{"id":1642,"date":"2010-03-22T01:17:25","date_gmt":"2010-03-22T07:17:25","guid":{"rendered":"http:\/\/gregsowell.com\/?p=1642"},"modified":"2010-03-19T11:18:06","modified_gmt":"2010-03-19T17:18:06","slug":"install-ntop-on-your-cactiez-server","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=1642","title":{"rendered":"Install NTOP On Your CactiEZ Server"},"content":{"rendered":"<p>NTOP is a netflow collector, or it can be used to promiscuously sniff on a port.<\/p>\n<p>I do prefer flow viewer, but for those of you that prefer an easier, friendlier interface, here&#8217;s how you install NTOP.  <\/p>\n<p><strong>Set your repository up for dag:<\/strong><\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">rpm -Uhv http:\/\/apt.sw.be\/redhat\/el4\/en\/i386\/rpmforge\/RPMS\/rpmforge-release-0.3.6-1.el4.rf.i386.rpm<\/code><\/pre>\n<p><strong>Then install ntop:<\/strong><\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">yum install ntop<\/code><\/pre>\n<p><strong>You will need to setup an admin password:<\/strong><\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">\/usr\/bin\/ntop<\/code><\/pre>\n<p>It will prompt you for the admin password, go ahead and assign it.<\/p>\n<p><strong>Then make an allowance in your firewall for port 3000:<\/strong><br \/>\n<figure id=\"attachment_1643\" aria-describedby=\"caption-attachment-1643\" style=\"width: 630px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/gregsowell.com\/wp-content\/uploads\/2010\/03\/firewall.png\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/gregsowell.com\/wp-content\/uploads\/2010\/03\/firewall.png\" alt=\"\" title=\"firewall\" width=\"630\" height=\"489\" class=\"size-full wp-image-1643\" srcset=\"https:\/\/gregsowell.com\/wp-content\/uploads\/2010\/03\/firewall.png 630w, https:\/\/gregsowell.com\/wp-content\/uploads\/2010\/03\/firewall-300x232.png 300w\" sizes=\"auto, (max-width: 630px) 100vw, 630px\" \/><\/a><figcaption id=\"caption-attachment-1643\" class=\"wp-caption-text\">Using webmin add tcp 3000<\/figcaption><\/figure><br \/>\nBe sure to apply those firewall changes.<\/p>\n<p><strong>Edit \/etc\/init.d\/ntop as follows:<\/strong><br \/>\nChange<\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">    daemon $prog -d -L @\/etc\/ntop.conf<\/code><\/pre>\n<p>to<\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">    daemon $prog @\/etc\/ntop.conf -d -L<\/code><\/pre>\n<p><strong>Issue the below to start ntop:<\/strong><\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">service ntop start<\/code><\/pre>\n<p><strong>Browse to http:\/\/cactiIP:3000<\/strong>.  Then configure your startup settings using username admin and whatever password you set above.<\/p>\n<p><strong>I&#8217;m dumping netflow, so I went to plugins -> netflow and enabled it.<br \/>\nI then configured a netflow interface.<br \/>\nI then switched the listening NIC to that netflow interface.<\/strong><\/p>\n<p><strong>Following this I set my router to dump the netflow to my server:<\/strong><\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">router-(config)#interface FastEthernet 0\/1\r\nrouter-(config-if)#ip route-cache flow\r\nrouter-(config-if)#exit\r\nrouter-(config)#ip flow-export destination 192.168.0.2 2055\r\nrouter-(config)#ip flow-export source FastEthernet 0\/1\r\nrouter-(config)#ip flow-export version 5\r\nrouter-(config)#ip flow-cache timeout active 5\r\nrouter-(config)#ip flow-cache timeout inactive 300<\/code><\/pre>\n<p>Be sure to add the cache flow command to all interfaces that data moves in and out on.  The netflow info is only generated incoming into the interface.<\/p>\n<p>Done.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>NTOP is a netflow collector, or it can be used to promiscuously sniff on a port. I do prefer flow viewer, but for those\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,10,8],"tags":[],"class_list":["post-1642","post","type-post","status-publish","format-standard","hentry","category-cacti","category-cacti-tutorials","category-networking"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1642"}],"version-history":[{"count":5,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1642\/revisions"}],"predecessor-version":[{"id":1648,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1642\/revisions\/1648"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}