What's new

Entware Entware

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

I am completely new to entware and I would like to run it on my Voxel Frimware Orbi. Is there a beginner guide on how to set this up? I tried reading Voxel’s readme file with no luck. I tried searching forums but it was a bit complex for me. If anyone can point me in the right direction, I would really appreciate it. Thanks!
 
I am completely new to entware and I would like to run it on my Voxel Frimware Orbi. Is there a beginner guide on how to set this up? I tried reading Voxel’s readme file with no luck. I tried searching forums but it was a bit complex for me. If anyone can point me in the right direction, I would really appreciate it. Thanks!

There is QuickStart.txt instruction included into ZIP with firmware for RBR and RBS. IMO it is simplified as much as possible:

. . .
4. Entware.

You can use Entware prepared by me for R7500/R7800/R9000. It works fine with Orbi.

(1) Prepare new USB stick or disk with ext2 or ext3 or ext4 filesystem from telnet/ssh
console. Label it “optware”. ext4 is highly recommended for USB HDD. Example how
to create ext4 filesystem with label “optware”:

mkfs.ext4 -L optware /dev/sda1

or

mkfs.ext4 -L optware -O ^metadata_csum /dev/sda1

to provide compatibility for routers having kernel < 3.6, such as R7500/R7800.

(2) Unpack entware-cortexa15-3x-initial.tar at the root of your stick/disk:

cd /mnt/sda1
wget https://www.voxel-firmware.com/Downloads/Voxel/Entware/entware-cortex-a15-3x-initial-generic.tar.gz
tar xf entware-cortexa15-3x-initial.tar

(3) Run the command from telnet/ssh console:

nvram set nocloud=1
nvram commit

(4) Create the file /overlay/root/ .profile to set PATH for Entware:
------------------------------------------------------------------------
#!/bin/sh

export PATH=/opt/bin:/opt/sbin:/bin:/sbin:/usr/bin:/usr/sbin
------------------------------------------------------------------------

(5) Reboot the router/satellite. Check that “ls -l /opt/*” shows entware directories
or symlinks (bin, usr, share, var etc.)


. . .


After that you may install the package you want. List of packages is available from:

https://voxel-firmware.com/Downloads/Voxel/html/entware.html

Briefly how to use Entware:

https://github.com/Entware/Entware/wiki

[Edited]:

Found the place in instruction what I need to change because of upgraded version mkfs.ext4. In example. Should be:

. . .
(1) Prepare new USB stick or disk with ext2 or ext3 or ext4 filesystem from telnet/ssh
console. Label it “optware”. ext4 is highly recommended for USB HDD. Example how
to create ext4 filesystem with label “optware”:

mkfs.ext4 -L optware -O ^64bit /dev/sda1

or

mkfs.ext4 -L optware -O ^metadata_csum -O ^64bit /dev/sda1

to provide compatibility for routers having kernel < 3.6, such as R7500/R7800.

. . .


Voxel.
 
Last edited:
I have now thanks to @Voxel and @kamoj (for their great firmware) and a beginner book for Linux been able to test Suricata IDS/IPS.

I bluntly stole @rgnldo set up for the Asus guys. It seems to work pretty good I have allot more learning to do about Suricata to tell for sure how good it is working.
But I can see in the logs that it at least is giving me output on some of what is happening in the network.

With my r9000 running with always updated Voxel and updated Kamoj, Wireguard, DNS-crypt defended with Aegis and now also Suricata I checked with netdata how the router seem to handle the extra load.

The router is besides the extra programs used to download and to watch plex and work with the daily activites of a household in Corona times.
CPU is steady around 7-12 percent and at a peak time 60 percent.
Ram is about 60 percent used and no heat spikes in the router that worry me. Wifi-speed dont seem to have taken any noticeably hit ether. It is to early to tell for me but it is possible I lost some percent in output.

If anyone else on the Netgear side will be playing around with Suricata it would be really fun to know how you set it up.
To fully trust the system is set up correctly it would be wonderful if if some of our Netgear experts here started to dig in this program.

Well just wanted to share some possibilities with Voxel/Kamojs firmware.
 
Last edited:
I have humble question about the Suricata. I am now confident I have it up and running. Thanks so much Voxel and Kamoj for the opportunity to play around with this and make it possible.

But as always the grass is greener on the other side and suricata have a newer version. On the entware list its 4.1.8.1. The newest version is 5.0.3 and I want that one. Tried to install it myself but when I got to the installation of .config it didn't work out.

Is it possible to get that 5 version in the entware list as a ipk file for our netgear routers? If it is that would make my day.


Edit: Suricata v5 config.log

Code:
 $ ./configure

## --------- ##
## Platform. ##
## --------- ##

hostname = R9000
uname -m = armv7l
uname -r = 3.10.20-al-5.0-ga_na
uname -s = Linux
uname -v = #1 SMP Fri Jul 24 08:05:54 UTC 2020

/usr/bin/uname -p = unknown
/bin/uname -X     = unknown

/bin/arch              = unknown
/usr/bin/arch -k       = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo      = unknown
/bin/machine           = unknown
/usr/bin/oslevel       = unknown
/bin/universe          = unknown

PATH: /bin
PATH: /sbin
PATH: /usr/bin
PATH: /usr/sbin


## ----------- ##
## Core tests. ##
## ----------- ##

configure:2764: checking whether make supports nested variables
configure:2781: result: no
configure:2841: checking for a BSD-compatible install
configure:2909: result: ./install-sh -c
configure:2920: checking whether build environment is sane
configure:2975: result: yes
configure:3126: checking for a thread-safe mkdir -p
configure:3165: result: ./install-sh -c -d
configure:3172: checking for gawk
configure:3202: result: no
configure:3172: checking for mawk
configure:3202: result: no
configure:3172: checking for nawk
configure:3202: result: no
configure:3172: checking for awk
configure:3188: found /usr/bin/awk
configure:3199: result: awk
configure:3210: checking whether make sets $(MAKE)
configure:3236: result: no
configure:3328: checking whether UID '0' is supported by ustar format
configure:3331: result: yes
configure:3338: checking whether GID '0' is supported by ustar format
configure:3341: result: yes
configure:3349: checking how to create a ustar tar archive
configure:3360: tar --version
tar (GNU tar) 1.32
Copyright (C) 2019 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by John Gilmore and Jay Fenlason.
configure:3363: $? = 0
configure:3403: tardir=conftest.dir && eval tar --format=ustar -chf - "$tardir" >conftest.tar
configure:3406: $? = 0
configure:3410: tar -xf - <conftest.tar
configure:3413: $? = 0
configure:3415: cat conftest.dir/file
GrepMe
configure:3418: $? = 0
configure:3431: result: gnutar
configure:3500: checking for style of include used by make
configure:3528: result: none
configure:3599: checking for gcc
configure:3629: result: no
configure:3692: checking for cc
configure:3739: result: no
configure:3795: checking for cl.exe
configure:3825: result: no
configure:3849: error: in `/tmp/mnt/sdc1/suricata-5.0.3':
configure:3852: error: no acceptable C compiler found in $PATH
See `config.log' for more details

## ---------------- ##
## Cache variables. ##
## ---------------- ##

ac_cv_env_CC_set=''
ac_cv_env_CC_value=''
ac_cv_env_CFLAGS_set=''
ac_cv_env_CFLAGS_value=''
ac_cv_env_CPPFLAGS_set=''
ac_cv_env_CPPFLAGS_value=''
ac_cv_env_CPP_set=''
ac_cv_env_CPP_value=''
ac_cv_env_LDFLAGS_set=''
ac_cv_env_LDFLAGS_value=''
ac_cv_env_LIBHTPDEVVERSION_CFLAGS_set=''
ac_cv_env_LIBHTPDEVVERSION_CFLAGS_value=''
ac_cv_env_LIBHTPDEVVERSION_LIBS_set=''
ac_cv_env_LIBHTPDEVVERSION_LIBS_value=''
ac_cv_env_LIBHTPMINVERSION_CFLAGS_set=''
ac_cv_env_LIBHTPMINVERSION_CFLAGS_value=''
ac_cv_env_LIBHTPMINVERSION_LIBS_set=''
ac_cv_env_LIBHTPMINVERSION_LIBS_value=''
ac_cv_env_LIBPCREVERSION_CFLAGS_set=''
ac_cv_env_LIBPCREVERSION_CFLAGS_value=''
ac_cv_env_LIBPCREVERSION_LIBS_set=''
ac_cv_env_LIBPCREVERSION_LIBS_value=''
ac_cv_env_LIBS_set=''
ac_cv_env_LIBS_value=''
ac_cv_env_LT_SYS_LIBRARY_PATH_set=''
ac_cv_env_LT_SYS_LIBRARY_PATH_value=''
ac_cv_env_LUAJIT_CFLAGS_set=''
ac_cv_env_LUAJIT_CFLAGS_value=''
ac_cv_env_LUAJIT_LIBS_set=''
ac_cv_env_LUAJIT_LIBS_value=''
ac_cv_env_LUA_CFLAGS_set=''
ac_cv_env_LUA_CFLAGS_value=''
ac_cv_env_LUA_LIBS_set=''
ac_cv_env_LUA_LIBS_value=''
ac_cv_env_PCAP_CFLAGS_set=''
ac_cv_env_PCAP_CFLAGS_value=''
ac_cv_env_PCAP_LIBS_set=''
ac_cv_env_PCAP_LIBS_value=''
ac_cv_env_PKG_CONFIG_LIBDIR_set=''
ac_cv_env_PKG_CONFIG_LIBDIR_value=''
ac_cv_env_PKG_CONFIG_PATH_set=''
ac_cv_env_PKG_CONFIG_PATH_value=''
ac_cv_env_PKG_CONFIG_set=''
ac_cv_env_PKG_CONFIG_value=''
ac_cv_env_build_alias_set=''
ac_cv_env_build_alias_value=''
ac_cv_env_host_alias_set=''
ac_cv_env_host_alias_value=''
ac_cv_env_libhs_CFLAGS_set=''
ac_cv_env_libhs_CFLAGS_value=''
ac_cv_env_libhs_LIBS_set=''
ac_cv_env_libhs_LIBS_value=''
ac_cv_env_libhtp_CFLAGS_set=''
ac_cv_env_libhtp_CFLAGS_value=''
ac_cv_env_libhtp_LIBS_set=''
ac_cv_env_libhtp_LIBS_value=''
ac_cv_env_libnetfilter_queue_CFLAGS_set=''
ac_cv_env_libnetfilter_queue_CFLAGS_value=''
ac_cv_env_libnetfilter_queue_LIBS_set=''
ac_cv_env_libnetfilter_queue_LIBS_value=''
ac_cv_env_libnspr_CFLAGS_set=''
ac_cv_env_libnspr_CFLAGS_value=''
ac_cv_env_libnspr_LIBS_set=''
ac_cv_env_libnspr_LIBS_value=''
ac_cv_env_libnss_CFLAGS_set=''
ac_cv_env_libnss_CFLAGS_value=''
ac_cv_env_libnss_LIBS_set=''
ac_cv_env_libnss_LIBS_value=''
ac_cv_env_target_alias_set=''
ac_cv_env_target_alias_value=''
ac_cv_prog_AWK='awk'
ac_cv_prog_make_make_set='no'
am_cv_make_support_nested_variables='no'
am_cv_prog_tar_ustar='gnutar'
 
Last edited:
Code:
## ----------------- ##
## Output variables. ##
## ----------------- ##

ACLOCAL='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing aclocal-1.15'
AMDEPBACKSLASH='\'
AMDEP_FALSE='#'
AMDEP_TRUE=''
AMTAR='$${TAR-tar}'
AM_BACKSLASH='\'
AM_DEFAULT_V='0'
AM_DEFAULT_VERBOSITY='0'
AM_V='0'
AR=''
AUTOCONF='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing autoconf'
AUTOHEADER='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing autoheader'
AUTOMAKE='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing automake-1.15'
AWK='awk'
BUILD_EBPF_FALSE=''
BUILD_EBPF_TRUE=''
BUILD_UNITTESTS_FALSE=''
BUILD_UNITTESTS_TRUE=''
CARGO=''
CARGO_HOME=''
CC=''
CCDEPMODE=''
CFLAGS=''
CLANG=''
CLANG_CFLAGS=''
CONFIGURE_DATAROOTDIR=''
CONFIGURE_LOCALSTATEDIR=''
CONFIGURE_PREFIX=''
CONFIGURE_SYSCONDIR=''
CPP=''
CPPFLAGS=''
CYGPATH_W='echo'
DEBUG_FALSE=''
DEBUG_TRUE=''
DEFS=''
DEPDIR='.deps'
DLLTOOL=''
DSYMUTIL=''
DUMPBIN=''
ECHO_C=''
ECHO_N='-n'
ECHO_T=''
EGREP=''
EXEEXT=''
FGREP=''
GCC_CFLAGS=''
GREP=''
HAVE_CARGO_VENDOR_FALSE=''
HAVE_CARGO_VENDOR_TRUE=''
HAVE_COCCINELLE_CONFIG=''
HAVE_COCCINELLE_FALSE=''
HAVE_COCCINELLE_TRUE=''
HAVE_CURL=''
HAVE_CYGPATH=''
HAVE_CYGPATH_FALSE=''
HAVE_CYGPATH_TRUE=''
HAVE_FETCH_COMMAND_FALSE=''
HAVE_FETCH_COMMAND_TRUE=''
HAVE_GETCONF_CMD=''
HAVE_GIT_CMD=''
HAVE_LUA_FALSE=''
HAVE_LUA_TRUE=''
HAVE_PCAP_CONFIG=''
HAVE_PDFLATEX=''
HAVE_PDFLATEX_FALSE=''
HAVE_PDFLATEX_TRUE=''
HAVE_PKG_CONFIG=''
HAVE_PYTHON=''
HAVE_PYTHON_DISTUTILS_FALSE=''
HAVE_PYTHON_DISTUTILS_TRUE=''
HAVE_PYTHON_FALSE=''
HAVE_PYTHON_TRUE=''
HAVE_PYTHON_YAML_FALSE=''
HAVE_PYTHON_YAML_TRUE=''
HAVE_RUST_FALSE=''
HAVE_RUST_TRUE=''
HAVE_RUST_VENDOR_FALSE=''
HAVE_RUST_VENDOR_TRUE=''
HAVE_SPHINXBUILD=''
HAVE_SPHINXBUILD_FALSE=''
HAVE_SPHINXBUILD_TRUE=''
HAVE_SURICATA_MAN_FALSE=''
HAVE_SURICATA_MAN_TRUE=''
HAVE_WGET=''
HAVE_WGET_COMMAND_FALSE=''
HAVE_WGET_COMMAND_TRUE=''
HTP_DIR=''
HTP_LDADD=''
INSTALL_DATA='${INSTALL} -m 644'
INSTALL_PROGRAM='${INSTALL}'
INSTALL_SCRIPT='${INSTALL}'
INSTALL_STRIP_PROGRAM='$(install_sh) -c -s'
INSTALL_SURICATA_UPDATE_FALSE=''
INSTALL_SURICATA_UPDATE_TRUE=''
LD=''
LDFLAGS=''
LIBHTPDEVVERSION_CFLAGS=''
LIBHTPDEVVERSION_LIBS=''
LIBHTPMINVERSION_CFLAGS=''
LIBHTPMINVERSION_LIBS=''
LIBOBJS=''
LIBPCREVERSION_CFLAGS=''
LIBPCREVERSION_LIBS=''
LIBPRELUDE_CFLAGS=''
LIBPRELUDE_CONFIG=''
LIBPRELUDE_CONFIG_PREFIX=''
LIBPRELUDE_LDFLAGS=''
LIBPRELUDE_LIBS=''
LIBPRELUDE_PREFIX=''
LIBPRELUDE_PTHREAD_CFLAGS=''
LIBS=''
LIBTOOL=''
LIPO=''
LLC=''
LN_S=''
LTLIBOBJS=''
LT_SYS_LIBRARY_PATH=''
LUAJIT_CFLAGS=''
LUAJIT_LIBS=''
LUA_CFLAGS=''
LUA_INT8=''
LUA_LIBS=''
MAKEINFO='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/missing makeinfo'
MANIFEST_TOOL=''
MKDIR_P='./install-sh -c -d'
NM=''
NMEDIT=''
OBJDUMP=''
OBJEXT=''
OPTIMIZATION_CFLAGS=''
OTOOL64=''
OTOOL=''
PACKAGE='suricata'
PACKAGE_BUGREPORT=''
PACKAGE_NAME='suricata'
PACKAGE_STRING='suricata 5.0.3'
PACKAGE_TARNAME='suricata'
PACKAGE_URL=''
PACKAGE_VERSION='5.0.3'
PATH_SEPARATOR=':'
PCAP_CFLAGS=''
PCAP_LIBS=''
PKG_CONFIG=''
PKG_CONFIG_LIBDIR=''
PKG_CONFIG_PATH=''
RANLIB=''
RUSTC=''
RUSTUP_HOME_PATH=''
RUST_CROSS_COMPILE_FALSE=''
RUST_CROSS_COMPILE_TRUE=''
RUST_FEATURES=''
RUST_LDADD=''
RUST_SURICATA_LIB=''
SECCFLAGS=''
SECLDFLAGS=''
SED=''
SET_MAKE='MAKE=make'
SHELL='/bin/ash'
STRIP=''
SURICATA_UPDATE_DIR=''
VERSION='5.0.3'
ac_ct_AR=''
ac_ct_CC=''
ac_ct_DUMPBIN=''
am__EXEEXT_FALSE=''
am__EXEEXT_TRUE=''
am__fastdepCC_FALSE=''
am__fastdepCC_TRUE=''
am__include='#'
am__isrc=''
am__leading_dot='.'
am__nodep='_no'
am__quote=''
am__tar='tar --format=ustar -chf - "$$tardir"'
am__untar='tar -xf -'
bindir='${exec_prefix}/bin'
build=''
build_alias=''
build_cpu=''
build_os=''
build_vendor=''
datadir='${datarootdir}'
datarootdir='${prefix}/share'
docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
dvidir='${docdir}'
e_datarulesdir=''
e_defaultruledir=''
e_enable_evelog=''
e_localstatedir=''
e_logcertsdir=''
e_logdir=''
e_logfilesdir=''
e_magic_file=''
e_magic_file_comment=''
e_rundir=''
e_rustdir=''
e_sysconfdir=''
exec_prefix='NONE'
have_cargo_vendor_bin=''
have_rustup=''
host=''
host_alias=''
host_cpu=''
host_os=''
host_vendor=''
htmldir='${docdir}'
includedir='${prefix}/include'
infodir='${datarootdir}/info'
install_sh='${SHELL} /tmp/mnt/sdc1/suricata-5.0.3/install-sh'
libdir='${exec_prefix}/lib'
libexecdir='${exec_prefix}/libexec'
libhs_CFLAGS=''
libhs_LIBS=''
libhtp_CFLAGS=''
libhtp_LIBS=''
libnetfilter_queue_CFLAGS=''
libnetfilter_queue_LIBS=''
libnspr_CFLAGS=''
libnspr_LIBS=''
libnss_CFLAGS=''
libnss_LIBS=''
localedir='${datarootdir}/locale'
localstatedir='${prefix}/var'
mandir='${datarootdir}/man'
mkdir_p='$(MKDIR_P)'
oldincludedir='/usr/include'
pdfdir='${docdir}'
prefix='NONE'
program_transform_name='s,x,x,'
psdir='${docdir}'
runstatedir='${localstatedir}/run'
rust_vendor_comment=''
rustup_home=''
sbindir='${exec_prefix}/sbin'
sharedstatedir='${prefix}/com'
subdirs=''
sysconfdir='${prefix}/etc'
target_alias=''

## ----------- ##
## confdefs.h. ##
## ----------- ##

/* confdefs.h */
#define PACKAGE_NAME "suricata"
#define PACKAGE_TARNAME "suricata"
#define PACKAGE_VERSION "5.0.3"
#define PACKAGE_STRING "suricata 5.0.3"
#define PACKAGE_BUGREPORT ""
#define PACKAGE_URL ""
#define PACKAGE "suricata"
#define VERSION "5.0.3"

configure: exit 1
 
Dear Voxel,

Thanks for Entware upgrade!


I am using following unbound packages:
unbound-checkconf - 1.10.1-1
unbound-daemon - 1.10.1-1
unbound-host - 1.10.1-1

When running:
/opt/bin/opkg update
/opt/bin/opkg upgrade
getting following error:
Upgrading unbound-daemon on root from 1.9.6-1 to 1.10.1-1...
Downloading http://www.voxel-firmware.com/Downl...xel/unbound-daemon_1.10.1-1_cortex-a15-3x.ipk
Installing libunbound-light (1.10.1-1) to root...
Downloading http://www.voxel-firmware.com/Downl...l/libunbound-light_1.10.1-1_cortex-a15-3x.ipk
Collected errors:
* check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
But that file is already provided by package * libunbound

I am ignoring it. Messages are present even already performed upgrade.
ll /opt/lib/libun*
-rwxr-xr-x 1 root root 847180 Jan 21 2020 /opt/lib/libunbound.so.8.1.6
lrwxrwxrwx 1 root root 19 Jul 26 07:40 /opt/lib/libunbound.so.8 -> libunbound.so.8.1.6

Also experimenting with suricata. Would like to experiment with the most recent version too.

Thanks again!
 
What is your - now long! - experience of Suricata?

Seems like Suricata 5 will not come to Entware:
https://github.com/Entware/Entware/issues/471

I have humble question about the Suricata. I am now confident I have it up and running. Thanks so much Voxel and Kamoj for the opportunity to play around with this and make it possible.

But as always the grass is greener on the other side and suricata have a newer version. On the entware list its 4.1.8.1. The newest version is 5.0.3 and I want that one. Tried to install it myself but when I got to the installation of .config it didn't work out.

Is it possible to get that 5 version in the entware list as a ipk file for our netgear routers? If it is that would make my day.


Edit: Suricata v5 config.log
 
What is your - now long! - experience of Suricata?

Seems like Suricata 5 will not come to Entware:
https://github.com/Entware/Entware/issues/471

I believe it on my router with the setup I have as I took from @rgnldo, it works like a IDS, it log when you mess up the security but maybe dont react and stop it. (maybe it does but I dont know) I am very happy with IDS log. I think you need a computer if you want suricata do much more. @kamoj it's worth playing with if its why you ask:).
 
Hello Voxel,
is there any reason why pyLoad is not included anymore?
Some time ago there was a pyLoad update and I tried to install it from https://github.com/pyload/pyload/releases on my R7800 but it (or I :D ) failed to install.
Sorry, it is not my action. Decision of Entware team:


pyload: removed as obsolete, still not python3 ready

Voxel.
 
Dear Voxel,

Thanks for Entware upgrade!


I am using following unbound packages:
unbound-checkconf - 1.10.1-1
unbound-daemon - 1.10.1-1
unbound-host - 1.10.1-1

When running:
/opt/bin/opkg update
/opt/bin/opkg upgrade
getting following error:
Upgrading unbound-daemon on root from 1.9.6-1 to 1.10.1-1...
Downloading http://www.voxel-firmware.com/Downl...xel/unbound-daemon_1.10.1-1_cortex-a15-3x.ipk
Installing libunbound-light (1.10.1-1) to root...
Downloading http://www.voxel-firmware.com/Downl...l/libunbound-light_1.10.1-1_cortex-a15-3x.ipk
Collected errors:
* check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
But that file is already provided by package * libunbound

I am ignoring it. Messages are present even already performed upgrade.
ll /opt/lib/libun*
-rwxr-xr-x 1 root root 847180 Jan 21 2020 /opt/lib/libunbound.so.8.1.6
lrwxrwxrwx 1 root root 19 Jul 26 07:40 /opt/lib/libunbound.so.8 -> libunbound.so.8.1.6

Also experimenting with suricata. Would like to experiment with the most recent version too.

Thanks again!
I'll check. Probably I have to report to Entware team.

Voxel.
 
Hi Voxel,
I apologize if this has been answered somewhere else, but is it possible to install entware on an RBK50 V2 (the usb-less model)? If so, what's the difference from the installation steps above?

Thanks!
 
@Voxel you are great:)

I think I can say pretty confident now the cost of suricata on the router. Its a demanding software even as IDS, (security monitoring). The cost of my internet speed is around 20 percent +. It also eats memory, but that memory need to used for something anyway.

I think it's worth it but dont want to make it sunshine tale ether, it is a cost for what you get. In daily life I do not notice any drawbacks in how the router perform. It's only when I want to check numbers I notice it.

But I am pretty convinced that Suricata will not be a IPS on the router. Maybe if some genius optimize it, but I will need to be proven wrong on that point:)

Edit: I like the combo with IDS that keep you paranoid and our own Aegis that act and block the sh´t.
 
Last edited:
Info for Entware users: my version of Entware is upgraded.

It is enough to run:

Code:
/opt/bin/opkg update
/opt/bin/opkg upgrade

to upgrade your version.

What is important: I've used GCC v. 9.3.0 for compilation of Entware. Previous version(s) GCC 8.4.0.

Voxel.
 
Similar threads

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top