufficient disk space and I can't install adblock. Is this a known bug?
EDIT: I have manually added Teffalump's original adblock script and all appears to be well but if I could have done this better then please let me know.
Is there a possibility you ran into the same issue I did in which case
viewtopic.php?f=8&t=11375&p=47977#p47977 might help
Re: using wireshark with Gargoyle
Posted: Wed Jan 24, 2018 7:13 pm
by Hercules
Yep thanks Ian that fixed it!