Solved

Installing and configuring NTOPNG on CentOS

Posted on 2013-11-25
3
10,501 Views
Last Modified: 2013-12-19
I am a relative Linux novice. I am pretty comfortable with scripting and understand the basics of compiling. With that said, I am having significant difficulties installing NTOPNG. I need a solution for network monitoring and NetFlow packet capture that doesn't cost and arm and a leg. I have been able to converse with Luca Deri who developed the application but I haven't been able to get a good walkthrough on setting it up.

I am looking for someone who has experience getting ntopng running. We mainly use Cisco ASAs in our systems and need to capture flow data from these. I would like to use ntopng and nprobe to do this. I can install ntop by simply using the yum install ntop command but I want the features of the new version. I have been trying to follow various walkthroguhs of installing it but I keep running into snags. Hopefully someone has experience with this.

I have been using
http://www.nmon.net/centos/
and
http://blog.jamesspencer.me/2013/08/install-ntop-ng-101-on-centos-64.html

but haven't gotten it running. If anyone has experience with this, I can post some more details.

Thanks!
0
Comment
Question by:farroar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 34

Expert Comment

by:Duncan Roe
ID: 39679136
When you say you haven't got it to run, what actual error message do you get?
0
 

Author Comment

by:farroar
ID: 39679739
I was having compilation errors, but I found a guide that got it running. I am able to access the web GUI and it seems to be pulling data but I'm not certian that it is accurate.

It is running on a virtual machine hosted on an ESXi server. I imagine that it is only seeing packets that pass by it's interface but it does see other hosts on the network. The data rates it is reporting seem very low for the network it is in.

I am pointing the local network's ASA to the server using port 9996. The thing is, I don't see anywhere to configure this port so I'm not sure that the server is looking for data on that port. This makes me believe I need to use nProbe. Getting this up and running is proving to be difficult now as well. I am following this guide:

http://luca.ntop.org/nProbeInstallationGuide.pdf

On page 15 it specifies some configuration parameters but I cannot find any of the files it mentions. First of all, the documentation is out of date. The file that I download from their website is not a .tar file, it is a .deb file. I extracted this package and I'm still not able to find the files they are talking about. I did use the yum install nProbe command and it seems to have installed it, but I can't find any configuration files. I've looked in the /etc/ folder where ntopng is located, but can't find anything. I just need to get to a point where I can see some real data and then I'll know how to go from there.

Thanks for any input!
0
 
LVL 1

Accepted Solution

by:
moskwicz earned 500 total points
ID: 39706129
If you added ntop repo as described in James Spancers's blog there is no need to compile it from source to get the newest features since the ntop packages are build daily.

You'll need to create config files if the /etc/ntopng folder is empty.
Create ntopng.start file and ntopng.conf. The start file can be empty and then all options will be read from ntopng.conf file.

For example my config looks like this :

-G=/var/tmp/ntopng.gid
-i eth1
--data-dir /var/ntop
--dns-mode 1
--local-networks <list of networks to be considered as local by ntop statistics>
--disable-login

You will also need to add RW permisions for user nobody to folder /var/ntop since ntop is running under that user context.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
Many of the companies I’ve worked with have embraced cloud solutions due to their desire to “get out of the datacenter business.” The ability to achieve better security and availability, and the speed with which they are able to deploy, is far grea…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question