[new] Kernel 2.6.24.4 With Cpufreq, Updated: Jul. 16 2008 Options

[2or0]

Updated: Jul. 16 2008
- RNDIS patch
- PRISM2_DOWNLOAD_SUPPORT and PRISM2_NON_VOLATILE_DOWNLOAD enabled
http://yonggun.tistory.com/72

Great work! 2or0,

One question:
Why are the ip_tables related modules gone in the newer kernel?

Can´t find them in the 2.6.24.3/4 kernel.

Did you check here?
\lib\modules\2.6.24.4-yonggun\kernel\net\ipv4

[Capn_Fish]

Great! I will be flashing this ASAP!

I think you mean July 16 and not August 16, right?

EDIT: I mean installing the modules ASAP.

[2or0]

I think you mean July 16 and not August 16, right?

I fixed it

[matthis]

Thank you very much!!!

[scottlfa]

Thanks for this kernel, and ease of flashing without the uboot process. Boots nicely and straight too the SD

[matthis]

Hi 2or0, thanks for your help every time.
Could you provide a lirc module?
I would like to control my tv with my zaurus

Thanks in advance

[Capn_Fish]

Hi 2or0, thanks for your help every time.
Could you provide a lirc module?
I would like to control my tv with my zaurus

Thanks in advance

If you get it working, would you mind posing a how-to?

[born2wonder]

Updated: Jul. 16 2008
- RNDIS patch
- PRISM2_DOWNLOAD_SUPPORT and PRISM2_NON_VOLATILE_DOWNLOAD enabled
http://yonggun.tistory.com/72

Great work! 2or0,

One question:
Why are the ip_tables related modules gone in the newer kernel?

Can´t find them in the 2.6.24.3/4 kernel.

Did you check here?
\lib\modules\2.6.24.4-yonggun\kernel\net\ipv4

Hi 20r0 ,

First of thanks for a great debian distro with your latest patches/optimizations that works (almost) flawlessly on my c1000 (though I had to extract rootf and flash the kernel manually).

I am trying to get some network penetration software working on my C1000 running andromeda with latest yonggun kernel , sharp bootloader on a 4G sd.
I tried running a MITM (man in the middle ) attack using ettercap (GTK) on my home network but had no success ,while i can do it with my linux laptop on the same network just fine.

I get the following error in the the console while starting sniffing in ettercap:

CODE

iptables v1.4.1.1: can't initialize iptables table 'nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

I have also enabled forwarding in the configuration files in ettercap so as to use iptables and i enabled IP forwarding in /proc/sys/net/ipv4/ip_forward

Googling around led me to this needed modules

which says that i need these modules :

modprobe ip_tables
modprobe ip_conntrack
modprobe iptable_filter
modprobe ipt_state

Through lsmod i see i have iptable_filter and ip_tables loaded but not the other two. I have searched through the whole root filesystem (/) but they are not there, even in \lib\modules\2.6.24.4-yonggun\kernel\net\ipv4. Can you please add the remaining two to your next kernel or as separate modules?

If there are other solutions that to fix this problem , please let me know

You can get the same error if you type :

CODE

iptables -t nat -L -n

Any one managed to get ettercap to work properly ??

Thanks again 20r0 for your amazing contributions to the zaurus community!

[born2wonder]

UPDATE: (Partial success)

i tried the MITM attack (ettercap) using my laptop on my home network and noticed i get the same error (can't initialize 'nat' table) that i get on the zaurus but it works on my laptop running ubuntu so i figured that this error might not be the root of the problem. After trial and error i came to a solution of steps that will make my zaurus so as to be able sniff through ettercap but it still cannot handle sites that use ssl so as to create and fill fake ssl-certificates on the fly.

Now the other error on the z that does not appear on my laptop is : dissector 'dns' not supported (etter.conf line 70)

line 70 in etter.conf reads dns=53

The commands corresponding to the ssl dissection used by ettercap are :

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

Also the extra modules which i think are needed to be able to do this ssl redirectio that appear on my laptop and not on the zaurus are :

ipt_REDIRECT
iptable_nat
nf_nat
nf_conntrack_ipv4
nf_conntrack

On the zaurus i have iptable_mangle loaded instead of the ones above (among the common ones in both; ip_tables, iptable_filter and x_tables)

Any ideas any1 to get ssl sniffing working ? or how to get (some of) these modules ?

Thnx in advance

[maemorandum]

UPDATE: (Partial success)

i tried the MITM attack (ettercap) using my laptop on my home network and noticed i get the same error (can't initialize 'nat' table) that i get on the zaurus but it works on my laptop running ubuntu so i figured that this error might not be the root of the problem. After trial and error i came to a solution of steps that will make my zaurus so as to be able sniff through ettercap but it still cannot handle sites that use ssl so as to create and fill fake ssl-certificates on the fly.

Now the other error on the z that does not appear on my laptop is : dissector 'dns' not supported (etter.conf line 70)

line 70 in etter.conf reads dns=53

The commands corresponding to the ssl dissection used by ettercap are :

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

Also the extra modules which i think are needed to be able to do this ssl redirectio that appear on my laptop and not on the zaurus are :

ipt_REDIRECT
iptable_nat
nf_nat
nf_conntrack_ipv4
nf_conntrack

On the zaurus i have iptable_mangle loaded instead of the ones above (among the common ones in both; ip_tables, iptable_filter and x_tables)

Any ideas any1 to get ssl sniffing working ? or how to get (some of) these modules ?

Thnx in advance

Use the old kernel (23.9) with the integrated ip-tables modules. This will work.

[born2wonder]

UPDATE: (Partial success)

i tried the MITM attack (ettercap) using my laptop on my home network and noticed i get the same error (can't initialize 'nat' table) that i get on the zaurus but it works on my laptop running ubuntu so i figured that this error might not be the root of the problem. After trial and error i came to a solution of steps that will make my zaurus so as to be able sniff through ettercap but it still cannot handle sites that use ssl so as to create and fill fake ssl-certificates on the fly.

Now the other error on the z that does not appear on my laptop is : dissector 'dns' not supported (etter.conf line 70)

line 70 in etter.conf reads dns=53

The commands corresponding to the ssl dissection used by ettercap are :

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

Also the extra modules which i think are needed to be able to do this ssl redirectio that appear on my laptop and not on the zaurus are :

ipt_REDIRECT
iptable_nat
nf_nat
nf_conntrack_ipv4
nf_conntrack

On the zaurus i have iptable_mangle loaded instead of the ones above (among the common ones in both; ip_tables, iptable_filter and x_tables)

Any ideas any1 to get ssl sniffing working ? or how to get (some of) these modules ?

Thnx in advance

Use the old kernel (23.9) with the integrated ip-tables modules. This will work.

Thanks for the reply but I cant find this kernel for the c1000 for sharp rom !

Can 20r0 please add the ip_table related modules to the kernel?

[2or0]

Can 20r0 please add the ip_table related modules to the kernel?

Check here. I added ip_table related modules.
http://yonggun.tistory.com/72

Yonggun

[born2wonder]

Can 20r0 please add the ip_table related modules to the kernel?

Check here. I added ip_table related modules.
http://yonggun.tistory.com/72

Yonggun

Thanks 20r0 !!!

Ur the best.

[maemorandum]

KERNEL - PANIC!

Tried the new Kernel 2.6.24.4 on the C1000 because i needed the ip-tables-modules with the hostap-driver.
The Sytem boots perfectly! ---- but -----

Unfortunately none of my WLAN-CF cards works with the hostap-drivers (they did with the C3200 and the 2.6.23 kernel). I blacklisted all orinocos and hermes - same result: Doing an

CODE

ifconfig wlan0 up

produces many error-code lines and exits finally in a

CODE

Kernel panic - not syncing: Fatal exception in interrupt

any idea? Anyone got the hostap-driver working?

[xamindar]

KERNEL - PANIC!

Tried the new Kernel 2.6.24.4 on the C1000 because i needed the ip-tables-modules with the hostap-driver.
The Sytem boots perfectly! ---- but -----

Unfortunately none of my WLAN-CF cards works with the hostap-drivers (they did with the C3200 and the 2.6.23 kernel). I blacklisted all orinocos and hermes - same result: Doing an

CODE

ifconfig wlan0 up

produces many error-code lines and exits finally in a

CODE

Kernel panic - not syncing: Fatal exception in interrupt

any idea? Anyone got the hostap-driver working?

I have this exact same problem. I had noticed that I was only on the 2.6.24.3 kernel so I flashed to the 2.6.24.4 kernel and added the latest modules (the ones updated on august 6th with the iptables modules) and now both my wifi cards cause a kernel panic. They don't always do it right away but within a minute it panics with the same interrupt error.

I guess I'll try the previous module pack and see if that works. If not then I'll be back to 2.6.24.3 where everything seemed to work. I did compile an rt73 driver for a usb wifi card I have against this kernel this morning and it works great so I'm thinking either it is an issue with the way yonggun compiled these modules or maybe only a cf slot issue with this kernel.

Guess for now I'll have to go back to the 2.6.24.3 kernel and go through the long process of compiling this rt73 driver again