Any ideas? Thanks.

I have a RT-N16 with Tomato Firmware v1.28.7497 MIPSR2-Toastman-RT K26 USB VPN
I have set up mac address static ip.

Take today for example, we were all at school and this is the data tomato got for me:

Well apparently I can't post links to the picures of the data because i'm a low-karma user. So here imagine a picture with a total of 130GB download/upload across 11 hosts for 23/05/2013.

This is the data my ISP is giving me to monitor my data usage :

Here you have to imagine a picture of my isp's website with a total of 2.5GB download/upload for the 23/05/2013.

I have very little knowledge of how tomato works. Some of these devices were not even there that day (like our cellphones and tablets and laptops) and most of them were off(desktop).

The Bandwidth usage of tomato is not doing this, but he is not acurate as far as on what day the data goes. I mean if I downaload 10gb one day, it will appear as such on my isp's website but on tomato the data may be split among 2 days like if he would not register that the day ends at 23:59:59. Take note that I don't know when my isp's website refreshes its data so maybe there some error there too.

Please help me get this straight.

I really hope this is clear and that you have some information for me. If you need more info it will be my pleasure.

Thank you all.

I'm having a strange issue which was present in Shibby 108 and 109. I'm using an Asus RT-N66U. For some reason I get a drop of packets or errors randomly when utilizing local and public sites. I can ping the router for a long time and it will respond at 1MS or better but eventually I will see a response of about 50 to 160MS. This will only occur in two of the response then return to normal. I see in my log the errors below. Could this have something to do with it? I have cleared NVRAM several times with no help at all. Thanks

May 23 14:21:24 unknown user.err kernel: ipt_account [checkentry]: table found, rule network/netmask/shortlisting not match table network/netmask/shortlisting.
May 23 14:21:24 unknown user.crit init[1]: Error while loading rules. See /etc/iptables.error file.

I'm having a strange issue which was present in Shibby 108 and 109. I'm using an Asus RT-N66U. For some reason I get a drop of packets or errors randomly when utilizing local and public sites. I can ping the router for a long time and it will respond at 1MS or better but eventually I will see a response of about 50 to 160MS. This will only occur in two of the response then return to normal. I see in my log the errors below. Could this have something to do with it? I have cleared NVRAM several times with no help at all. Thanks

May 23 14:21:24 unknown user.err kernel: ipt_account [checkentry]: table found, rule network/netmask/shortlisting not match table network/netmask/shortlisting.
May 23 14:21:24 unknown user.crit init[1]: Error while loading rules. See /etc/iptables.error file.

Another way to do this is wget, but that requires a web server on your host.

Nice idea! I could *very* easily run a minimal web server in a python thread then the main python thread uses telnet to wget from it. That sounds perfect, apart from maybe having to open a firewall port on my PC.

The ultimate hack would be reading/writing the binary .cfg configuration file

No I definitely don't want to hard-code the config in the binary. It is a lot more work, plus the config changes over time e.g. as I add more static dhcp entries.

Thanks!

-Thanks

I am assuming that python script is running from a computer. You can put all the needed environment variables and whatever additional commands in a file on the computer and only need "telenet" Tomato to "sh" the file with the proper path. It is far easier to do the heavy lifting on the computer and as little as required on the router side.

The ultimate hack would be reading/writing the binary .cfg configuration file by understanding the source code, but that's probably not the level of work you are committing yourself to.

The other way I'm wondering about is going direct to the gui web server using python, which isn't particularly difficult. All it needs is a POST to /shell.cgi, only catch seems to be that there has to be an _http_id parameter along with the command but I can scrape that by doing a get from /tools-shell.asp. This might well be easier than using scp and won't need an additional library so I might investigate this route more. Also this would let me do the whole nvram set/commit/reboot in one single POST.

Well, flashed the latest Asus firmware and everything worked like a charm (except that it gives me only 30-50% throughput compared to Tomato, but that's another story). So, the problem with channels is apparently from TomatoUSB.

This post is to say Thank You for all of the work you have put into this project, and for the wonderful product of that work.

I've used several of your builds over the past few years primarily on a Linksys WRT610N v2. I've gradually made more and more use of the flexibility of your excellent software on this very good platform. I added a wired bridge to a guest router; added a hard disk for intranet cloud storage; added nginx and media support for a Roksbox; and added VOIP service through a OBi box.

Recently I got a second Linksys WRT610N v2 to use as a wireless attach point. I dedicated the 5GHz radios to WDS between the two routers and gave each router a unique SSID name and channel on 2.4GHz so that I can select which to attach to. It works beautifully with no noticeable difference in connection speed.

This morning I thought I'd upgrade both Linksys WRT610N v2 routers to your -big-vpn v109 build. The original router was still running v87, and the newer router was running v108. I imagined a horror show what with all of the customization and tweaking I've done over the years. To my great surprise and delight, both routers upgraded and connected and all of the custom stuff still works without being reinstalled or re-tweaked. Amazing!!

Shibby, THANK YOU.

-Warren

Thanks!

Of course this script is only really useful for transferring configuration from old to new versions of tomatousb on the same physical router - even with this restriction your MMV.

I haven't even tried that yet myself, want to make sure I've got as good a base as possible before I actually take my router down to upgrade to 109.

To use this, install python 2.7, edit at least the HOST= and password= lines with the values for your router (but really you should also edit the keypatterns for your setup because otherwise you get what I'm interested in), and run the script.

If you're still reading and haven't TL;DR'd, maybe you're asking yourself: 'how do I find which keys I need to transfer?' That's the next thing I'm going to work on - by maybe saving the router config, erasing my router, capturing the default config, then reloading the config and then I can see what has been changed in my router, i.e. the keys which don't have default values. Some of these may be side-effects, but at least I will have got rid of the noise from ones I don't need to worry about.

 #!/usr/bin/python # Written by barny # This is free software to do with as you wish, with no restrictions. # However don't blame me if it doesn't quite do what you hope it might # # see http : / / www . linksysinfo . org / index.php?threads / using-qos-tutorial-and-discussion.28349 / page-3#post-138676 # import sys import time import telnetlib import re HOST = '192.168.2.1' user = 'root' password = 'yourrootpassword' # set to True if you want to only get the keys which match keypatterns (which is faster) into myconfig.txt # otherwise False captures all keys in rawconfig.txt and the matching patterns in myconfig.txt ONLYKEYPATS = False MYCONFIGFILE = 'myconfig.txt' RAWCONFFILE = 'rawconfig.txt' # escape a raw string to something shell-friendly by adding backslash escapes def escapestring(s): ret = re.sub(r'([\\\"])', r'\\\1', s) return ret # read an nvram key from the router def getnvramkeyvalue(k): tn.write( "nvram get %s\n"% (k) ) rawresp = tn.read_until("root# ") # strip off the prompt lines at start and end of response resp = rawresp.splitlines()[1:-1] # reconstruct the key value keyval = "\n".join(resp) return keyval # update_progress() : Displays or updates a console progress bar ## Accepts a float between 0 and 1. Any int will be converted to a float. ## A value under 0 represents a 'halt'. ## A value at 1 or bigger represents 100% # (from stackoverflow 'text progress bar in console' with some minor tweaks) def update_progress(progress): barLength = 50 # Modify this to change the length of the progress bar status = "" if progress < 0: progress = 0 status = "Halt...\r\n" if progress >= 1: progress = 1 status = "Done...\r\n" block = int(round(barLength*progress)) text = "\rPercent: [{0}] {1}% {2}".format( "#"*block + "-"*(barLength-block), int(progress*100), status) sys.stdout.write(text) sys.stdout.flush() # these keypatterns match from start of keyname - they don't have to match the whole key - if you want to match whole key put $ at the end of the pattern # they are regexes in python syntax (although I don't think that's very different from e.g. perl # This list is specific to your configuration of Tomato! e.g. I have an RT-N66u running dual networks with a guest network on 10.0.x.x so I need to transfer lan1 and wl0.1 # be careful not to have two patterns match the same key! It will print an error message if you do this # also a report is made at the end of any of these patterns which haven't matched any actual key keypatterns = [ "rrule[0-9]+" ,"wl0_" ,"wl0.1_" ,"wl1_" ,"lan1_" ,"landevs" ,"limit_br1_" ,"dhcp_" ,"dhcpd_" ,"dhcpd1_" ,"ddnsx[0-9]" ,"script_wanup" # I don't use qos ,"qos_" ,"lan_" # ,"lan_hostname" # ,"lan_ipaddr" ,"wan_proto" ,"wan_hostname" ,"wan_domain" # AFAICT THIS DOESN'T EXIST ,"pppoe_username" # AFAICT THIS DOESN'T EXIST ,"pppoe_passwd" ,"ppp_username" ,"ppp_passwd" ,"router_name" ,"http_passwd" ,"tomatoanon" ,"smbd_" ,"portforward" ] tn = telnetlib.Telnet(HOST) print "Waiting for telnet login prompt from", HOST tn.read_until("login: ") tn.write(user + "\n") if password: tn.read_until("Password: ") print "Sending password" tn.write(password + "\n") print "Logged in" # capture a full nvram export and process to get all the keys tn.read_until("root# ") tn.write( "nvram export --set\n" ) resp = tn.read_until("root# ") #open("raw.txt","w").write(resp) keypatt = re.compile( "^nvram set (\S+?)=" ) keys = [] for l in resp.splitlines(): if l.startswith( "nvram set "): m = keypatt.match( l ) if m: keys.append( m.group(1) ) # sort the keys keys.sort() #print keys print "Keys retrieved" print "Reading keys in sorted order" # now capture each key in sorted order rawconfig = "" pattconfig = "" # kpunmatched lets me validate that all my key patterns have been seen at least once - helps spot typos # populate with all the keypatterns - and remove them as they match kpunmatched = {} for kp in keypatterns: kpunmatched[kp] = True # scan through tehe sorted list of keys, retrieving as appropriate complete = len(keys) n = 0 for k in keys: n += 1 update_progress( 1.0*n/complete ) if ONLYKEYPATS: # check for key being matched by any keypattern alreadymatched = False for kp in keypatterns: # fullpat = "^%s$"% (kp) # m = re(fullpat).match(key) if re.match(kp,k): if alreadymatched: print "Pattern ",kp," matches two keys!",k alreadymatched = True # print ".", if kp in kpunmatched: del kpunmatched[kp] keyval = getnvramkeyvalue(k) # create a nvram set string from the key and its value setstr = "nvram set %s=\"%s\""% (k, escapestring(keyval)) pattconfig += setstr + "\n" else: # print ".", keyval = getnvramkeyvalue(k) # create a nvram set string from the key and its value setstr = "nvram set %s=\"%s\""% (k, escapestring(keyval)) rawconfig += setstr + "\n" # print setstr alreadymatched = False for kp in keypatterns: if re.match(kp,k): if alreadymatched: print "Pattern ",kp," matches two keys!",k alreadymatched = True if kp in kpunmatched: del kpunmatched[kp] pattconfig += setstr + "\n" ## doesn't seem to be needed: # update_progress( 1.0 ) print "Writing to file" if not ONLYKEYPATS: open( RAWCONFFILE,"wt").write(rawconfig) print "Full config written to",RAWCONFFILE open( MYCONFIGFILE,"wt").write(pattconfig) print "Selected config written to",MYCONFIGFILE tn.write("exit\n") # check for unmatched key patterns if len( kpunmatched ) > 0: print "Unmatched patterns:", kpunmatched print "Finished" 

However nvram export dumps the keys in random order and as some are multi-line you can't simply sort the output file - the random order also makes it difficult to understand all the keys anyway, and therefore difficult to compare configurations.

I've written this python script below which reads all the nvram keys, sorts them alphabetically and then retrieves each key in the sorted order, capturing the result in file rawconfig.txt in nvram set format (sort of, anyway, not sure about escaping quotes, haven't tested this by trying to run it on my router yet). At least this format will let me a) store the default config of a newly flashed router, then b) capture the config of my configured router, and c) let me compare the config at any time with either of these, using diff. And this format is quite illuminating because all of a sudden you can see the related configuration items together.

Unless someone says 'don't be so silly, go to <link> where someone has already solved this problem properly', I'm going to extend this with filtering on the capture, so it records my transferrable subset of keys in a different 'nvram set' script which it will also be able to apply to a newly flashed router to set up all the nvram keys I need to transfer. I know this won't be able to handle every case but I'm expecting it might be able to do 99% automatically - which for me makes it worth the effort to write the python script.

I use python 2.7 32-bit on Windows, don't know if this will work on Linux but it shouldn't be difficult to get it to work.

 #!/usr/bin/python # Written by barny # This is free software to do with as you wish, with no restrictions. However don't blame me if it doesn't work import telnetlib import re HOST = '192.168.2.1' user = 'root' password = 'myrootpassword' tn = telnetlib.Telnet(HOST) tn.read_until("login: ") tn.write(user + "\n") if password: print "waiting for password" tn.read_until("Password: ") print "sending password" tn.write(password + "\n") print "logged in" # capture a full nvram export and process to get all the keys tn.read_until("root# ") tn.write( "nvram export --set\n" ) resp = tn.read_until("root# ") #open("raw.txt","w").write(resp) keypatt = re.compile( "^nvram set (\S+?)=" ) keys = [] for l in resp.splitlines(): if l.startswith( "nvram set "): m = keypatt.match( l ) if m: keys.append( m.group(1) ) # sort the keys keys.sort() #print keys rawconfig = "" # now capture each key in sorted order for k in keys: tn.write( "nvram get %s\n"% (k) ) rawresp = tn.read_until("root# ") resp = rawresp.splitlines()[1:-1] keyval = "\n".join(resp) setstr = "nvram set %s=\"%s\""% (k, keyval) rawconfig += setstr + "\n" print setstr open( "rawconfig.txt","wt").write(rawconfig) # next step is to get only the keys which match keypatterns and save this refined config as a nvram set shell file # NOT IMPLEMENTED YET tn.write("exit\n") 

I just upgraded from DD-WRT to Toastman's Tomato for the Buffalo WHS-G54S (including resetting nvram and configuring from scratch). Everything seems to work really well. But I'm just a bit concerned that various online port scan services report port 21 and 80 to be open. I used whatsmyipDOT-ORG/port-scanner and securitymetricsDOTcom. I'm using totally default settings. What gives?

Thanks a lot!

http://en.m.wikipedia.org/wiki/Private_network

I have no doubt the wan port is gigabit at hardware level the division of ports into lan/wan is done by nvram vars and driver the fact some speedtests achieve more than 100 proves that.

Now whether or not the router CPU can route your traffic at that speed is an entirely different matter.

Given that PPPoE uses more CPU than routing IP packets and Tomato might not be using the hardware accelerated NAT driver (CTL) vs the stock firmware, that could account for the slower speeds.

Check that if your CPU is already running at 100%, nothing other than upgrading to a faster router or switching back to factory firmware can get you the extra speeds. You can only overclocking by so small a percentage that it is not even worth the effort.

 "watch-dir": "/mnt/Torrents2do", "watch-dir-enabled": true , "rpc-whitelist": "127.0.0.1,192.168.1.101" , 

my problem is that after a sheduled reboot Transmission locks me out due to a whitelist
i have to restart the transmission deamon again to make the custom config work

how can i fix that?

thanks

Thanks!

Gigabit Ethernet 4-port switch.

This must have been a gift to you. Nodody would buy for themselves a router with 100 Mbps wan Port and 200 Mbps upload speed !
BTW, What in the Sam Hell are you planning to do with 200 Mbps upload ? Sending Spam ???

One question though: I'm looking for a way to save the MAC address of a PC for remote WoL. In DD-WRT you have the option to remember the MAC address of the active clients through Administration -> WoL page.

Is a similar feature available?

I noticed that on advanced/miscellaneous at wan port speed there is no 1000 option, only 10 full/half, 100full/half and auto. I let it on auto. My pc shows connection speed 1Gbps, so the lan port is gigabit, but the wan ?
Also the qos is disabled, firewall is untouched, i did not change anything, i have no ideea if is on or off

EXTENDED VERSION

• I prefer to put all my new welcome page + image + css into /www/ext/splashd directory…. it is in memory. To use this method, you must enable JFFS, save all html + image + css to JFFS, create some script in tomato GUI > admin > script to copy all captive portal files in JFFS into /www/ext/splashd. When the router reboot, our new captive portal will always copy to memory.

*The idea is actually utilizing web server, add some ASP script…authenticate users using ASP & database server. but unfortunately our ASP script not working inside /www/ext. FYI, /www is read only. /www/ext writable and available to us.

*The best solution, install optware, install second webserver, install mysql server and develop full featured captive portal.

TQ. Sorry for bad english ;P

The stock firmware (to my knowledge) does not support Client Bridge/Wireless Ethernet Bridge either (which is something I really need).

http://support.asus.com/Search/KDetail.aspx?SLanguage=en&no=A02827F8-3DB9-CC0E-5F67-85F7D3FB48E4&t=2

So I tried this on DD-WRT and had the same problem (mainly, not possible). I chose TomatoUSB over DD-WRT because TomatoUSB has native NTFS sharing support while DD-WRT does not (at least nothing I, as a novice, could easily configure). Important Limitation: My router does not have internet! That is, it is being used as a Wireless Ethernet Bridge and has no WAN of its own. Therefore, issuing "get" commands won't find anything—I've confirmed that the router, despite being a WEB, cannot access the internet by itself (telnet, ping, nothing).

I successfully enabled JFFS.

I successfully copied the necessary drivers from the "extras" pack found in the downloads section of this site (apparently, new users can't even link to an internal page…). Those drivers are mii.ko, cdc_ether.ko, usbnet.ko and rndis_host.ko.

The success stopped here: insmod does not load the drivers successfully.

root@unknown:/jffs/drivers# insmod mii.ko
insmod: can't insert 'mii.ko': invalid module format

Inputting dmesg on a whim, I saw this at the bottom.

mii: version magic '2.6.22.19 mod_unload MIPS32_R1 32BIT ' should be '2.6.22.19
mod_unload MIPS32_R2 32BIT '
mii: version magic '2.6.22.19 mod_unload MIPS32_R1 32BIT ' should be '2.6.22.19
mod_unload MIPS32_R2 32BIT '
usbnet: version magic '2.6.24.111 mod_unload MIPS32_R1 32BIT ' should be '2.6.22
.19 mod_unload MIPS32_R2 32BIT '

What does this error mean, and is it possible to surmount it so I can connect my cell phone (4G) to this router? Enabling "USB modem" mode did nothing. Later research suggested using these settings:

APN: integsm.vzw3g.com
Username: Mobile [email]moc.g3wzv|rebmuN#moc.g3wzv|rebmuN
Password: vzw

But they failed.

Also, other Googling suggested "USB tethered phone does not equal USB modem" (that is, support for the latter does not imply support for the former).

I can ssh to it and run linux command as far as I know it's a Linux based system running on a router.

then why it is not embedded Linux?

thx