Blue Team RF Setup - sofwerx/mad-jack GitHub Wiki

Computer Setup

OS

Configurating the computer which will execute and host all the activity of a node needs to be able to support the needed software and hardware, because of this a Linux based operating systems is prefered. Within the project a Ubuntu based version of Linux was used, Pop OS. However any version newer then 17.10 of Ubuntu will be suitable.In the following Guide a step by step process covers the process of setting a device up with Pop OS.

Docker

Installing docker is a major component in the system setup before having the whole project in motion. This detailed Guide which covers many components of the process of incorporating and using docker within Linux will cover all that is needed for our use case.

Following the steps regarded within the provided guide will familiarize you with how to setup the other components needed for the monitoring system, however only step one is vital in the process of configuring Docker. Next, after you have installed the Docker, install the Compose library by running pip install docker-compose.

SDR Setup

  • RTL-SDR setup is summarized with the following commands listed in the Driver Installation section in the guide by Kenn Ranous. To test if your RTL-SDR is properly recognized when connected type the following command in terminal: rtl_test -t

  • HackRF setup is summarized with the following commands listed in the Github page of the HackRF developer, Michael Ossmann. Through following the prepare instruction and installation through package manager, your system will be ready to use a HackRF. Testing the HackRF connection, once the installation is complete, can be done through the following command in terminal: hackrf_info

Docker Images and Containers

ElasticSearch

This would most efficiently be set through Docker and the following ElasticSeach build.

With Docker configured, going within the directory of the cloned repository for the ElasticSeach build and executing docker-compose up in terminal. To test you can check the following link for activity. To establish the input link to attach to the connector module in GammaRF you need the Local IP of the device hosting the database within the monitored network, followed by the index you wish the data to be labeled under and the subindex. (Example http://192.168.0.129:9200/gammarf/asdf).

GammaRF

To install GammaRF and all its needed libraries redirecting to the page of GammaRF where its configured to work with ElasticSearch.

After you clone the repository, within the .env file of the cloned repository, in place of GAMMARF_ELASTICSEARCH_URL write the URL for your database server, in the GAMMARF_ELASTICSEARCH_USERNAME write the login (if set), and in GAMMARF_ELASTICSEARCH _PASSWORD write the password (if set), for that new gammarf_connecter.py file. With that GammaRF should be prepared once more to update the modules used, and working without any issues.

Next, after you edit the .env file, you would repeat the process presented in ElasticSearch tab and direct your terminal to the directory of the repository and execute the docker-compose up.

GPSD

The location configuration for the GPS software and GPSD can be found through the following repository. Repeating the docker-compose command, docker-compose up, is relatively similar for this setup as well. After its initialized its signal will be automatically be accessed through Docker by GammaRF.