LookWhosTalking

Errata‎ > ‎

Notes and links on home network and traffic analysis tools and gizmos ... VERY early stages of creating an environment for smart devices in our home ... isolating from rest of our devices.

Currently a link/bookmark collection and notes to self as I fumble around with tools and hardware.

COG Containment

Hardware

Actiontec V1000H Gateway (No choice/required - POS supplied by TDS Phone Co ... also serves up TV)

Data Sheet - http://www.actiontec.com/products/datasheets/ActiontecV1000Hncsdatasheet.pdf
User Guide - (humorous), it basically echos the Admin GUI
http://www.actiontec.com/products/manuals/V1000H%20User%20Manual%20NCS.pdf
TDS User/Setup Guide (useless) - http://info.tdstelecom.com/rightnow/V1000_DSLQuickStart.pdf

TPLINK TL-SG108e - Cheap Smart Switch

TPLINK Support Page @ http://www.tp-link.com/en/products/details/cat-41_TL-SG108E.html
Installation Guide @ http://www.tp-link.com/res/down/doc/TL-SG108_V2_IG.pdf
V1 Manual @ http://www.tp-link.com/resources/document/TL-SG108_V1_User_Guide_7106504.pdf
HowTo 802.1q VLANS @ http://www.tp-link.com/en/faq-788.html
Configuration Utility - (Windoze only) - http://tp-link.com/resources/document/TL-SG108E_V1_User_Guide_Easy_Smart_Configuration_Utility_1910010977.pdf

Linksys WRT302N - BUT - Running dd-wrt

User Guide (Stock) - http://downloads.linksys.com/downloads/userguide/1224665687862/WRT320N_V10_UG_A-WEB.pdf
dd-wrt wiki - http://dd-wrt.com/wiki/index.php/Linksys_WRT320N_v1.0
More dd-wrt adventures below - lot of capabilities! Lot to learn!

Motorola WR850G V2 - Development/Backup dd-wrt router

User Guide - http://www.motorola.com/mdirect/manuals/WR850G_User_Manual_E.pdf
dd-wrt flashing - http://www.dd-wrt.com/wiki/index.php/Flash_Your_Motorola_WR850G
dd-wrt wiki - http://dd-wrt.com/wiki/index.php/Motorola_WR850G

Software

Monitoring and Testing Smart things in our home. Settled on 2 tools:

Parrot Security for pen testing (replaced Kali/Backtrack as fav) - www.parrotsec.org

Runs very nicely via persistent USB on Acer Aspire One netbook - pretty simple install
https://docs.parrotsec.org/FAQ
Preinstalled Tools:

OpenVas (Vulnerability Scanner) - www.openvas.org

Documentation @ http://docs.greenbone.net/
Had to reset admin account for greenbone login
openvasmd --user=admin --new-password=new_password
[ToDo] - Start sequence

Wireshark - https://www.wireshark.org/

User Guide - https://www.wireshark.org/docs/wsug_html_chunked/

Capture Filters @ https://wiki.wireshark.org/CaptureFilters
Display Filters @ https://wiki.wireshark.org/DisplayFilters

nmap - www.nmap.org

zenmap front-end is great - https://nmap.org/book/zenmap.html

Preset Scans - http://www.securesolutions.no/zenmap-preset-scans/

Network Security Toolkit (NST) as ongoing probe/monitor and intrusion detection tools

Also runs great via persistent USB boot on old Acer Aspire One netbook
[To Do] - retrace install steps
Now sits on mirrored port of IoT containment VLAN, access via browser
Handy Tools (preinstalled!)

ntop Traffic Monitor @ www.ntop.org

Original ntop project @ http://sourceforge.net/projects/ntop/files/ntop/
Notes/Reminders (n2s)

Added old ntop to Kali: apt-get install ntop, default web interface @ x.x.x.x:3000
Configure Geo mapping

http://hyperlogos.org/page/How-use-ntop-mapperpl-Ubuntu-Feisty
Friggin ntop mapper.pl - http://hyperlogos.org/page/How-use-ntop-mapperpl-Ubuntu-Feisty

Ignore host at startup: ntop -B "not host x.x.x.x"
Reset Sticky Hosts

Snort Intrusion Detection @ https://www.snort.org/

dd-wrt - dd-wrt.com (better router firmware)

Documentation @ http://dd-wrt.com/wiki/index.php/Main_Page
Install - http://www.dd-wrt.com/wiki/index.php/Installation
Upgrade - https://www.guidingtech.com/25637/upgrade-router-firmware-dd-wrt/
Tutorials - http://www.dd-wrt.com/wiki/index.php/Tutorials
Second Subnet (Still working through these - to be reviewed)

Startup/Config (n2s) - because I do it A LOT!

Notes/Reminders (n2s) - Config Highlights (because I keep bricking the router!)

Setup/Basic: StaticIP for WAN, GW + DNS, set Router/Hostname, DHCP range/limits & NTP (UTC-6) - opendns=208.67.222.222 & 220
Setup/Advanced Routing = Router (Gateway for DMZ)
Wireless: AP, Mixed , Bridged, Security WPA2 Mixed TKIP+AES
Services: SSHd enable for FWBuilder
Admin: JFFS http://www.dd-wrt.com/wiki/index.php/Journalling_Flash_File_System
& http://www.dd-wrt.com/wiki/index.php/Firewall_Builder#DD-WRT_V24_.26_iptables-save
Command to redo SSH on OSX - ssh-keygen -R server-name

Openwrt - openwrt.org - Embedable Linux

Documentation @ https://wiki.openwrt.org/doc/start
On a Raspberry PI - https://wiki.openwrt.org/toh/raspberry_pi_foundation/raspberry_pi
Firewall - https://wiki.openwrt.org/doc/uci/firewall
Hardware list - https://wiki.openwrt.org/toh/start

Handy Firewall Links

Nice overview of Linux firewalls w/ simple examples - https://likegeeks.com/linux-iptables-firewall-examples/
dd-wrt iptables - http://www.dd-wrt.com/wiki/index.php/Iptables_command
25 Common iptables rules = http://www.thegeekstuff.com/2011/06/iptables-rules-examples/
More handy common rules @ http://linuxconfig.org/collection-of-basic-linux-firewall-iptables-rules
I cant get enough of these - http://www.cyberciti.biz/tips/linux-iptables-examples.html
dd-wrt firewall example @ http://www.dd-wrt.com/wiki/index.php/FirewallExample
CentOS iptables intro - https://wiki.centos.org/HowTos/Network/IPTables
IP Calculators - http://www.subnetmask.info/
Firewall builder http://www.fwbuilder.org/

Firewall Builder+dd-wrt - http://virtuallyhyper.com/2013/04/use-fwbuilder-to-deploy-an-iptables-firewall-to-a-dd-wrt-router/

Notes

2016 - Downgraded to DDWRT v24svn14471 firmware because sshd didn't work on svn21061 - FWbuilder uses ssh!
2017 - Upgraded BACK to svn21061 because 14471 looked scary after OpenVAS Scan. Will iptable another way!
Watch for bugs/open items here - http://svn.dd-wrt.com/

Testing

Testing Things - from new separate segment

Smartthings v1 Hub
Philips Hue Bridge
Belkin WeMo

Switch
Motion

Nest Thermostat
Google Chromecast - Nope!

I can't believe there's a deployment guide! www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-6/chromecastDG76/ChromecastDG76.html

Misc/Odds/Ends

http://m2mworldnews.com/2016/01/28/34699-security-in-the-connected-home-why-there-is-no-simple-answer/

Navigation

Ongoing Projects