WLAN Monitor Mode (Nzyme)

Apr 16, 2022 Last reply: vor 4 Jahren 12 Replies

Hallo,



kann das eingebaute WLAN-Modul des Raspi4 den Monitor Mode bedienen, oder braucht man dafür einen speziellen (besseren) WLAN-Adapter? Hätte hier noch einen TP-Link WN823N rumliegen.



Habe Nzyme erfolgreich installiert und gestartet (inkl. Postgresql). Aber es funktioniert nicht.



Der Dienst scheint zu laufen laut



systemctl status nzyme.service



aber http://127.0.0.1:22900 ist nicht erreichbar.



Läuft da evtl. eine Firewall?


M:


Am 17.04.22 um 00:13 schrieb Matthias Gerds:

Hey,

wondering if the WLAN module of the Raspi4 is capable of the Monitor Mode, or do I have to buy another specialized WLAN adapter for that purpose? Got a free TP-Link WN823N here.

Installed Nzyme successfully and startet it (incl. Postgresql). But it doesn't function.

The nzyme service seemes to be running according to

systemctl status nzyme.service

but

http://127.0.0.1:22900 isn't reachable.

Maybe due to a running Firewall?

M:

127.0.0.1 is localhost, and generally only used to connect two processes together. Since port 22900 is a Siemens licensing server, its very unlikely that it will be running at 127.0.0.1 on your Raspi - 127.0.0.1 is localhost and used only to interconnect two processes running on the same host.

RPis usually don't run firewalls by default. Things to check:

- what address is assigned to your RPi and how is it assigned?

- what other hosts are on your LAN that you can use to scan your RPi? You'll have to install nmap and/or Wireshark on it if neither is installed. - you can use 'nmap' to scan another host on your LAM to show what ports are open on it. Use either its IP or its hostname to identify the host you want to scan.

- Wireshark can capture and display messages on your LAN as well as saying which hosts are sending and receiving the messages.

Am Sonntag, 17. April 2022, um 00:31:35 Uhr schrieb Matthias Gerds:

Maybe read that page:

formatting link

Are there any error message in the logs?

What is the exact message? Is the deamon listening? Check that with netstat.

Check iptables, ufw and firewalld, according to your OS.

But he's installed nzyme which defaults to that port

formatting link

I nmap-ed the Rpi from another PC in my LAN:

mg@Neptun:~$ nmap -Pn xxx.xxx.xxx.xxx Starting Nmap 7.70 (

formatting link
) at 2022-04-17 12:07 CEST Nmap scan report for xxx.xxx.xxx.xxx Host is up (0.050s latency). All 1000 scanned ports on xxx.xxx.xxx.xxx are filtered

Nmap done: 1 IP address (1 host up) scanned in 5.92 seconds

On Rpi itself (localhost): ... All 1000 scanned ports on xxx.xxx.xxx.xxx are closed. ...

Hm, might be still a configuration fault in nzyme.conf.

M:

Am Sonntag, 17. April 2022, um 12:21:19 Uhr schrieb Matthias Gerds:

That means the deamon is not running. Check the logs of the service and syslog.

Or a firewall is blocking it, as others have said, to tell the difference use netstat on the Pi, e.g.

netstat -pant | grep 22900

Sounds likely. One thing is for certain: its certainly not going to find anything external to its host system on 127.0.0.1 !

Ooops, thanks! Tried netstat before but was overwhelmed by the output ...

netstat -pant | grep 22900

shows just nothing. Seems, nzyme service isn't running ...

M:

Am Sonntag, 17. April 2022, um 13:13:46 Uhr schrieb Matthias Gerds:

Seems so, so check the logs to find out why it is not running.

This may help

formatting link

I was going to make note of, and forgot, that this uses log4j, so keep that updated.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required