Linksys WRT Products running HyperWRT Firmware 

Link Logger Set Up

NOTE the default Linksys firmware does not support external logging tools as Linksys disabled that functionality within their firmware so you must run a third party firmware such as HyperWRT or SveaSoft or other similar third party firmware in order for your Linksys to support external logging tools like Link Logger

1.Download and Install Link Logger

2. Next Configure Link Logger

To find this screen select 'Edit' from the main menu and then select the 'Setup...' option and click on the 'Router' tab.  The Router Address is the internal LAN IP address of your Linksys (192.168.1.1 by default).

3. Configure the Linksys HyperWRT firmware to log traffic and send it to Link Logger

There are two things which must be done here

1. Click on the Startup button and enter a startup script (your script might differ but this is offered as a sample).  NOTE you must enter the IP address of the system running Link Logger on the third line, in our case 192.168.1.100

sleep 2
/sbin/klogd
/sbin/syslogd -R 192.168.1.100
echo "#!/bin/sh" > /tmp/loggit.sh
echo "while true" >> /tmp/loggit.sh
echo "/usr/bin/killall -9 klogd" >> /tmp/loggit.sh
echo "sleep 1" >> /tmp/loggit.sh
echo "/sbin/klogd" >> /tmp/loggit.sh
echo "sleep 960" >> /tmp/loggit.sh
echo "done" >> /tmp/loggit.sh
chmod 700 /tmp/loggit.sh
/tmp/loggit.sh &

2. Click on the Firewall button and enter a Firewall Script (again your script might differ depending on your requirements)

/usr/sbin/iptables -R INPUT 7 -j logdrop
/usr/sbin/iptables -R INPUT 1 -j logdrop -m state --state INVALID

 

3. Enable logging within the firmware

4. Ensure that 'Filter Internet NAT Redirection' is disabled as it will prevent the Linksys from logging correctly (note you might have to power cycle your Linksys after disabling 'Filter Internet NAT Redirection' to get logging started).

FAQ for Install Issues

• If Link Logger stops logging check to see if the IP address of the logging system has changed as sometime the DHCP will assign a new IP address to the system running Link Logger and hence will not receive the logging information.

• If you get an error when starting Link Logger, please make sure that you don't have other logging software running when you start Link Logger, as only one application can process Syslog messages at a time.

• If Link Logger doesn't work and your running ZoneAlarm or any similar product please ensure that it is allowing communication between Link Logger and your Linksys Router.  Link Logger does attempt to ping your router on startup, and your Linksys Router sends its logging information to Link Logger via Syslog messages (UDP port 514).  If the ping is blocked then Link Logger displays a message stating that it couldn't communicate with the Router.  If the Syslog messages are blocked then Link Logger doesn't log anything as it doesn't receive any logging information.

• Link Logger does have an uninstall program for easy removal.  You can remove Link Logger using 'Remove Programs' in the Windows Control Panel.

If Link Logger is still not working email Link Logger Support