Cisco StealthWatch

Versions this guide is based on:

EVE Image Name Downloaded Filename Version vCPUs vRAM Console HDD Type Interface
stealth-SMC-7.1.1 SMC-7.1.1-2019.07.31.1629-0.iso 7.1.1 3 8192 vnc hda x1 virtio
stealth-SFC-7.1.1 FlowCollector-NetFlow-7.1.1-2019.07.31.1626-0.iso 7.1.1 3 8192 vnc hda x1 virtio



Other versions should also be supported following bellow’s procedure.

How to is based on version StealthWatch 7.1.1. For other image or version please change image and folder names respectively.

1. Create Stealthwatch image folder in the EVE-NG. Use cli:

mkdir /opt/unetlab/addons/qemu/stealth-SMC-7.1.1

2. Upload the downloaded SMC-7.1.1-2019.07.31.1629-0.iso image to the /opt/unetlab/addons/qemu/stealth-SMC-7.1.1 using for example FileZilla or WinSCP. Then login as root using SSH protocol

3. Go to created folder and rename uploaded SMC-7.1.1-2019.07.31.1629-0.iso image to cdrom.iso:

cd /opt/unetlab/addons/qemu/stealth-SMC-7.1.1/
mv SMC-7.1.1-2019.07.31.1629-0.iso cdrom.iso

4. Create HDD for StealthWatch image install:

/opt/qemu/bin/qemu-img create -f qcow2 hda.qcow2 200G

5. Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

Start Node and follow setup

WARNING, Cisco SteathWatch is very heavy node, after install it will reach 40Gb HDD space !!!

Advanced StealthWatch image preparing, not mandatory but recommended. Continue after step 4.

5. Open new lab and add single new Stealthwatch node on topology. Start it. When console will prompt you enter “setup”, don’t enter it, but stop node.

6. Check lab ID number on EVE side bar “Lab details”, Example:

7. EVE Cli: Convert image from lab tmp folder to defaults image location. In the command below is used lab ID (above) and as we added on lab single node, node ID is 1. Steathwatch image foldername match what we created before. Number 0 in the line below is user POD number. Admin pod is 0.

cd /opt/unetlab/tmp/0/72b1903b-4885-4a1c-b9e2-aed46032583a/1/
qemu-img commit hda.qcow2

8. Remove install CD ISO from image folder:

rm -f /opt/unetlab/addons/qemu/stealth-SMC-7.1.1/cdrom.iso

9. Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions