configure a mini linux MK802IV with tcpdump to capture everything passing trough a RJ45 port

Hello there. I'm good in Linux system administration, so I think I can help you. Are you going to provide remote access to the mini pc? Regards, Askar

When you are talking about thing like sniffing i'm your guy. So it is not a problem to do the sniffing job, if you already have the picuntu installed on the MK. I also think that you giving a lot swot of money, so i will able to do it for you for 300usd. The only thing is not possible to sniff the network through switch, you can only do that through a hub, because the packets which goes through the switch had a given destination, so it's not possible to your MK to get it. (maybe you can sniff it if the switch is some bad switch like tp-link etc...

############################################################################################################################################################################################################################

hello, you can place your confidence in my C/Linux knowledge and experience. please feel free to ask for more information. greets, srdjan

Hello there, please let me know what type of switches will you be connecting the switch, as we can do so mixture between tcpdump and wireshark on that appliance you mentioned. PLease come online and discuss, Sebastian

Hi I am a RedHat Certified Engineer with expertise Linux Server administration, Server Optimization and Server Management. I have over 5 years experience in Linux administration, Continuous Integration and Development support services. I would like to work on this project. Please let me know when we can discuss on this. Thanks, LinuxAdminz

Hi, I've already done this on linux on a pc. There's no problem about the issue posed by odessky becouse the problem of poisoning the net to eavesdrop all the packet was alredy resolved a lot of time ago. Eng. Fulvio Di Maria

I assume that you will provide ssh access to the Cloudsto MK802IV. Also, you will connect the usb to rj45 adapter to the cloudsto, right? If you provide both of these steps I can help you configure it and dump all of the information to the MK802IV. One catch is that depending on the traffic on the ethernet port, the 2 gigs of space on the device might not be enough, so if you have another linux box which can be used to export the captured data, that would be great. Cheers.

Summary Talented system administrator with 13 years of experience maintaining computing environments by identifying operative system requirements, installing upgrades, and monitoring performance. Expertise in establishing secure networks by evaluating operative system vulnerabilities, performance issues including availability, utilization, planning and executing the selection, installation, configuration, and testing of infrastructure software in mixed environment, defining Microsoft Active Directory policies and configurations in the forest, establishing improvements and Unix scripting solutions. Highlights Operative System troubleshooter (Windows, Linux and Unix) Network configuration and support Active Directory VMWare installation and configuration Backup and Disaster recovery (EMC Networker) Citrix Xenapp Microsoft Exchange Management Microsoft TMG Gateway Management Hp Sam (EVA) Management Mcafee Epo Administration Sharepoint administration System Center Configuration Manager

Assumptions for feasibility of the project: The device starts up on its own tcpdump is available for the device (I do not have one of these to veirfy that) SSH (o rother remote) access is available to get into the device for initial configuration Other default commands/services are available (init scripts, logrotate, cron, date, etc.) There are not unexpected limitations on the ethernet card's ability to go into promiscuous mode In order to complete the project I will access the device, presumably remotely (unless it can be mailed to me for physical access) and verify the assumptions above. Once complete, I would guess (but verify first, of course) the ideal situation is that whenever the system starts it immediately (after booting) begins tracing and writing to a capture file. That file could either be one staticly-named file, or something with a timestamp to allow repeated use without overwriting the previous file. Considering the available space on the device it is understood that filling the filesystem is a distinct possibility and will be managed by the owner of the device. Steps: Create init script for tcpdump service Configure init script to auto-start tcpdump with required flags to capture all traffic and write to a file Test Please feel free to reach out to me to confirm any of the assumptions above or to ask questions.