• WLAN Monitor Mode (Nzyme)

    From Matthias Gerds@3:770/3 to All on Sunday, April 17, 2022 00:13:18
    Hallo,

    kann das eingebaute WLAN-Modul des Raspi4 den Monitor Mode bedienen,
    oder braucht man dafür einen speziellen (besseren) WLAN-Adapter?
    Hätte hier noch einen TP-Link WN823N rumliegen.

    Habe Nzyme erfolgreich installiert und gestartet (inkl. Postgresql).
    Aber es funktioniert nicht.

    Der Dienst scheint zu laufen laut

    systemctl status nzyme.service

    aber http://127.0.0.1:22900 ist nicht erreichbar.

    Läuft da evtl. eine Firewall?


    M:

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Matthias Gerds@3:770/3 to All on Sunday, April 17, 2022 00:31:35
    Am 17.04.22 um 00:13 schrieb Matthias Gerds:
    Hallo,

    kann das eingebaute WLAN-Modul des Raspi4 den Monitor Mode bedienen,
    oder braucht man dafür einen speziellen (besseren) WLAN-Adapter?
    Hätte hier noch einen TP-Link WN823N rumliegen.

    Habe Nzyme erfolgreich installiert und gestartet (inkl. Postgresql).
    Aber es funktioniert nicht.

    Der Dienst scheint zu laufen laut

    systemctl status nzyme.service

    aber http://127.0.0.1:22900 ist nicht erreichbar.

    Läuft da evtl. eine Firewall?

    Hey,

    wondering if the WLAN module of the Raspi4 is capable of the Monitor Mode,
    or do I have to buy another specialized WLAN adapter for that purpose?
    Got a free TP-Link WN823N here.

    Installed Nzyme successfully and startet it (incl. Postgresql).
    But it doesn't function.

    The nzyme service seemes to be running according to

    systemctl status nzyme.service

    but

    http://127.0.0.1:22900

    isn't reachable.

    Maybe due to a running Firewall?

    M:

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Martin Gregorie@3:770/3 to Matthias Gerds on Saturday, April 16, 2022 23:39:02
    On Sun, 17 Apr 2022 00:31:35 +0200, Matthias Gerds wrote:



    http://127.0.0.1:22900

    127.0.0.1 is localhost, and generally only used to connect two processes together. Since port 22900 is a Siemens licensing server, its very
    unlikely that it will be running at 127.0.0.1 on your Raspi - 127.0.0.1 is localhost and used only to interconnect two processes running on the same
    host.

    isn't reachable.

    Maybe due to a running Firewall?

    RPis usually don't run firewalls by default. Things to check:

    - what address is assigned to your RPi and how is it assigned?
    - what other hosts are on your LAN that you can use to scan your RPi?
    You'll have to install nmap and/or Wireshark on it if neither is
    installed.

    - you can use 'nmap' to scan another host on your LAM to show what
    ports are open on it. Use either its IP or its hostname to identify
    the host you want to scan.

    - Wireshark can capture and display messages on your LAN as well as
    saying which hosts are sending and receiving the messages.

    --
    --
    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Marco Moock@3:770/3 to All on Sunday, April 17, 2022 07:18:49
    Am Sonntag, 17. April 2022, um 00:31:35 Uhr schrieb Matthias Gerds:

    wondering if the WLAN module of the Raspi4 is capable of the Monitor
    Mode, or do I have to buy another specialized WLAN adapter for that
    purpose? Got a free TP-Link WN823N here.

    Maybe read that page:
    https://www.aircrack-ng.org/doku.php?id=compatible_cards

    Installed Nzyme successfully and startet it (incl. Postgresql).
    But it doesn't function.

    Are there any error message in the logs?

    http://127.0.0.1:22900

    What is the exact message?
    Is the deamon listening? Check that with netstat.

    Maybe due to a running Firewall?

    Check iptables, ufw and firewalld, according to your OS.

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Andy Burns@3:770/3 to Martin Gregorie on Sunday, April 17, 2022 06:42:33
    Martin Gregorie wrote:

    127.0.0.1 is localhost, and generally only used to connect two processes together. Since port 22900 is a Siemens licensing server, its very
    unlikely that it will be running at 127.0.0.1 on your Raspi

    But he's installed nzyme which defaults to that port

    <https://github.com/lennartkoopmann/nzyme/blob/master/nzyme.conf.example#L78>

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Matthias Gerds@3:770/3 to All on Sunday, April 17, 2022 12:21:19
    Am 17.04.22 um 01:39 schrieb Martin Gregorie:
    On Sun, 17 Apr 2022 00:31:35 +0200, Matthias Gerds wrote:



    http://127.0.0.1:22900

    127.0.0.1 is localhost, and generally only used to connect two processes together. Since port 22900 is a Siemens licensing server, its very
    unlikely that it will be running at 127.0.0.1 on your Raspi - 127.0.0.1 is localhost and used only to interconnect two processes running on the same host.

    isn't reachable.

    Maybe due to a running Firewall?

    RPis usually don't run firewalls by default. Things to check:

    - what address is assigned to your RPi and how is it assigned?
    - what other hosts are on your LAN that you can use to scan your RPi?
    You'll have to install nmap and/or Wireshark on it if neither is
    installed.

    - you can use 'nmap' to scan another host on your LAM to show what
    ports are open on it. Use either its IP or its hostname to identify
    the host you want to scan.

    - Wireshark can capture and display messages on your LAN as well as
    saying which hosts are sending and receiving the messages.

    I nmap-ed the Rpi from another PC in my LAN:

    mg@Neptun:~$ nmap -Pn xxx.xxx.xxx.xxx
    Starting Nmap 7.70 ( https://nmap.org ) at 2022-04-17 12:07 CEST
    Nmap scan report for xxx.xxx.xxx.xxx
    Host is up (0.050s latency).
    All 1000 scanned ports on xxx.xxx.xxx.xxx are filtered

    Nmap done: 1 IP address (1 host up) scanned in 5.92 seconds


    On Rpi itself (localhost):
    ...
    All 1000 scanned ports on xxx.xxx.xxx.xxx are closed.
    ...


    Hm, might be still a configuration fault in nzyme.conf.


    M:

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Martin Gregorie@3:770/3 to Matthias Gerds on Sunday, April 17, 2022 11:00:24
    On Sun, 17 Apr 2022 12:21:19 +0200, Matthias Gerds wrote:

    Am 17.04.22 um 01:39 schrieb Martin Gregorie:
    On Sun, 17 Apr 2022 00:31:35 +0200, Matthias Gerds wrote:



    http://127.0.0.1:22900

    127.0.0.1 is localhost, and generally only used to connect two
    processes together. Since port 22900 is a Siemens licensing server, its
    very unlikely that it will be running at 127.0.0.1 on your Raspi -
    127.0.0.1 is localhost and used only to interconnect two processes
    running on the same host.

    isn't reachable.

    Maybe due to a running Firewall?

    RPis usually don't run firewalls by default. Things to check:

    - what address is assigned to your RPi and how is it assigned?
    - what other hosts are on your LAN that you can use to scan your RPi?
    You'll have to install nmap and/or Wireshark on it if neither is
    installed.

    - you can use 'nmap' to scan another host on your LAM to show what
    ports are open on it. Use either its IP or its hostname to
    identify the host you want to scan.

    - Wireshark can capture and display messages on your LAN as well as
    saying which hosts are sending and receiving the messages.

    I nmap-ed the Rpi from another PC in my LAN:

    mg@Neptun:~$ nmap -Pn xxx.xxx.xxx.xxx Starting Nmap 7.70 (
    https://nmap.org ) at 2022-04-17 12:07 CEST Nmap scan report for xxx.xxx.xxx.xxx Host is up (0.050s latency).
    All 1000 scanned ports on xxx.xxx.xxx.xxx are filtered

    Nmap done: 1 IP address (1 host up) scanned in 5.92 seconds


    On Rpi itself (localhost):
    ...
    All 1000 scanned ports on xxx.xxx.xxx.xxx are closed.
    ...


    Hm, might be still a configuration fault in nzyme.conf.

    Sounds likely. One thing is for certain: its certainly not going to find anything external to its host system on 127.0.0.1 !


    --
    --
    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Matthias Gerds@3:770/3 to All on Sunday, April 17, 2022 13:13:46
    Am 17.04.22 um 12:33 schrieb Andy Burns:
    Marco Moock wrote:

    schrieb Matthias Gerds:

    All 1000 scanned ports on xxx.xxx.xxx.xxx are closed.

    That means the deamon is not running. Check the logs of the service and
    syslog.

    Or a firewall is blocking it, as others have said, to tell the difference use netstat on the Pi, e.g.

    netstat -pant | grep 22900

    Ooops, thanks! Tried netstat before but was overwhelmed by the output ...

    netstat -pant | grep 22900

    shows just nothing. Seems, nzyme service isn't running ...


    M:

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Marco Moock@3:770/3 to All on Sunday, April 17, 2022 12:29:31
    Am Sonntag, 17. April 2022, um 12:21:19 Uhr schrieb Matthias Gerds:

    All 1000 scanned ports on xxx.xxx.xxx.xxx are closed.

    That means the deamon is not running. Check the logs of the service and
    syslog.

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Andy Burns@3:770/3 to Marco Moock on Sunday, April 17, 2022 11:33:56
    Marco Moock wrote:

    schrieb Matthias Gerds:

    All 1000 scanned ports on xxx.xxx.xxx.xxx are closed.

    That means the deamon is not running. Check the logs of the service and syslog.

    Or a firewall is blocking it, as others have said, to tell the difference use netstat on the Pi, e.g.

    netstat -pant | grep 22900

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From Marco Moock@3:770/3 to All on Sunday, April 17, 2022 13:59:48
    Am Sonntag, 17. April 2022, um 13:13:46 Uhr schrieb Matthias Gerds:

    shows just nothing. Seems, nzyme service isn't running ...

    Seems so, so check the logs to find out why it is not running.

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From I R A Darth Aggie@3:770/3 to 20220417135948.71097c9f@ryz on Monday, April 18, 2022 18:29:09
    On Sun, 17 Apr 2022 13:59:48 +0200,
    Marco Moock <mo01@posteo.de>, in
    <20220417135948.71097c9f@ryz> wrote:
    Am Sonntag, 17. April 2022, um 13:13:46 Uhr schrieb Matthias Gerds:

    shows just nothing. Seems, nzyme service isn't running ...

    Seems so, so check the logs to find out why it is not running.


    This may help https://www.nzyme.org/docs/installation-configuration/install-raspberry-pi-os

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
  • From I R A Darth Aggie@3:770/3 to slrnt5rbfl.ms6f.n0b0dy@invalid.inva on Monday, April 18, 2022 20:45:32
    On Mon, 18 Apr 2022 18:29:09 -0000 (UTC),
    I R A Darth Aggie <n0b0dy@invalid.invalid>, in <slrnt5rbfl.ms6f.n0b0dy@invalid.invalid> wrote:
    On Sun, 17 Apr 2022 13:59:48 +0200,
    Marco Moock <mo01@posteo.de>, in
    <20220417135948.71097c9f@ryz> wrote:
    Am Sonntag, 17. April 2022, um 13:13:46 Uhr schrieb Matthias Gerds:

    shows just nothing. Seems, nzyme service isn't running ...

    Seems so, so check the logs to find out why it is not running.


    This may help
    https://www.nzyme.org/docs/installation-configuration/install-raspberry-pi-os

    I was going to make note of, and forgot, that this uses log4j, so keep
    that updated.

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.

    --- SoupGate-Win32 v1.05
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)