How To Install Ntopng on Ubuntu 14.04

For those of you who didn’t know, Ntopng is a relatively useful tool if you are looking to monitor different network protocols on your servers. It provides a bunch of tools for monitoring various protocols, traffic variants, and yes, bandwidth across multiple time frames. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Win32 as well.

This article assumes you have at least basic knowledge of linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple. I will show you through the step by step installation Ntopng on Ubuntu 14.04.

Step 1. First, add Ntopng repo to our repo list.

1	sudo nano /etc/apt/sources.list.d/ntop.list

Then add this line:

1 2	deb http://www.nmon.net/apt-stable/12.04/ x64/ deb http://www.nmon.net/apt-stable/12.04/ all/

Add the key and then run update:

1 2	wget -qO - http://www.nmon.net/apt-stable/ntop.key | sudo apt-key add - sudo apt-get update

Step 2. Install Ntopng and dependecies.

1 2	sudo apt-get install libpcap-dev libglib2.0-dev libgeoip-dev redis-server libxml2-dev libnl1 sudo apt-get install ntopng pfring nprobe ntopng-data n2disk nbox

Step 3. Configure Ntopng.

Create ntopng configuration file, In this article we use nano as text editor. You can use your favorite text editor to create ntopng configuration files:

1	sudo nano /etc/ntopng/ntopng.conf

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68

# /etc/ntopng/ntopng.conf # #        The  configuration  file is similar to the command line, with the exception that an equal #        sign '=' must be used between key and value. Example:  -i=p1p2  or  --interface=p1p2  For #        options with no value (e.g. -v) the equal is also necessary. Example: "-v=" must be used. # # #       -G|--pid-path #        Specifies the path where the PID (process ID) is saved. # -G=/var/tmp/ntopng.pid # #       -e|--daemon #        This  parameter  causes ntop to become a daemon, i.e. a task which runs in the background #        without connection to a specific terminal. To use ntop other than as a casual  monitoring #        tool, you probably will want to use this option. # -e= # #       -i|--interface #        Specifies  the  network  interface or collector endpoint to be used by ntopng for network #        monitoring. On Unix you can specify both the interface name  (e.g.  lo)  or  the  numeric #        interface id as shown by ntopng -h. On Windows you must use the interface number instead. #        Note that you can specify -i multiple times in order to instruct ntopng to create  multi‐ #        ple interfaces. # -i=1 # #       -w|--http-port #        Sets the HTTP port of the embedded web server. # -w=3000 # #       -m|--local-networks #        ntopng determines the ip addresses and netmasks for each active interface. Any traffic on #        those  networks  is considered local. This parameter allows the user to define additional #        networks and subnetworks whose traffic is also considered local in  ntopng  reports.  All #        other hosts are considered remote. If not specified the default is set to 192.168.1.0/24. # #        Commas  separate  multiple  network  values.  Both netmask and CIDR notation may be used, #        even mixed together, for instance "131.114.21.0/24,10.0.0.0/255.0.0.0". # -m=192.168.1.0/24 # #       -n|--dns-mode #        Sets the DNS address resolution mode: 0 - Decode DNS responses  and  resolve  only  local #        (-m)  numeric  IPs  1  -  Decode DNS responses and resolve all numeric IPs 2 - Decode DNS #        responses and don't resolve numeric IPs 3 - Don't decode DNS responses and don't  resolve # -n=1 # #       -S|--sticky-hosts #        ntopng  periodically purges idle hosts. With this option you can modify this behaviour by #        telling ntopng not to purge the hosts specified by -S. This parameter requires  an  argu‐ #        ment  that  can  be  "all"  (Keep  all hosts in memory), "local" (Keep only local hosts), #        "remote" (Keep only remote hosts), "none" (Flush hosts when idle). # -S= # #       -d|--data-dir #        Specifies the data directory (it must be writable). Default directory is ./data # -d=/var/tmp/ntopng # #       -q|--disable-autologout #        Disable web interface logout for inactivity. # -q=

Create ntopng.start file:

1 2 3 4 5 6

sudo nano /etc/ntopng/ntopng.start   ##Add this line##   --local-networks "192.168.0.0/24"  ## give your local IP Ranges here. --interface 1

To see all available interfaces and options, use the ntopng -h option:

1	sudo ntopng -h

Step 4. Start Ntopng and redis server daemon.

1 2	sudo service redis-server start sudo service ntopng start

Step 5. Test Ntopng.

Now you can test your ntopng application by typing http://yourserver.name:3000. You will see ntopng login page. For the first time, you can use user ‘admin’ and password ‘admin’.

Congratulation’s! You have successfully installed Ntopng. Thanks for using this tutorial for installing Ntopng server monitoring on Ubuntu 14.04 systems.

Author - idroot.net