{"id":1217,"date":"2014-08-24T16:31:37","date_gmt":"2014-08-24T14:31:37","guid":{"rendered":"http:\/\/blog.rabahi.net\/?page_id=1217"},"modified":"2014-08-24T16:31:58","modified_gmt":"2014-08-24T14:31:58","slug":"ntop","status":"publish","type":"page","link":"https:\/\/blog.rabahi.net\/?page_id=1217","title":{"rendered":"ntop"},"content":{"rendered":"

“ntopng” is an open-source network traffic monitor. ntopng relies on the Redis key-value server rather than a traditional database, takes advantage of nDPI for protocol detection, supports geolocation of hosts, and is able to display real-time flow analysis for connected hosts<\/p><\/blockquote>\n

Wikipedia<\/p>\n

\n

Installation<\/h1>\n
  1. #!\/bin\/bash<\/span><\/div><\/li>
  2.  <\/div><\/li>
  3. echo<\/span> "add ntop repository"<\/span><\/div><\/li>
  4. cat<\/span> ><\/span> \/<\/span>etc\/<\/span>yum.repos.d\/<\/span>ntop.repo <<<\/span> "EOF"<\/span><\/div><\/li>
  5. [<\/span>ntop]<\/span><\/div><\/li>
  6. name<\/span>=ntop packages<\/div><\/li>
  7. baseurl<\/span>=http:\/\/<\/span>www.nmon.net\/<\/span>centos-stable\/<\/span>$releasever<\/span>\/<\/span>$basearch<\/span>\/<\/span><\/div><\/li>
  8. enabled<\/span>=1<\/span><\/div><\/li>
  9. gpgcheck<\/span>=1<\/span><\/div><\/li>
  10. gpgkey<\/span>=http:\/\/<\/span>www.nmon.net\/<\/span>centos-stable\/<\/span>RPM-GPG-KEY-deri<\/div><\/li>
  11. [<\/span>ntop-noarch]<\/span><\/div><\/li>
  12. name<\/span>=ntop packages<\/div><\/li>
  13. baseurl<\/span>=http:\/\/<\/span>www.nmon.net\/<\/span>centos-stable\/<\/span>$releasever<\/span>\/<\/span>noarch\/<\/span><\/div><\/li>
  14. enabled<\/span>=1<\/span><\/div><\/li>
  15. gpgcheck<\/span>=1<\/span><\/div><\/li>
  16. gpgkey<\/span>=http:\/\/<\/span>www.nmon.net\/<\/span>centos-stable\/<\/span>RPM-GPG-KEY-deri<\/div><\/li>
  17. EOF<\/div><\/li>
  18.  <\/div><\/li>
  19. echo<\/span> "install ntop and redis"<\/span><\/div><\/li>
  20. dnf -y<\/span> install<\/span> redis ntopng hiredis-devel<\/div><\/li>
  21.  <\/div><\/li>
  22. cat<\/span> ><\/span> \/<\/span>etc\/<\/span>httpd\/<\/span>conf.d\/<\/span>ntopng.conf <<<\/span> "EOF"<\/span><\/div><\/li>
  23. ProxyPreserveHost On<\/div><\/li>
  24. Proxypass \/<\/span>ntopng\/<\/span> http:\/\/<\/span>localhost:3000<\/span>\/<\/span>ntopng\/<\/span><\/div><\/li>
  25. Proxypassreverse \/<\/span>ntopng\/<\/span> http:\/\/<\/span>localhost:3000<\/span>\/<\/span>ntopng\/<\/span><\/div><\/li>
  26. ProxyRequests     Off<\/div><\/li>
  27. EOF<\/div><\/li>
  28.  <\/div><\/li>
  29. echo<\/span> "enable start ntopng on boot"<\/span><\/div><\/li>
  30. systemctl enable<\/span> ntopng.service<\/div><\/li>
  31. systemctl enable<\/span> redis.service<\/div><\/li>
  32.  <\/div><\/li>
  33. echo<\/span> "start service ntopng and redis"<\/span><\/div><\/li>
  34. systemctl restart httpd.service<\/div><\/li>
  35. systemctl start ntopng.service<\/div><\/li>
  36. systemctl start redis.service<\/div><\/li>
  37.  <\/div><\/li>
  38. echo<\/span> "configure \/etc\/ntopng\/ntopng.conf, created when service ntopng started"<\/span>.<\/div><\/li>
  39. cat<\/span> >><\/span> \/<\/span>etc\/<\/span>ntopng\/<\/span>ntopng.conf <<<\/span> "EOF"<\/span><\/div><\/li>
  40. --http-prefix<\/span> \/<\/span>ntopng<\/div><\/li>
  41. EOF<\/div><\/li>
  42.  <\/div><\/li>
  43. echo<\/span> "restart service ntopng"<\/span><\/div><\/li>
  44. systemctl restart ntopng.service<\/div><\/li>
  45.  <\/div><\/li>
  46. myip<\/span>=`<\/span>hostname<\/span> -I`<\/span><\/div><\/li>
  47. echo<\/span> "Now meet you there: http:\/\/$myip<\/span>\/ntopng"<\/span><\/div><\/li>
  48.  <\/div><\/li><\/ol><\/pre>\n
    That’s all \ud83d\ude42<\/p>\n
    Usage example<\/h1>\n
    \r\nntopng --dns-mode 1 --interface 5 --daemon --redis localhost:6379 --verbose\r\n<\/pre>\n
    Read more<\/h1>\n