How To Install Ntopng.
ntopng is an Open Source Tool to monitor the network. It is a security network monitoring tool, also monitors web activities passively. It is also used for packet capturing, Traffic Recording, and Network Probing. A huge number of companies like Google, HP, Cisco, IBM, and many more uses ntop. It acts as a central network monitoring console. Packet capturing capacity of ntop is 10 Gbit. It supports major OS including Unix, Windows, and macOS X.
Features:
Open Source
Easy to manage
Multiple kinds of analysis possible using filters
Realtime analysis
Supports third-party plugins
Easy to use WebUI
Customizable
Step-by-step Installation:
Step 1: Enter in root user and run these commands:
sudo su - apt-get update apt-get upgrade apt-get install software-properties-common wget
Step 2: Now, We will add the repository which contains the ntopng program
add-apt-repository universe
Step 3: Next, we have to install the package
apt install ntopng
To check whether it is installed or not:
systemctl status ntopng
systemctl is a command used to check installed services in linux.
To start it, use the command
systemctl start ntopng
Configuration File
To view the configuration file,
cat /etc/ntopng/ntopng.conf
To choose the port use “–http-port” or “-w” option as
--http-port=:3000
Other options are also there like
--max-num-flows=200000 --max-num-hosts=250000
These are used to set the maximum number of flows and hosts respectively.
To run ntopng as daemon use option in config file “-e|–daemon” as
-e=<path_to_run>
Or use the below command
systemctl enable ntopng
Running and Testing ntopng:
To run ntopng or to start the ntopng
ntopng
This will run ntopng and view it use the URL in your browser
http://<ntopng IP Address>:<port>/
Example:
http://XX.XX.XX.XX:3000/
Enter the username as admin and password as admin, then you can view the ntopng
Here you can see we choose the http-port = 3000, and it is running on that port.
