You are here

Connection or nodes seen logs?

5 posts / 0 new
Last post
N8LBV
Connection or nodes seen logs?

Is it possible to view or enable connection or nodes seen (802.11 or routing protocols or IPs etc.) logging on a node?   

If a node connected to me or if I even saw packets from a neighbor that did not connect or establish any kind of association.  
It would be handy and interesting to have a look at what has been seen or connected to several days ago but is not there now.  

I realize anything like this is probably OFF by default or not even provided for due to system memory contraints.  
Having some of this capability would be really cool to to be able to view what the node has seen over time.  
Especially 802.11 things that happen on the channel when not looking or watching in realtime. 

Also if logs could be send to an on network logging facility thus not filling up the local ram based filesystem that would be awesome. 

Meanwhile I am searcning and lookign through the docs.  
I will report here if I find anything that I am able to utilize.  

  
 

N8LBV
*bump*  

*bump*  

Any thoughts on this?
And am I asking in the right place?   
Thanks.
 

nc8q
nc8q's picture
Is it possible to <a> or <b> or <c> ( <d> or <e>) logging on a n

"Is it possible to view or enable connection or nodes seen (802.11 or routing protocols or IPs etc.) logging on a node?"

Hi, Steve:

Short reply: IMHO, What you seek requires an external computer and storage.

Long reply:
I am willing to assist with your queries, but my brain cannot interpret your seemingly multiple query.
Since you requested a *bump*, I will give your query (queries) a try.
If it is possible with OpenWRT, it *may* be possible with AREDN.

"If a node connected to me"
Communication between nodes is connection-less. AREDN operates in 'ad-hoc' mode.

"if I saw packets"
The tool 'tcpdump' may be used to view interface data packets.

"if I even saw packets from a neighbor that did not connect or establish any kind of association"
'seen broadcast' packets from any AREDN neighbor (*) will generate a line-item on the '/mesh' page in the right pane under 'Current neighbors'.
(*) if the neighbor have the default SSID and the same channel and bandwidth as your test node.

I think it is the nature of an interface to discard data packets not addressed to itself.
If you seek to view raw data, you may use the 'tcpdump' tool.
If you seek to store raw data, you will likely need a separate computer.

"what has been seen or connected to several days ago"
The 'Current neighbors' information is retained for 24 hours.
Network information from 'several days ago' is not relevant to the functioning of a node, so not expected to be stored..
Nodes need to react more quickly to the recent status...like last minute or last second or less.

I hope this helps,
Chuck
 

N8LBV
Very helpful, thanks!   Steve

Very helpful, thanks!  
Steve

N8LBV
This is pretty much exactly

This is pretty much exactly what I need-

I didn't even realize tcpdump would show ethernet frames and 802.11 frames.  
It's been a very long time since I have used it since I moved to TShark some 15 years ish ago.  
Thanks for the suggestion.  
I need this for a number of reasons.  

root@N8LBV-MBB:~# tcpdump -i wlan0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan0, link-type IEEE802_11_RADIO (802.11 plus radiotap header), capture size 262144 bytes
07:49:41.199758 [|802.11]
07:49:43.153878 [|802.11]
07:51:05.605352 [|802.11]
07:51:16.301047 130264681911us tsft 0.5 Mb/s 2397 MHz 11b -78dBm signal -78dBm signal antenna 0 Probe Request (AREDN-5-v3) [1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 Mbit]
07:51:16.307066 130264687920us tsft 0.5 Mb/s 2397 MHz 11b -77dBm signal -77dBm signal antenna 0 Probe Request (AREDN-5-v3) [1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 Mbit]
07:51:16.311291 130264692141us tsft 0.5 Mb/s 2397 MHz 11b -76dBm signal -76dBm signal antenna 0 Probe Request (AREDN-5-v3) [1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 Mbit]
07:51:16.322054 130264702924us tsft 0.5 Mb/s 2397 MHz 11b -75dBm signal -75dBm signal antenna 0 Probe Request (AREDN-5-v3) [1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 Mbit]
07:51:16.330155 130264711010us tsft 0.5 Mb/s 2397 MHz 11b -68dBm signal -68dBm signal antenna 0 Probe Request (AREDN-5-v3) [1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 Mbit]
07:51:17.974740 [|802.11]
07:51:19.527098 [|802.11]
07:51:21.377522 [|802.11]

Steve N8LBV



 

Theme by Danetsoft and Danang Probo Sayekti inspired by Maksimer