Package for OpenWRT

[petonagy]

I would like to ask...are you planing to port (make package) for openWRT?

Thanks for the answer.

[aabc]

I'm only providing sources.

[AndrewMargarit]

Did anyone compiled this for openwrt?

[alex-eri]

@AndrewMargarit i do

[richb-hanover]

@alex-eri Would you consider creating an outline of instructions for installing ipt-netflow in OpenWrt and/or LEDE? If so, I would write it up and get onto those web sites so that others can use it. Many thanks!

[alex-eri]

@richb-hanover , just copy contens of ipt-netflow/openwrt folder to ${openwrt build root}/packages/ipt-netflow/ . It will appear in menu. Make as usual.

[ZackMattor]

@alex-eri It seems that it cannot find iptables.h... Any idea on how to solve this? I'll keep playing with it.

Checking for presence of include/linux/llist.h... Yes
Checking for presence of include/linux/grsecurity.h... No
Iptables binary version: 1.6.0 (detected from /sbin/iptables)
pkg-config for version 1.6.0 exists: No (reported: 1.4.21)
Checking for presence of xtables.h... No
Checking for presence of iptables.h... No
! Iptables headers not found. You may need to specify --ipt-inc=...
!
! Under Debian simply run this:
!   root# apt-get install iptables-dev pkg-config```

[ZackMattor]

Scratch that... I got it working I believe, but i need to install iptables-dev onto the base system... Do you know if there's an easy way to have the makefile pull those dependencies? I might need to create a iptables-dev openwrt package....

[alex-eri]

I will make firmware for tplink today. Tests and more instructions tomorow. You need patch Makefile for using crosscompiler or use devel brunch. Included patch tested only with Dest.Driver (openwrt trunk)

[ZackMattor]

@alex-eri I have it built and seems to be installed on the firmware. I'm trying to configure iptables to forward traffic to the module but i'm getting this error.

root@OpenWrt:~# iptables -I FORWARD -j NETFLOW
iptables v1.4.21: Couldn't load target `NETFLOW':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

[ZackMattor]

It shows up under lsmod and shows up under x_tables, should it be under ip_tables?

root@OpenWrt:/# lsmod | grep ipt
ip_tables               9325  4 iptable_nat,iptable_raw,iptable_mangle,iptable_filter
ipt_MASQUERADE           688  1
ipt_NETFLOW            42436  0
ipt_REJECT               944  2
iptable_filter           720  1
iptable_mangle           944  1
iptable_nat              784  1
iptable_raw              688  0
nf_nat_ipv4             3697  1 iptable_nat
nf_nat_masquerade_ipv4    1436  1 ipt_MASQUERADE
nf_reject_ipv4          2179  1 ipt_REJECT
x_tables               11527 26 ipt_REJECT,ipt_MASQUERADE,xt_time,xt_tcpudp,xt_state,xt_nat,xt_multiport,xt_mark,xt_mac,xt_limit,xt_conntrack,xt_comment,xt_TCPMSS,xt_REDIRECT,xt_LOG,xt_CT,iptable_raw,iptable_mangle,iptable_filter,ipt_NETFLOW,ip_tables,ip6t_REJECT,ip6table_raw,ip6table_mangle,ip6table_filter,ip6_tables

[ZackMattor]

Think this could be because i compiled using system iptables-dev?

[aabc]

It shows up under lsmod and shows up under x_tables, should it be under ip_tables?

You also need libipt_NETFLOW.so library for iptables tool somewhere where it's configured on your system. You can configure proper location supplying --ipt-lib= option to configure.

Look where other targets are located, for example libipt_REJECT.so.

[alex-eri]

@ZackMattor. Buildig example on clean Debian chroot
https://github.com/alex-eri/ipt-netflow/blob/openwrt-makefile/openwrt/Readme.md

/usr/lib/iptables/libipt_NETFLOW.so in iptables-mod-netflow_2.2-2_ar71xx.ipk
Other modules is here.

There is no libipt_REJECT.so - only .ko

I built module, but have no exported flows.

# cat /proc/net/stat/ipt_netflow
ipt_NETFLOW 2.2, srcversion (null); llist mac
Protocol version 5 (netflow)
Timeouts: active 1800s, inactive 15s. Maxflows 2000000
Flows: active 57 (peak 1038 reached 0d0h20m ago), mem 65K, worker delay 10/100 [1..10] (10 ms, 0 us, 47:0 0 [cpu0]).
Hash: size 15055 (mem 58K), metric 1.00 [1.00, 1.00, 1.00]. InHash: 1851 pkt, 56011 K, InPDU 10, 345736.
Rate: 2216752 bits/sec, 8 packets/sec; Avg 1 min: 1277071 bps, 2 pps; 5 min: 1422531 bps, 2 pps
cpu#     pps; <search found new [metric], trunc frag alloc maxflows>, traffic: <pkt, bytes>, drop: <pkt, bytes>
Total      8;    236   4246  17335 [1.01],    0    0    0    0, traffic: 21581, 899 MB, drop: 0, 0 K
Export: Rate 366 bytes/s; Total 576 pkts, 0 MB, 17268 flows; Errors 0 pkts; Traffic lost 0 pkts, 0 Kbytes, 0 flows.
sock0: 192.168.236.34:2055, sndbuf 1, filled 0, peak 0; err: sndbuf reached 0, connect 0, cberr 0, other 0