1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Starting WallWatcher

Discussion in 'General Discussion' started by reno1, Apr 5, 2007.

  1. reno1

    reno1 LI Guru Member

    Hello,

    I stumbled upon this site and have flashed my router with HyperWRT. Everything works great. However, when I stop Wallwatcher and restart it, I get no log activity. I was playing around and discovered that when I went into the Admin pages to the LOG pages, it says ENABLED.

    Well, if I hit it APPLY, the log entries start flowing! Every time, no ifs ands or buts. Is there something I have to do to enable the router to start cutting log records? It seems odd that I would need to do this. Shouldn't it be doing it all the time? Is the problem Wallwatcher maybe? I've done searches but couldn't find any info on this particular problem.

    Thanks!

    RDM
     
  2. heidnerd

    heidnerd LI Guru Member

    Which version of wallwatcher?

    Is SNMP and/or syslogging enabled on your router?

    Have you told wallwatcher to discover and to identify the router type?

    Because you changed firmware away from the standard linksys firmware -- you may need to tell (or let) wallwatcher use a different method to extract the logfiles.
     
  3. Disman_ca

    Disman_ca Super Moderator Staff Member Member

    Also make sure any firewall on your workstation is allowing the traffic through .
     
  4. reno1

    reno1 LI Guru Member

    Hey guys! Thanks for the speedy replies! I'm using WW Ver 3.3.12. I used those two scripts floating around. One for the STARTUP and one for the Firewall.

    The workstation I log to is XP and has no firewall on it.

    Just did it now. Restarted..nothing..hit APPLY under LOGS/ENABLED and bam...starts flowing. I have the Linksys HYPERWRT selected under ROUTERS. Something's gotta be missing that the ENABLE does and starts it logging.

    When I hit ENABLE here's the messages that come out:

    (Starting)
    2007/04/06 14:24:04.61 M <46>syslogd*started:*busybox*v0.60.0*(2005.02.05-17:32+0000)*
    2007/04/06 14:24:04.69 M <30>klogd:*vlan0:*dev_set_promiscuity(master,*-1)*
    2007/04/06 14:24:04.69 M <30>klogd:*vlan0:*add*XX:XX:XX:XX:XX:XX*mcast*address*to*master*interface*
    2007/04/06 14:24:04.70 M <30>klogd:*vlan0:*dev_set_promiscuity(master,*1)*
    2007/04/06 14:24:04.70 M <30>klogd:*device*vlan0*entered*promiscuous*mode*
    2007/04/06 14:24:04.70 M <30>klogd:*device*eth1*entered*promiscuous*mode*
    2007/04/06 14:24:04.70 M <30>klogd:*br0:*port*2(eth1)*entering*learning*state*
    2007/04/06 14:24:04.72 M <30>klogd:*br0:*port*1(vlan0)*entering*learning*state*
    2007/04/06 14:24:04.72 M <30>klogd:*br0:*port*2(eth1)*entering*forwarding*state*
    2007/04/06 14:24:04.73 M <30>klogd:*br0:*topology*change*detected,*propagating*
    2007/04/06 14:24:04.73 M <30>klogd:*br0:*port*1(vlan0)*entering*forwarding*state*
    2007/04/06 14:24:04.73 M <30>klogd:*br0:*topology*change*detected,*propagating*
    2007/04/06 14:24:04.73 M <0>klogd:*flag=[get_eou_key_index]*offset=[0]*string=[ull>]*
    2007/04/06 14:24:04.73 M <28>klogd:*eou_key_init()*
    2007/04/06 14:24:04.73 M <28>klogd:*location*=*[0]*
    2007/04/06 14:24:04.73 M <28>klogd:*available*eou*key*index*is*0*
    2007/04/06 14:24:04.73 M <28>klogd:*exit*
    2007/04/06 14:24:04.73 M <28>klogd:*vlan1:*setting*mac*address*to**XX*XX*XX*XX*XX*f8.*
    2007/04/06 14:24:04.73 M <30>klogd:*vlan1:*dev_set_promiscuity(master,*-1)*
    2007/04/06 14:24:04.75 M <30>klogd:*vlan1:*dev_set_allmulti(master,*-1)*
    2007/04/06 14:24:04.75 M <30>klogd:*vlan1*add*XX:XX:XX:XX:XX:XX*mcast*address*to*master*interface*
    2007/04/06 14:24:04.75 M <30>klogd:*vlan1:*dev_set_promiscuity(master,*1)*
    2007/04/06 14:24:04.75 M <30>klogd:*device*vlan1*entered*promiscuous*mode*
    2007/04/06 14:24:04.75 M <30>klogd:*vlan1:*dev_set_allmulti(master,*1)*
    2007/04/06 14:24:04.75 M <30>klogd:*device*br0*entered*promiscuous*mode*
    2007/04/06 14:24:04.77 M <30>klogd:*vlan1:*dev_set_allmulti(master,*1)*
    2007/04/06 14:24:04.77 M <30>klogd:*vlan1:*add*XX:XX:XX:XX:XX:XX*mcast*address*to*master*interface*
    2007/04/06 14:24:06.06 M <24>klogd:*klogd*started:*busybox*v0.60.0*(2005.02.05-17:32+0000)*

    Thanks again guys!
     
  5. Disman_ca

    Disman_ca Super Moderator Staff Member Member

    So what are your logging options set to? If you want to see as much as possible from the router you will have to set the log level to high and also turn on all options (dropped, rejected, accepted)
     

Share This Page