How to install Ntopng on Ubuntu 18.04
Ntopng Installation on Ubuntu 18.04
Ntopng is the next generation version of the original ntop, a network traffic probe that monitors network usage. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Windows as well. Ntopng used to High-Speed Web-based Traffic Analysis and Flow Collection.
Installation
Use this command to update the repository files.
root@linuxhelp:~# apt-get update
Hit:1 https://deb.nodesource.com/node_10.x bionic InRelease
Hit:2 http://in.archive.ubuntu.com/ubuntu bionic InRelease
Get:3 http://security.ubuntu.com/ubuntu bionic-security InRelease [83.2 kB]
Get:4 http://in.archive.ubuntu.com/ubuntu bionic-updates InRelease [88.7 kB]
Get:5 http://in.archive.ubuntu.com/ubuntu bionic-backports InRelease [74.6 kB]
.
.
.
W: GPG error: https://cloud.r-project.org/bin/linux/ubuntu bionic-cran35/ InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 51716619E084DAB9
E: The repository 'https://cloud.r-project.org/bin/linux/ubuntu bionic-cran35/ InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
To install the ntopng use the following command.
root@linuxhelp:~# apt-get install ntopng
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libpython-stdlib python python-minimal python2.7 python2.7-minimal
Use 'sudo apt autoremove' to remove them.
.
.
.
Processing triggers for libc-bin (2.27-3ubuntu1) ...
Processing triggers for systemd (237-3ubuntu10.9) ...
Processing triggers for ureadahead (0.100.0-20) ...
Open the default configuration file and add a connection name.
root@linuxhelp:~# vim /etc/ntopng.conf
#DO NOT REMOVE the following option, required for daemonization.
-e=
#* Interfaces to sniff on: one interface per line, prefix with -i=
#E.g.
-i=ens33
#-i=wlan0
#If none is specified, ntopng will try to auto-detect the best interface.
#* Port on which ntopng will listen for the web-UI.
-w=3000
Restart the ntopng service.
root@linuxhelp:~#systemctl restart ntopng
allow the port on firewall.
root@linuxhelp:~# ufw allow 3000
Rules updated
Rules updated (v6)
Now you can proceed the further installation and configuration from the browser by navigating to the following URL: http://ip address (or) domain name:3000
Change the default admin password.
Here you can see the upload and download speed
Q
What is Ntopng ?
A
ntopng is the next generation version of the original ntop, a network traffic probe that monitors network usage. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Windows as well.
Q
What Ntopng can do ?
A
Ntopng can do the following:
1.Sort network traffic according to many criteria including IP address, port, L7 protocol, throughput, AS.
2.Show network traffic and IPv4/v6 active hosts.
3.Produce long-term reports about various network metrics such as throughput, application protocols, top X talkers/listeners, top ASs, top L7 applications.
4.For each communication flow report network/application latency/RTT, TCP stats (retransmissions, packets OOO, packet lost), and bytes/packets are stored on disk persistent traffic statistics in RRD format.
1.Sort network traffic according to many criteria including IP address, port, L7 protocol, throughput, AS.
2.Show network traffic and IPv4/v6 active hosts.
3.Produce long-term reports about various network metrics such as throughput, application protocols, top X talkers/listeners, top ASs, top L7 applications.
4.For each communication flow report network/application latency/RTT, TCP stats (retransmissions, packets OOO, packet lost), and bytes/packets are stored on disk persistent traffic statistics in RRD format.
Q
How can I have Kibana recognize correct data types from Ntopng?
A
Ntopng automatically pushes a template to specify the proper data type for any field.
Q
How will Ntopng data be indexed?
A
Ntopng will populate index and type fields based on its configuration:
Example:
es;Ntopng;Ntopng-%Y.%m.%d;http://localhost:9200/_bulk;
Example:
es;Ntopng;Ntopng-%Y.%m.%d;http://localhost:9200/_bulk;
Q
What is the competitive advantages of ntop?
A
ntop is unique as the products are home-grown with no dependencies on third parties. This means fast application development/customization and support directly from the source.