ntopng for IPFire

[ummeegge]

Thanks for the flowers , good to hear that it works so far.

Best,

UE

[ummeegge]

Hi all,
updates to ntopng 3.8 and nDPI 2.7, both are now from the stable tree (development versions has been dropped) and a redis update to 5.0.3 (new config) are available now.
Since this here provided version 32bit platforms are not supported anymore but you can download an old 32bit version from here --> https://people.ipfire.org/~ummeegge/ntopng/old/ which you need to install by your own.

As ever for updates or fresh installation, use the commands from the starting topic --> viewtopic.php?f=50&t=19565#p111061 .

The changelogs can be found in here for ntopng-3.8 --> https://github.com/ntop/ntopng/blob/dev/CHANGELOG.md , for nDPI here --> https://github.com/ntop/nDPI/blob/dev/CHANGELOG.md , for redis-5.0.3 here --> https://raw.githubusercontent.com/antir ... LEASENOTES .
Keep in mind that the provided version in here is a community version and a lot of announced changes are not available.

Best,

UE

[Antaris]

Hi UE,

Thaks for the good tool and geep up!

Will this ever be integrated in the Packfire plugins, or i must put it in my favorites?

[ummeegge]

Hi Antaris,
and thanks for your positive feedback.

Will this ever be integrated in the Packfire plugins, or i must put it in my favorites?

Have currently not found a good way to bring Redis on ARM system to life so there is an important platform missing which is needed for IPFire. May this comes in a closer future but am not sure about this. So long i try to keep it here up-to-date.

Best,

UE

[ummeegge]

Hi all,
some news in here -->
https://www.ntop.org/ntopng/ntopng-suri ... -security/
https://www.ntop.org/wp-content/uploads ... n_2019.pdf
https://www.ntop.org/guides/ntopng/adva ... icata.html

may a nice solution ?

OK, this would need Suricata with TCP exported syslog... Rsyslog in that case. Since IPFire uses sysklogd which is unable to export via TCP there is a problem... Mmhh is it ? Since we a re here highly experimental in digging around this one --> https://people.ipfire.org/~ummeegge/rsyslog/ can be helpful ?!

Let´s see.

Best,

UE

[ummeegge]

Hi all,
updated version with big version number jump to v.3.9.191712 (development version) [Community build] which includes updates for libmaxmind to version 1.4.2, redis to version 5.0.7, zeromq to version 4.3.2 and nDPI to version 3.1.191712 (development version) is up.

It is a development version with really a lot´s of changes and also a new surface. Haven´t checked all possibilities but at a first glance it works well here, keep nevertheless in mind that it is a DEV version. So if you want to stay save with your installation, you possibly don´t want install it ?!

For installation/update use the code block in the starting topic --> viewtopic.php?f=50&t=19565#p111061 .

Best,

UE

[Stefan87]

I have update the ntopng whit some errors

Code: Select all

Set HTTPS access from green interface only to ntopng WI...
--------------------------------------------------------------------------------
sed: couldn't flush /etc/ntopng/sed5Fhqlc: No space left on device

Will start now ntopng...
Starting Traffic Analyzer and Flow Collector...
26/Dec/2019 23:24:32 [Prefs.cpp:1078] ntopng will use redis 127.0.0.1@3
26/Dec/2019 23:24:32 [Prefs.cpp:1445] ERROR: Unable to locate callbacks[ FAIL ]
--------------------------------------------------------------------------------
Have added now meta file for de- or activation via IPfire WUI ntopng on reboot..                                                                                                                                                             .

--------------------------------------------------------------------------------
Process can´t be started please come to https://forum.ipfire.org/viewtopic.php?f                                                                                                                                                             =50&t=19565 , try then to help you.
Play backup of redis and ntopng configuration and db back

mv: cannot stat '/tmp/ntopng_bck/ntopng-cert.pem': No such file or directory
chown: invalid user: ‘ntopng:ntopng’
Stopping Traffic Analyzer and Flow Collector...    Not running.        [  OK  ]
Starting Traffic Analyzer and Flow Collector...
26/Dec/2019 23:24:37 [Prefs.cpp:1078] ntopng will use redis 127.0.0.1@3
26/Dec/2019 23:24:37 [Prefs.cpp:1444] ERROR: Unable to locate scripts d[ FAIL ]
ls: cannot access '/usr/share/ntopng/httpdocs/geoip': No such file or directory
Update is finish now.

Something went wrong ntopng has NOT been started, please report this here --> ht                                                                                                                                                             tps://forum.ipfire.org/viewtopic.php?f=50&t=19565 will then try to help you.

edit i have new install ntopng and it works

[ummeegge]

Hi Stefan,
am currently not sure what the problem was there.

ntopng Community Edition v.3.9.200223 is up but is still a dev version and includes again extensive changes but it seems to run pretty stable.

Best,

UE