[Snort-users] Unable to do Port Mirroring with OpenWRT firmware on Buffalo WZR-HP-G300NH2 Router

Teo En Ming teo.en.ming at ...11827...
Sat Apr 5 17:34:43 EDT 2014


Both dd-wrt and OpenWRT don't work for me (in terms of port mirroring for
snort). I am very disappointed.

Teo En Ming


On Sun, Apr 6, 2014 at 5:07 AM, Bill Parker <wp02855 at ...11827...> wrote:

> I will need to research this, but if you have access to IRC (internet
> relay chat), on freenode network, there is a official OpenWRT channel,
> which you can get help on mirroring (which is what you're looking for).  I
> will continue to research this issue for you as well (I don't have a router
> which runs OpenWRT at the moment, otherwise I would look at this for you
> directly).
>
> Bill
>
>
> On Sat, Apr 5, 2014 at 12:41 PM, Teo En Ming <teo.en.ming at ...11827...>wrote:
>
>> Dear Bill Parker,
>>
>> Previously I mentioned that I have bricked my Buffalo WZR-HP-G300NH2
>> router after migrating from dd-wrt to OpenWRT firmware. I have since
>> de-bricked/recovered/re-flashed my Buffalo router after following
>> instructions from the following URL:
>>
>> http://g300nh.blogspot.sg/2010/06/firmware-flash-and-brick-recovery.html
>>
>> I have flashed my Buffalo WZR-HP-G300NH2 router with OpenWRT attitude
>> adjustment 12.09 firmware.
>>
>> I have also installed the iptables-mod-tee module using the following
>> commands:
>>
>> # opkg update
>>
>> # opkg list | grep -i tee
>>
>> # opkg install iptables-mod-tee
>>
>> However, I still cannot get port mirroring to work with Snort.
>>
>> Here is what happens:
>>
>> root at ...16772...:/lib/modules/3.3.8# iptables -t mangle -A PREROUTING -j TEE
>> --gateway 192.168.1.40
>> iptables: No chain/target/match by that name.
>> root at ...16772...:/lib/modules/3.3.8# iptables -t mangle -A POSTROUTING -j
>> TEE --gateway 192.168.1.40
>> iptables: No chain/target/match by that name.
>>
>>
>> Please advise.
>>
>> Thank you very much.
>>
>> Teo En Ming
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140406/28fe14c4/attachment.html>


More information about the Snort-users mailing list