Solved

nbox/ntopng 1.2 on Ubuntu 14 & User Groups

Posted on 2014-09-25
4
311 Views
Last Modified: 2016-11-23
I have setup nbox/topng on Ubuntu 14 powered by a Dell PowerEdge 2950 using this package:  http://www.nmon.net/apt-stable/

I have two eth adapters, eth0 for management and eth1 for ntopng. Eth1 is plugged into a SPAN destination port on a Cisco 2940 switch with SPAN configured to source the port my router is attached to. It appears to be picking up flows properly.

My Questions:
1. What benefits are there to moving off of a SPAN design and over to a nProbe/Netflow design
2. How do I add non-admin users and/or groups in the ntopng portal, I only see the option to add admin level users.
0
Comment
Question by:Lee Seeman
  • 2
  • 2
4 Comments
 
LVL 22

Expert Comment

by:eeRoot
ID: 40347923
1) The monitor session will use a bit CPU & memory on the 2940.  If you are seeing high CPU/mem utilization, then you may need to remove the monitor session from the switch.  A hardware tap avoids this problem.

2) Can you create a group for users, then add users to that group?
0
 

Author Comment

by:Lee Seeman
ID: 40352032
Switch CPU is averaging 30%, don't see this as an issue. Ubuntu server load is under 1%.

I don't see any option to create a group under the User management screen in ntopng (see attached). The plus sign button in the top right only offers an Add User option, no group or level of access options.
ntop.bmp
0
 
LVL 22

Accepted Solution

by:
eeRoot earned 500 total points
ID: 40361793
Apparently, Ntopng requires using the CLI to add users with specific group names by editing the file ntopng-users.conf.  See page 28 on this doc.

https://svn.ntop.org/svn/ntop/trunk/ntopng/doc/UserGuide.pdf

There does not appear to be any info on how to control what the different groups can access though.
0
 

Author Closing Comment

by:Lee Seeman
ID: 40541120
thank you; we decided to just use NetFlow on PRTG instead.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Goal:  To set up a secure SSH server for your home computer to make it accessible anywhere AND to use it as a port forwarding proxy. Steps 1.  WinSSHD version 5 is free for personal use.  So download and install it.  You can download it from the…
Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now