Running weewx 4.1.1 on RasPi3 using weewx-interceptor current as of this 
post.  Weewx was installed using .deb instructions on Weewx install page 
(Python3 option).  I'm also running through a switch with port mirroring 
from WS-2000 (802.11) to RasPi (Ethernet).  When I installed 
weewx-interceptor, I used the command:

sudo pip3 install pypcap

tcpdump shows that HTTP GET requests are making it to the Pi:

sudo tcpdump -i eth0|grep HTTP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
18:19:17.350471 IP 192.168.1.179.4858 > ec2-52-35-193-72.us-west-2.compute.
amazonaws.com.http: Flags [P.], seq 1:530, ack 1, win 5840, length 529: HTTP
: GET /weatherstation/updateweatherstation.php?ID=XXXXXXXXXX&PASSWORD=
XXXXXXXX&indoortempf=75.7&tempf=79.0&dewptf=41.2&windchillf=79.0&
indoorhumidity=31&humidity=26&windspeedmph=2.5&windgustmph=6.9&winddir=353&
absbaromin=23.459&baromin=23.459&rainin=0.000&dailyrainin=0.000&weeklyrainin
=0.110&monthlyrainin=0.000&yearlyrainin=0.220&solarradiation=67.16&UV=0&
dateutc=2020-06-03%2000:19:16&softwaretype=AMBWeatherV4.1.9&action=updateraw
&realtime=1&rtfreq=5 HTTP/1.0
18:19:17.409177 IP ec2-52-35-193-72.us-west-2.compute.amazonaws.com.http > 
192.168.1.179.4858: Flags [P.], seq 1:144, ack 530, win 27872, length 143: 
HTTP: HTTP/1.1 200 OK
18:19:33.446953 IP 192.168.1.179.22265 > ec2-52-35-193-72.us-west-2.compute.
amazonaws.com.http: Flags [P.], seq 1:530, ack 1, win 5840, length 529: HTTP
: GET /weatherstation/updateweatherstation.php?ID=XXXXXXXXXX&PASSWORD=
XXXXXXXX&indoortempf=75.7&tempf=78.8&dewptf=40.1&windchillf=78.8&
indoorhumidity=31&humidity=25&windspeedmph=1.3&windgustmph=5.8&winddir=353&
absbaromin=23.459&baromin=23.459&rainin=0.000&dailyrainin=0.000&weeklyrainin
=0.110&monthlyrainin=0.000&yearlyrainin=0.220&solarradiation=65.45&UV=0&
dateutc=2020-06-03%2000:19:32&softwaretype=AMBWeatherV4.1.9&action=updateraw
&realtime=1&rtfreq=5 HTTP/1.0
18:19:33.504446 IP ec2-52-35-193-72.us-west-2.compute.amazonaws.com.http > 
192.168.1.179.22265: Flags [P.], seq 1:144, ack 530, win 27872, length 143: 
HTTP: HTTP/1.1 200 OK

My weewx.conf Interceptor config:

[Interceptor]
    driver = user.interceptor
    device_type = wu-client
    mode = sniff
    iface = eth0
    pcap_filter = src 192.168.1.179 and dst port 80
    promiscuous=True

Running tail -f /var/log/syslog I get the following:

tail -f /var/log/syslog
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: StationRegistry: 
Registration not requested.
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: Wunderground: 
Posting not enabled.
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: PWSweather: Posting 
not enabled.
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: CWOP: Posting not 
enabled.
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: WOW: Posting not 
enabled.
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.restx: AWEKAS: Posting not 
enabled.
Jun  2 18:25:26 weatherpi weewx[2284] INFO __main__: Starting up weewx 
version 4.1.1
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.engine: Using binding 
'wx_binding' to database 'weewx.sdb'
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.manager: Starting backfill 
of daily summaries
Jun  2 18:25:26 weatherpi weewx[2284] INFO weewx.engine: Starting main 
packet loop.

And then it just sits there...no packets are captured.  Same problem as 
documented above, but promiscuous mode doesn't seem to remedy the problem.  
Any thoughts/suggestions?

On Saturday, February 24, 2018 at 5:53:43 PM UTC-7, Brian Harvell wrote:
>
> I'm using a raspberry pi 3 and I noticed the interceptor was only able to 
> sniff traffic while I was running tcpdump. If it stopped tcpdump then 
> interceptor wouldn't see any more traffic. I noticed in the log it said 
> promiscuous = 0 and once I added  promiscuous = 1 to my config and it seems 
> to work fine now, even after a reboot.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/1f09aed0-3272-4042-ae6c-4207d5f468e1%40googlegroups.com.

Reply via email to