The Dude

It will automatically scan all devices within specified subnets, draw and layout a map of your networks, monitor services of your devices and alert you in case some service has problems.

Features

• The Dude is free of charge
• Auto network discovery and layout
• Discovers any type or brand of device
• Device, Link monitoring, and notifications
• Includes SVG icons for devices, and supports custom icons and backgrounds
• Easy installation and usage
• Allows you to draw your own maps and add custom devices
• Supports SNMP, ICMP, DNS and TCP monitoring for devices that support it
• Individual Link usage monitoring and graphs
• Direct access to remote control tools for device management
• Supports remote Dude server and local client
• Runs in Linux Wine enviroment, MacOS Darwine, and Windows
• Best price/value ratio compared to other products (free of charge)

What's New

• Arm64 - fixed possible transmit queue timeout on ccr2216, ccr2116, rds2216;
• Arp - added warning, when "Published" arp entry used on an interface with "Reply-only" arp mode enabled;
• Bgp - added input.Filter-community;
• Bgp - fixed excessive cpu usage;
• Bgp - fixed input.Accept-community;
• Bgp - fixed memory leak on receiving notify and closing session;
• Bgp - improved performance on bgp input;
• Bonding - added setting for lacp active/passive modes;
• Bridge - added new stp monitoring fields for bridge and ports (tx/rx bpdu, tx/rx tc, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-d);
• Bridge - fixed bridge port hang when using invalid port ids;
• Bridge - fixed dhcp-snooping in qinq setups;
• Bridge - fixed issue when local macs were removed unnecessarily;
• Bridge - fixed minor memory leak on link down;
• Bridge - fixed multicast packet flow on hardware offloaded bridge which acts as "Multicast-router";
• Bridge - improved default bridge and port layout on console and gui;
• Bridge - improved stability in case of configuration error (introduced in v7.15);
• Bridge - moved "Tchange" logs from bridge,stp to bridge,stp,debug;
• Bridge - offload vxlan only if another hw offloaded port exists in the bridge;
• Bridge - properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading status;
• Bridge - rename "Ports" to "Interface" under mdb table for configuration consistency with other menus;
• Bridge - renamed stp monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id);
• Bridge - show designated-* monitor field for all port roles;
• Bridge - show warning instead of causing error when using multicast mac as admin-mac (introduced in v7.17);
• Bth - properly specify "In-interface" when adding dynamic firewall nat rule;
• Capsman - fixed "Undo" command for cap interfaces;
• Certificate - added built-in root certificate authorities store;
• Certificate - do not include ca identity in scep post requests;
• Certificate - fixed cloud-dns challenge validation for sn.Mynetname.Net (cli only);
• Certificate - improve error message when trying to use certificate;
• Certificate - optimize trust store;
• Cloud - fixed issues when bth is toggled fast between enable/disable;
• Cloud - improved "Bth files" web page design;
• Conntrack - improved stability on busy systems;
• Console - added on-error to "For" and "Foreach" loops;
• Console - added proplist to monitor command;
• Console - disallow incomplete double-quoted arguments (allows multiline string pasting);
• Console - do not treat return values as errors in scripts run from scheduler;
• Console - enabled verbose error logging for non-scripted/non-verbose imports;
• Console - fixed issue with file-name completion (introduced in v7.18);
• Console - fixed issue with files when using scripts (introduced in v7.18);
• Console - fixed misaligned multiline in brief print mode;
• Console - improve time value handling;
• Console - improved file add/remove process stability;
• Console - print large number argument values in proper format in export output;
• Console - set "/system/note show-at-login=yes" the default value after configuration reset;
• Console - validate script arguments (do, on-error, etc.) and reject invalid values;
• Container - allow changing container name;
• Container - fixed repository name handling to prevent redirect issues when basic authentication is used;
• Container - try to derive a user readable container name from remote image or file;
• Defconf - added dhcp client on rds2216 mgmt interface;
• Defconf - increased ppp interface wait time;
• Device-mode - added new "Rose" mode where "Container" feature is enabled by default;
• Dhcpv4 - improved outgoing packet logging;
• Dhcpv4-client/server - added support for dhcpv4 reconfigure messages;
• Dhcpv4-server - "Relay-agent-information" (82) option moved at the end of option list in response packets;
• Dhcpv4-server - accept packets with htype 6;
• Dhcpv4/v6-client - added check-gateway parameter;
• Dhcpv4/v6-client - fixed default route when dhcp client interface is in vrf;
• Dhcpv6-client - allow selecting to which routing tables add default route;
• Dhcpv6-relay - clear saved routes on dhcp release;
• Dhcpv6-relay - show client address;
• Dhcpv6-server - allow unsetting prefix-pool for static bindings and show warning if prefix is not in selected prefix-pool;
• Dhcpv6-server - change bound status to waiting on binding disable;
• Dhcpv6-server - change static binding bound status to waiting on server disable;
• Dhcpv6-server - fix when expired static binding is declined with false "Binding belongs to another server" reason;
• Dhcpv6-server - improved stability when disabled server have static bindings;
• Dhcpv6-server - improved stability when disabling server with active bindings;
• Disk - add "Sector-size" property in print detail;
• Disk - add reset-counters to /disk btrfs filesystem;
• Disk - renamed "Eject-drive" command to "Eject" (cli only);
• Disk - renamed "Format-drive" command to "Format" (cli only);
• Dlna - improved folder indexing behavior;
• Dns - improved dns server service stability;
• Dot1x - fixed dynamic switch acl rules on boards with a lot of ports (e.G. Crs520);
• Ethernet - improved ethernet and poe port mapping to ensure a consistent and reliable interface order;
• Fetch - fixed false successful messages in ftp mode;
• File - added show-hidden parameter to /file/print, allowing referencing and deleting hidden files;
• File - fixed missing files from the dude (introduced in v7.18);
• File - improved responsiveness on slow filesystems;
• Firewall - always show "Passthrough" when exporting mangle table;
• Firewall - detect vrf addresses as local;
• Firewall - fixed ip/settings "Ipv4-fasttrack-active" status showing as inactive when it is active;
• Health - hide settings in cli if there is nothing to show;
• Health - improved performance on devices with simple voltage sensors;
• Hotspot - improvements to memory usage;
• Igmp-proxy - do not try to send leave message for multicast groups that the device itself has joined on the upstream interface (cosmetic fix for proxy error logs);
• Ike2 - improved initial key exchange process on slow or unreliable connections;
• Iot - improvement to lora dev-addr-validation behavior;
• Iot - improvement to lora join eui/net id filtering behavior;
• Iot - improvement to lora stability and functionality;
• Iot - improvement to lora whitelist/blacklist support;
• Iot - iot-bt-extra package stability improvement;
• Ip-service - show all tcp/udp connections on the system;
• Ip-service - show all tcp/udp ports on system, including ports in containers;
• Ip-service - show error message when service enable fails;
• Ippool6 - properly free ipv6 pool used prefix when it is not used any more;
• Ipsec - fixed system failure on mmips devices when using ipsec services;
• Ipsec - lower standalone cipher, hash priority when using ctr aead;
• Ipv6 - avoid watchdog reboot due to link-local ipv6 address reconfiguration on thousand of interfaces at once;
• Ipv6 - fixed eui-64 false error message on address update when "From-pool" option is used;
• Isis - properly validate 3-way hello handshake;
• L2tp-ether - improved stability when trying to connect to disabled l2tp server with ipsec;
• L3hw - remove vlan tag before vxlan encapsulation (fixes pvid behavior for bridged vxlan);
• Log - added additional cef fields from firewall and login logs;
• Log - fixed remote logging after reboot when hostname is forwarded to a dns server;
• Log - populate in/out fields in firewall cef logs with correct data;
• Lte - added uicc parameter in lte monitor for r11e-4g modem;
• Lte - additional fixes for esim management support;
• Lte - at modems, improved redialing when modem lost connectivity without notifying host about apn status change;
• Lte - automatically enable roaming for known roaming only sim/esim profiles;
• Lte - chateau 5g r16 fix dhcp relay packet forwarding using lte interface;
• Lte - deactivate current esim profile before activating new profile;
• Lte - fixed default apn for configless modems;
• Lte - fixed ec200a-eu apn authentication;
• Lte - fixed initialization for neoway n75 modem;
• Lte - fixed initialization for r11e-lte6 modem;
• Lte - fixed lte passthrough activation issue when ipv6 apn is used;
• Lte - fixed lte status update or possible crash when modem is unexpectedly removed from system;
• Lte - fixed mbim modem recovery after modem unexpected restart;
• Lte - fixed modem recovery after firmware upgrade for r11e-lte modem;
• Lte - fixed possible crash or missing ipv6 address on first apn activation when ipv6 capable apn is used;
• Lte - fixed router advertisement processing issue for at modems when an apn with "Ip-type=ipv6" was configured;
• Lte - improved dialer for ec200a-eu modem;
• Lte - improved r11e-lte6 link recovery delay time after unexpected modem registration status changes;
• Lte - initial support for user settable modem redial timer;
• Lte - initialize quectel modems as soon as they are ready after unexpected restart;
• Lte - reset internal link-recovery-timer on sim slot change;
• Lte - set apn profile name the same as apn if no name specified when creating the profile;
• Lte - show correct value for 5g sa "Current-cellid";
• Net - remove support for automatic multicast tunneling (amt) interface (introduced in v7.18);
• Netinstall - improved network socket re-opening when nic status changes while running the server;
• Netinstall - provide warning if memory on installed router is full after installation;
• Netinstall - show warning when network configuration on pc might not be appropriate for installation;
• Netinstall-cli - check for other running netinstall servers on startup;
• Netinstall-cli - clear old configuration before user script using "-s";
• Netinstall-cli - fixed issue with applying the branding package;
• Ospf - fixed "Mismatch" typo in logs;
• Ospf - make auth-key parameter sensitive;
• Ovpn - properly match gcm hardware acceleration capabilities (introduced in v7.17);
• Ovpn-server - do not reset active connections when changing comment or name;
• Ovpn-server - fixed server start-up after a reboot;
• Ovpn-server - properly show "Username" in log when authentication fails;
• Pimsm - fixed issue where own query caused querier detection;
• Poe-out - upgraded firmware for 802.3at/bt pse controlled boards (the update will cause brief power interruption to poe-out interfaces);
• Port - added support for huawei e3372-325 variant (vendor-id="0x3566" device-id="0x2001");
• Port - added usb mode switch support for "Huawei-alt-mode";
• Port - fixed knot bg77 modem port lost after routeros upgrade from previous versions;
• Port - improvements to knot bg77 modem port channel handling;
• Ppc - fixed vlan tcp packet transmit on ppc devices;
• Profiler - improved process classification;
• Ptp - added "Ptp" logging topic;
• Ptp - allow multiple instances;
• Ptp - fixed ptp on 2.5g links;
• Ptp - fixed ptp on qsfp ports for crs326, crs510, crs520, ccr2216 devices;
• Queue - fixed system failure when cake kind queue was configured but queue type definition does not exist anymore (introduced in v7.18);
• Queue - speed-up queue addition/removal process;
• Quickset - improved system stability;
• Rose-storage - added btrfs disk balance command (cli only);
• Rose-storage - added degraded btrfs mount option (cli only);
• Rose-storage - fixed mounting btrfs subvolumes using macos smb client;
• Rose-storage - fixes for btrfs;
• Rose-storage - improved system stability when removing nvme disks;
• Rose-storage - rename default raid device name from "Raid" to "Raid-array";
• Rose-storage - show btrfs balance and scrub errors if any;
• Route - added options to set dynamic-in and connected-in chains in /routing/settings;
• Route - fixed stuck output when calling prints from multiple routing menus;
• Route - fixed route rule "Min-prefix" unset;
• Route - improve stability on bgp reconnect;
• Route - make afi naming consistent;
• Route - show "Routing-table" by default on console print output;
• Route - show bgp session name instead of cache-id;
• Route-filter - fixed the "Blackhole" option setting process;
• Route-filter - improved performance;
• Sfp - added sfp-encoding data output from eeprom;
• Sfp - improved qsfp link stability for crs354 devices;
• Sniffer - add max-packet-size (2k-64k) setting to be able to sniffer more than 2k data per packet;
• Snmp - fixed v2 getnext nosuchname error when oid with requested key does not exist;
• Ssh - fixed authorization with ssh key when multiple user ssh public keys are imported;
• Ssl/tls - respond with more precise alert error messages;
• Ssl/tls - send certificate authority in certificate message even if it is not trusted;
• Switch - do not count rx-too-long multiple times on 100gbps qsfp28;
• Switch - fixed egress mirroring for packets coming from external cpu port (e.G. Crs520, ccr2216, ccr2116);
• Switch - fixed switch name for hex refresh;
• Switch - flush cpu port fdb entries on switch disable;
• Switch - improve rate limit accuracy for mt7531, mt7621, en7562ct;
• Switch - improved boot stability on devices with alpine cpu and switch chip;
• Switch - improved stability when enabling igmp snooping with vxlan (introduced in v7.18);
• Switch - properly match ipv6 packets with empty acl rule on crs3xx, crs5xx, ccr2004, ccr2116, ccr2216, rds devices;
• System - fixed "/system reboot" when the system disk is completely full;
• System - improved internal "Flash/" prefix handling for different file path related settings;
• System - improved system stability when sending tcp data from the router;
• System – added new "Switch-marvell" and "Wifi-mediatek" packages to support upcoming products;
• Timezone - updated timezone information from "Tzdata2025b" release;
• Torch - improved data reporting;
• Upgrade - improved free disk space calculation;
• Upgrade - improved upgrade procedure reliability;
• Vrrp - fixed detection of connection tracking after reboot (introduced in v7.17);
• Vxlan -improved system stability when using ipv6 vtep;
• Webfig - allow table column resize over side toolbar;
• Webfig - don't reorder rows when selecting header cells with alt+click;
• Webfig - show ipv6 firewall connections;
• Webfig - show missing data in "Ip/dns/cache" records;
• Wifi - add channel.Reselect-time parameter which allows to perform channel re-selection at given time of day (cli only);
• Wifi - add information on cap uptime and connection uptime in "Remote cap" list;
• Wifi - added "Eap-identity" to registration table;
• Wifi - added ssid to logs;
• Wifi - display error when trying to run snooper on interface which does not support wireless packet capture (sniffer);
• Wifi - fix authentication of clients which omit some rsn information at association;
• Wifi - fix incorrect info about current channel for station interfaces after ap has switched channel (introduced in v7.17);
• Wifi - fix possible snooper crash when parsing frames with malformed headers;
• Wifi - fixed 5ghz chain enumeration on chateau pro ax;
• Wifi - implement wpa2 psk authentication with key derivation using sha256 (cli only);
• Wifi - improve parsing of captured frames which have nested flags in radiotap header;
• Wifi - improved stability for wifi interfaces;
• Wifi - improved stability when doing snmp query;
• Wifi - improved wifi connection stability when used as a station for "B" mode access point;
• Wifi - re-word log entries about disconnections which are likely caused by peer using a wrong passphrase;
• Wifi - use at least tls 1.2 for securing connection between capsman manager and caps;
• Wifi-qcom - fix inability of interfaces in station mode to connect if they do not support full bandwidth of ap;
• Wifi-qcom - fix owe authentication for 802.11ac interfaces in station mode;
• Winbox - added "Mac telnet" under "Wifi/registration" menu;
• Winbox - added "Multi passphrase group" for wifi;
• Winbox - added "Reset mac address" for legacy wireless and wifi;
• Winbox - added comment fields for wifi "Multi passphrase group" menu;
• Winbox - added comment under "User manager/routers" menu;
• Winbox - added country to wireless setup-repeater;
• Winbox - added missing "Switch" menu for rds;
• Winbox - added missing file systems for disk formatting;
• Winbox - added missing parameters for btrfs related action functions;
• Winbox - added mount-point parameter under "Disk/settings" menu;
• Winbox - added netmask support for switch rule src/dst ipv6 address settings;
• Winbox - allow opening btrfs menu entries;
• Winbox - changed default wireless wds-cost-range values;
• Winbox - do not show not relevant values for certificate template;
• Winbox - fixed "Multi passphrase group" setting for wifi;
• Winbox - fixed "Registry-url" field under "Containers" configuration menu;
• Winbox - fixed missing smb client on non-rose devices;
• Winbox - fixed several statistics counters not being read only;
• Winbox - fixed switch menu for chateau 5g;
• Winbox - fixed time interval type fields precision under "Disks" menu;
• Winbox - hide container file/remote image fields only when instance added;
• Winbox - improve graphing efficiency when communicating with winbox;
• Winbox - make btrfs "Parent" and "Send parent" options optional;
• Winbox - properly show/hide ospf, rip and bgp tabs for ipv6 routes;
• Winbox - renamed "Raid-member" to "Raid member" flag for consistency;
• Winbox - show esim profiles under esim menu without manual refresh;
• Wireguard - add wg-import config-string parameter to import config directly from terminal;
• Wireguard - update peer info on "Get" command;
• Wireless - added "Eap-identity" to registration table;
• Wireless - implement handling of radius disconnect messages by capsman;
• Wireless - suggest all legitimate frequencies for interfaces with 20/40mhz-xx channel width in gui;
• X86 - added support for emulex nic;
• X86 - i40e updated driver to 2.27.8 version;
• X86 - remove unnecessary console output on shutdown;

Alternatively you can download the latest beta version of this software.