Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/jegp/demtech-openwrt-setup

Setup-scripts for DemTech's logging system for queue sizes at polling places.
https://github.com/jegp/demtech-openwrt-setup

Last synced: 11 days ago
JSON representation

Setup-scripts for DemTech's logging system for queue sizes at polling places.

Awesome Lists containing this project

README 

        
DemTech-openwrt-setup

=====================



Version 0.2



## Introduction



This is a repository containing instructions on how to setup monitoring

tools for a [DemTech](http://demtech.dk) project.

The idea is to use devices with WiFi antennas to monitor

queue lengths at polling places by registering how long the

same WiFi devices are in range. This readme describes how to

use the setup-scripts in the repository.



Any questions or comments can be directed to [email protected].



## Setup

The scripts are designed to be run on a Linux host machine

via a shell, and onto a device running the

[OpenWrt](https://openwrt.org/) Linux distribution for embedded

devices (in this case devices with wireless antennas).

Setup instructions for any router device or similar should be

present on the OpenWrt website[1]. Monitoring traffic

generates a lot of data, so this setup also assumes that the device

is connected to a 3G device (or similar) for data-transfering.



If this setup works as intended, a script will be started whenever

the OpenWrt router (the client) boots. This script logs all the

wireless traffic in the vicinity and once 100kB data is collected,

it sends it to the given host.



The following readme is split into two: Installation

(prior to gathering data at polling places) and setup

(at the polling places).



**IMPORTANT: Consult your contries legislation before starting

to record people's MAC addresses! You have been warned.**



**Note:** Data will be captured on the channel the device is set

to monitor by default. One can argue whether or not this is desirable,

but all devices should be caught scanning once in a while

(depending on the platform), since a scanning covers

all available frequencies.



## Installing



Before installation we assume a OpenWRT image has been installed

on the device. An image for the TP-Link MR3020 can be found in the

''data'' folder.



Installation requires 3 steps:



1. Setting up the device

3. Installing monitoring tools

4. Setting up data-transering device



### Device setup

This setup has been tested to work on a Debian 7 machine. In

the following scripts the host-machine is connected to the internet

via the ''wlan1'' interface while being connected to the router via

ethernet on the interface ''eth0''.



#### Routing

To enable connection between the devices and the host, and

between the devices and the internet (we need this to install

packages on the device), one should setup a route table on the

host-machine to allow routes to go through the host. In this

setup the host-machine is set to respond on 192.168.0.2.



1. First establish the host address alias

	````bash

	sudo ip addr add 192.168.0.2/24 dev eth0

	````



2. Then configure NAT, so the devices can resolve addresses.



	````bash

	sudo iptables -A FORWARD -o eth0 -i eth0 -s 192.168.0.0/24 -m conntrack --ctstate NEW -j ACCEPT

	sudo iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

	sudo iptables -t nat -F POSTROUTING

	sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

	````



3. Lastly the line `#net.ipv4.ip_forward=1` should be uncommented

	in the file `/etc/sysctl.conf`.



	If the settings are not stored, this needs to be run after

	each boot. A great article on the ubuntu help center describes the

	above steps in more detail and some information on how to persist

	the changes:

	https://help.ubuntu.com/community/Internet/ConnectionSharing.



	A device with a clean OpenWrt installation should resolve

	itself to 192.168.1.1, which should probably be changed if

	you are setting up multiple devices. 



### Device configuration

To be able to connect to the device via the shell and ethernet

you need to configure the OpenWrt configuration. This can be

automated, but it is simpler to just log in to the interface,

by pointing a browser to 192.168.0.1. When logging in the first

time, no password should be needed.



First you should set the password of the device, so it can be

accessed via ssh. This can be done in the system-tab -> administration.



If you have multiple devices you would probably want to give

the ethernet interface another address (in the Network tab).

As you can see below I have chosen 192.168.0.101 as an example

here. But anything goes.



Lastly it is probably a good idea to synchronize the time (in

the System-tab). Note that when you change the interface above,

the device is no longer available via 192.168.0.1.



## Installation 

After configuring the device the last thing you need to do, is

to install the monitoring scripts on the device. Assuming you

are in the root directory of this repository, simply run the

``setup.sh`` script with the ip of the external device as the

first and only argument. So if you have your router at 192.168.0.101:



````bash

./setup.sh 192.168.0.101

````



And that's it. Next time the device starts up, it will start logging in the /home/data dir. If something breaks I have included a more elaborate description of the setup which runs in two steps. 



1. First the monitoring scripts will be copied onto the device. These scripts will be run when the device starts.

2. Second we need to run the installation-script (``router-setup.sh``) on the device.

The ````UserKnownHostsFile```` and the ````StrictHostKeyChecking```` options in the `setup.sh` file avoids checking and storing the RSA key since we are going to connect to multiple devices with the same IP. 

The ``router-setup.sh`` script updates the package manager, installs the monitoring program (tcpdump) in the RAM and the client package for sending data to the host. Lastly it stores startup-hooks and cron-jobs for the monitoring process.



## Polling-place setup

Two things need to happen: First the server needs to be deployed and second the clients (OpenWrt devices) should be connected and started.



### Running the host

First of all you need a host to run a server-program. If you have not already set up the routes as described above, now is the time to do it. We need them for the clients to connect. I have configured the client scripts to connect to 192.168.0.2, so I recommend giving your host this adress.



In the root of this repo is a file called `server`. Running that should produce a running server. If anything fails please refer to the [OpenWrt-transwer](https://github.com/Jegp/OpenWrt-transfer) project, which contains the source-file for the server.



### Connecting the devices

... To be continued



## Conclusion

This is an exceptionally powerful tool since even the smallest and simplest devices with wifi-antennas are capable of surveilling a large number of people over a large amount of time. The information captures by tcpdump can be used for many many purposes, ranging from tracking individuals to perhaps even triangulate positions if more routers are set up. 



The setup are not perfect, however. Tcpdump only captures traffic on the default channel of the antenna, which limits a lot of the logged data to scans from mobile devices searching for networks. 



Also, I have been struggling with the wireless interface crashing irregularly. In particular this appeared to be a problem when using the FAT filesystem on the USB devices to store the WiFi data on.

In the setup-scripts I have included a cron-job that checks if any data have been logged for a minute. If not, we restart the wireless interface.



[1]: https://openwrt.org/ "OpenWrt homepage"