stratosphereips/argus repository overview

⁠How to run the image in a Rpi

• Login to your Rpi

• Download pipework in the rpi

  wget https://raw.githubusercontent.com/jpetazzo/pipework/master/pipework⁠ chmod 777 pipework

• Run the image and let it waiting for the interface to go up. CHANGE the last string (here RpX) to a unique number (such as Rp23) before executing the line. That is your unique number inside the StratosphereIPS project. If you don't have one, ask one to [email protected]⁠

  docker run -d --name argus stratosphereips/argus:rpiv2 /bin/bash -c "/root/pipework --wait eth1; /opt/sbin/argus -i eth1 -F /root/argus.conf -e '"RpX"'"

• Start pipework in the RaspberryPi

  sudo ./pipework eth0 argus 0/0

  • (It may give you a warning about arping not being available. Don't worry, is not necessary)

⁠That's it! Should be working. Check the traffic with tcpdump.

The raspberry Pi image is based on resin/rpi-raspbian and the argus configuration is based on opennsm/argus

The Docker files are in: https://github.com/stratosphereips/ArgusDockerContainers/tree/master/RaspberryPi⁠ https://github.com/stratosphereips/ArgusDockerContainers/tree/master/Debian⁠