Setting Up Fprobe And Ntop - Revision history

Sertonix: replace /etc/init.d with rc-servce

2023-11-17T10:18:24Z

replace /etc/init.d with rc-servce

← Older revision		Revision as of 10:18, 17 November 2023
Line 14:		Line 14:
	PORT=2055		PORT=2055
	Start fprobe.		Start fprobe.
	{{cmd\|~~/etc/init.d/~~fprobe start}}		{{cmd\|rc-service fprobe start}}

	== Ntop host setup ==		== Ntop host setup ==
Line 26:		Line 26:
	{{cmd\|ntop --set-admin-password}}		{{cmd\|ntop --set-admin-password}}
	Start ntop:		Start ntop:
	{{cmd\|~~/etc/init.d/~~ntop start}}		{{cmd\|rc-service ntop start}}
	Open ntop web interface by browsing to <nowiki>http://192.168.0.100:3000</nowiki>.<br />		Open ntop web interface by browsing to <nowiki>http://192.168.0.100:3000</nowiki>.<br />
	Enable NetFlow plugin from the Plugins menu. <br />		Enable NetFlow plugin from the Plugins menu. <br />

Sertonix: update package name ttf-dejavu to font-dejavu

2023-09-20T17:37:40Z

update package name ttf-dejavu to font-dejavu

← Older revision		Revision as of 17:37, 20 September 2023
Line 43:		Line 43:
	If receive error regarding font not found you can add ttf fonts:		If receive error regarding font not found you can add ttf fonts:

	{{cmd\|apk add ~~ttf~~-dejavu}}		{{cmd\|apk add font-dejavu}}

	== Notes ==		== Notes ==

Zcrayfish: Added obsolete notice. We should probably RfD this article when Alpine 3.11 changes support level from "on request" to "none".

2023-08-26T06:33:15Z

Added obsolete notice. We should probably RfD this article when Alpine 3.11 changes support level from "on request" to "none".

← Older revision		Revision as of 06:33, 26 August 2023
Line 1:		Line 1:
			{{Obsolete\|The ntop package is unavailable for Alpine 3.12 and up}}

	Goal: Setup fprobe as a NetFlow probe on an Alpine Linux router, and then ntop as a collector/analyzer on another machine. <br />		Goal: Setup fprobe as a NetFlow probe on an Alpine Linux router, and then ntop as a collector/analyzer on another machine. <br />
	Assumptions: Eth0 on router will be monitored, 192.168.0.1 is router interface on LAN side, 192.168.0.100 is ntop host, and port 2055 will be used for fprobe.		Assumptions: Eth0 on router will be monitored, 192.168.0.1 is router interface on LAN side, 192.168.0.100 is ntop host, and port 2055 will be used for fprobe.

Zcrayfish: /* Ntop host setup */ Nowiki'd a hypothetical URL.

2023-08-26T06:27:43Z

Ntop host setup: Nowiki'd a hypothetical URL.

← Older revision		Revision as of 06:27, 26 August 2023
Line 25:		Line 25:
	Start ntop:		Start ntop:
	{{cmd\|/etc/init.d/ntop start}}		{{cmd\|/etc/init.d/ntop start}}
	Open ntop web interface by browsing to http://192.168.0.100:3000.<br />		Open ntop web interface by browsing to <nowiki>http://192.168.0.100:3000</nowiki>.<br />
	Enable NetFlow plugin from the Plugins menu. <br />		Enable NetFlow plugin from the Plugins menu. <br />
	Create NetFlow device with proper options:		Create NetFlow device with proper options:
Line 42:		Line 42:

	{{cmd\|apk add ttf-dejavu}}		{{cmd\|apk add ttf-dejavu}}


	== Notes ==		== Notes ==

Jbilyk at 15:25, 18 November 2014

2014-11-18T15:25:43Z

← Older revision		Revision as of 15:25, 18 November 2014
Line 19:		Line 19:
	Edit /etc/conf.d/ntop (adjust path to ntop cache as needed):		Edit /etc/conf.d/ntop (adjust path to ntop cache as needed):
	NTOP_OPTS="-P /var/cache/ntop --http-server 3000 --https-server 0 --interface eth0"		NTOP_OPTS="-P /var/cache/ntop --http-server 3000 --https-server 0 --interface eth0"
			Make needed directory:
			mkdir /var/cache/ntop
	Generate ntop password:		Generate ntop password:
	{{cmd\|ntop --~~generate~~-admin-password}}		{{cmd\|ntop --set-admin-password}}
	Start ntop:		Start ntop:
	{{cmd\|/etc/init.d/ntop start}}		{{cmd\|/etc/init.d/ntop start}}

Epi: add ttf

2012-05-07T18:45:47Z

add ttf

← Older revision		Revision as of 18:45, 7 May 2012
Line 32:		Line 32:
	Debug: Off		Debug: Off
	Check after a minute or two that flows are being processed by going to the Summary -> Traffic menu option and making sure data is present for the collector port and rrd graphs are being generated.		Check after a minute or two that flows are being processed by going to the Summary -> Traffic menu option and making sure data is present for the collector port and rrd graphs are being generated.

			In case have trouble creating password, you can delete previous databases and recreate again:

			{{cmd\|rm /var/ntop/ *.db}}

			If receive error regarding font not found you can add ttf fonts:

			{{cmd\|apk add ttf-dejavu}}


	== Notes ==		== Notes ==

Dubiousjim: Category:Monitoring

2012-03-24T17:06:14Z

Category:Monitoring

← Older revision		Revision as of 17:06, 24 March 2012
Line 40:		Line 40:

	[[Category:Networking]]		[[Category:Networking]]
			[[Category:Monitoring]]

Fab: category added

2011-06-17T08:52:47Z

category added

← Older revision		Revision as of 08:52, 17 June 2011
Line 38:		Line 38:
	* If there isn't data present, make sure firewall on both router and ntop host have port 2055 (and possibly 2056) open from the router to the ntop host.		* If there isn't data present, make sure firewall on both router and ntop host have port 2055 (and possibly 2056) open from the router to the ntop host.
	* If you have a high-volume router that you are monitoring, you may end up hitting a folder limit for your rrd interfaces directory(max of 32 000) depending on how you have flows being processed/parsed. It may be necessary to schedule a cron job to clear out the cache periodically and restart ntop after deleting the older folders.		* If you have a high-volume router that you are monitoring, you may end up hitting a folder limit for your rrd interfaces directory(max of 32 000) depending on how you have flows being processed/parsed. It may be necessary to schedule a cron job to clear out the cache periodically and restart ntop after deleting the older folders.

			[[Category:Networking]]

Jbilyk: /* Notes */ Added note about 32 000 folder limit in cache directory

2011-01-24T20:59:52Z

Notes: Added note about 32 000 folder limit in cache directory

← Older revision		Revision as of 20:59, 24 January 2011
Line 37:		Line 37:
	* To monitor 2 interfaces (gre1 given as example), copy /etc/init.d/fprobe to /etc/init.d/fprobe.gre1, edit BIN= line to point to /usr/sbin/fprobe.gre. Copy /etc/conf.d/fprobe to /etc/conf.d/fprobe.gre and change interface line to IP on gre interface and port line to 2056. Finally, softlink /usr/sbin/fprobe.gre to /usr/sbin/fprobe.		* To monitor 2 interfaces (gre1 given as example), copy /etc/init.d/fprobe to /etc/init.d/fprobe.gre1, edit BIN= line to point to /usr/sbin/fprobe.gre. Copy /etc/conf.d/fprobe to /etc/conf.d/fprobe.gre and change interface line to IP on gre interface and port line to 2056. Finally, softlink /usr/sbin/fprobe.gre to /usr/sbin/fprobe.
	* If there isn't data present, make sure firewall on both router and ntop host have port 2055 (and possibly 2056) open from the router to the ntop host.		* If there isn't data present, make sure firewall on both router and ntop host have port 2055 (and possibly 2056) open from the router to the ntop host.
			* If you have a high-volume router that you are monitoring, you may end up hitting a folder limit for your rrd interfaces directory(max of 32 000) depending on how you have flows being processed/parsed. It may be necessary to schedule a cron job to clear out the cache periodically and restart ntop after deleting the older folders.

Mhavela: Using cmd template to display commands

2011-01-09T10:14:31Z

Using cmd template to display commands

← Older revision		Revision as of 10:14, 9 January 2011
Line 4:		Line 4:
	== Router setup ==		== Router setup ==
	Install packages:		Install packages:
	apk add fprobe		{{cmd\|apk add fprobe}}
	Edit /etc/conf.d/fprobe (adjust lines shown below as needed - leave rest of config file as is):		Edit /etc/conf.d/fprobe (adjust lines shown below as needed - leave rest of config file as is):
	IFACE=eth0		IFACE=eth0
Line 12:		Line 12:
	PORT=2055		PORT=2055
	Start fprobe.		Start fprobe.
	/etc/init.d/fprobe start		{{cmd\|/etc/init.d/fprobe start}}

	== Ntop host setup ==		== Ntop host setup ==
	Add package:		Add package:
	apk add ntop		{{cmd\|apk add ntop}}
	Edit /etc/conf.d/ntop (adjust path to ntop cache as needed):		Edit /etc/conf.d/ntop (adjust path to ntop cache as needed):
	NTOP_OPTS="-P /var/cache/ntop --http-server 3000 --https-server 0 --interface eth0"		NTOP_OPTS="-P /var/cache/ntop --http-server 3000 --https-server 0 --interface eth0"
	Generate ntop password:		Generate ntop password:
	ntop --generate-admin-password		{{cmd\|ntop --generate-admin-password}}
	Start ntop:		Start ntop:
	/etc/init.d/ntop start		{{cmd\|/etc/init.d/ntop start}}
	Open ntop web interface by browsing to http://192.168.0.100:3000.<br />		Open ntop web interface by browsing to http://192.168.0.100:3000.<br />
	Enable NetFlow plugin from the Plugins menu. <br />		Enable NetFlow plugin from the Plugins menu. <br />