Skip to content

Instantly share code, notes, and snippets.

@linuxbiekaisar
Last active February 28, 2020 12:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save linuxbiekaisar/f9194e3f0e02edfbdb95477fe407db50 to your computer and use it in GitHub Desktop.
Save linuxbiekaisar/f9194e3f0e02edfbdb95477fe407db50 to your computer and use it in GitHub Desktop.
Ntopng installation on Ubuntu/Linux Distro
# Youtube: https://www.youtube.com/watch?v=trTa13OOMOc
# First make sure that all your system packages are up-to-date
sudo apt-get update
sudo apt-get upgrade
# Installing Ntopng on Ubuntu 18.04 LTS.
wget http://apt.ntop.org/18.04/all/apt-ntop.deb
dpkg -i apt-ntop.deb
# Then, run:
apt-get update
apt-get install pfring-dkms nprobe ntopng n2disk cento
# Configure Ntopng.
sudo nano /etc/ntopng/ntopng.conf
# /etc/ntopng/ntopng.conf
#
# The configuration file is similar to the command line, with the exception that an equal
# sign '=' must be used between key and value. Example: -i=p1p2 or --interface=p1p2 For
# options with no value (e.g. -v) the equal is also necessary. Example: "-v=" must be used.
#
#
# -G|--pid-path
# Specifies the path where the PID (process ID) is saved.
#
-G=/var/tmp/ntopng.pid
#
# -e|--daemon
# This parameter causes ntop to become a daemon, i.e. a task which runs in the background
# without connection to a specific terminal. To use ntop other than as a casual monitoring
# tool, you probably will want to use this option.
#
-e=
#
# -i|--interface
# Specifies the network interface or collector endpoint to be used by ntopng for network
# monitoring. On Unix you can specify both the interface name (e.g. lo) or the numeric
# interface id as shown by ntopng -h. On Windows you must use the interface number instead.
# Note that you can specify -i multiple times in order to instruct ntopng to create multi‐
# ple interfaces.
#
-i=1
#
# -w|--http-port
# Sets the HTTP port of the embedded web server.
#
-w=3000
#
# -m|--local-networks
# ntopng determines the ip addresses and netmasks for each active interface. Any traffic on
# those networks is considered local. This parameter allows the user to define additional
# networks and subnetworks whose traffic is also considered local in ntopng reports. All
# other hosts are considered remote. If not specified the default is set to 192.168.1.0/24.
#
# Commas separate multiple network values. Both netmask and CIDR notation may be used,
# even mixed together, for instance "131.114.21.0/24,10.0.0.0/255.0.0.0".
#
-m=192.168.1.0/24
#
# -n|--dns-mode
# Sets the DNS address resolution mode: 0 - Decode DNS responses and resolve only local
# (-m) numeric IPs 1 - Decode DNS responses and resolve all numeric IPs 2 - Decode DNS
# responses and don't resolve numeric IPs 3 - Don't decode DNS responses and don't resolve
#
-n=1
#
# -S|--sticky-hosts
# ntopng periodically purges idle hosts. With this option you can modify this behaviour by
# telling ntopng not to purge the hosts specified by -S. This parameter requires an argu‐
# ment that can be "all" (Keep all hosts in memory), "local" (Keep only local hosts),
# "remote" (Keep only remote hosts), "none" (Flush hosts when idle).
#
-S=
#
# -d|--data-dir
# Specifies the data directory (it must be writable). Default directory is ./data
#
-d=/var/tmp/ntopng
#
# -q|--disable-autologout
# Disable web interface logout for inactivity.
#
-q=
# Create ntopng.start file:
sudo nano /etc/ntopng/ntopng.start
##Add this line##
--local-networks "192.168.0.0/24" ## give your local IP Ranges here.
--interface 1
# To see all available interfaces and options, use the ntopng -h option:
sudo ntopng -h
# Start Ntopng server daemon:
systemctl start ntopng.service
systemctl start redis-server.service
# Test Ntopng.
Now you can test your ntopng application by typing http://yourserver.name:3000. You will see ntopng login page. For the first time, you can use user ‘admin’ and password ‘admin’.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment