Embedded
Image for Hardware Embedded
Beta relase of image for
Card Flash.
New version:
http://www.snortattack.it/image/hda_new.tar.gz
The two version outdate:
HDA : www.snortattack.it/image/hda.tar.gz
HDB : www.snortattack.it/image/hdb.tar.gz
The images are tested for Allwell 6086-CF and PcEngines Wrap for
Hda,Soekris Net4801 for Hdb.
They are Debian without may process and minimum installation.
The administratione is possible with terminal, ssh and serial at 38400.
Root password is snortattack, mysql password is password.
Embedded hardware low cost
In forecast to the release of the image we put to view the link of the hardware of our tests.
1. Allwell 6086
http://www.gctglobal.com/Products/Set_Top_Box/STB6086N2/stb6086n2.html
2. Fabiatech FX5620
http://www.fabiatech.com/products/fx5620.htm
3. Soekris NET4801
http://www.soekris.com/net4801.htm
4.PcEngines WRAP
http://www.pcengines.ch/wrap.htm
All these have been tested and working with one Flash Card from 1GB and Debian distribution.
To short we will put to disposition the image with Debian + snort_inline + snortattack script.
--------------
Snortattack is happy to annunce the ips inline on embedded platform:
link to product: http://www.soekris.com/net4801.htm
The net4801 is a compact, low-power, low-cost, advanced communication computer, based on a 266 Mhz 586 class Geode single chip processor. It has three 10/100 Mbit Ethernet ports, up to 128 Mbyte SDRAM main memory and uses a CompactFlash module or a 2.5" hard drive for program and data storage. It can be expanded using a MiniPCI type III board and a low-power 3.3V
standard PCI board. It also offers a USB 1.1 interface and environmental monitoring. It has been designed as a higher performance upgrade to the net4501 and is software and form factor compatible.”
install the harddrive on a notebook and install a new fedora or other distro.
update it and change this tree file :
grub.conf
exemple : http://www.snortattack.org/files/info/embedded/grub.conf
# boot=/dev/hda
default=0
timeout=5
# NO GUI!
# splashimage=(hd0,0)/grub/splash.xpm.gz
# use serial
serial --unit=0 --speed=9600 --word=8 --parity=no --stop=1
# use terminal
terminal --timeout=15 serial
title Fedora Core (2.6.9-1.667)
root (hd0,0)
kernel /vmlinuz-2.6.9-1.667 ro root=/dev/VolGroup00/LogVol00 console=ttyS0
initrd /initrd-2.6.9-1.667.img
inittab :
see the exemple :
see the exemple : http://www.snortattack.org/files/info/embedded/inittab
# Run gettys in standard runlevels
co:2345:respawn:/sbin/agetty ttyS0 9600 vt100-nav
#1:2345:respawn:/sbin/mingetty tty1
#2:2345:respawn:/sbin/mingetty tty2
#3:2345:respawn:/sbin/mingetty tty3
#4:2345:respawn:/sbin/mingetty tty4
#5:2345:respawn:/sbin/mingetty tty5
#6:2345:respawn:/sbin/mingetty tty6
fstab*:
see the exemple : http://www.snortattack.org/files/info/embedded/fstab
# This file is edited by fstab-sync - see 'man fstab-sync' for details
/dev/hdb3 / ext3 defaults 1 1
/dev/hdb1 /boot ext3 defaults 1 2
none /dev/pts devpts gid=5,mode=620 0 0
none /dev/shm tmpfs defaults 0 0
none /proc proc defaults 0 0
none /sys sysfs defaults 0 0
/dev/hdb2 /var ext3 defaults 1 2
* you must change the partion in hdb1 ..2 ..3
ok now halt the system and install the hdd in the embedded pc.
connect to he serial port with minicom or terminal
and power on the embedded pc.
ok the server is run, now you can install of that you want.
Soon we post the how to for install a snort ips inline and script.
MetU The Admin.