you can use pfblockerng-devel to block stuff you don't want to be viewed like porn/warez , there are alot of category where you only have to enable, it work with unbound so you must be sure that every pc use dns from 'dns resolver' of pfsense.
also there is squid that you can configure as a transparent proxy +lightsquid that create a report about visited websites. everything is available under system / Package manager / available package

I got it to work!
I uninstalled few times and even set password manually as suggested by damien_vancouver here but it didn't work. I believe what worked at the end is unchecking "Keep Data/Settings" and uninstalling it. Once ntopng was up it was not recognizing default admin password nor new password that I was setting. I also switched between LAN and WAN interface as well. I've tried so many options that I lost the track :)

https://prnt.sc/qy60eb

If you need the granular data of per session then it's custom code, db to store data and API calls from openvpn, if it even exists for openvpn.

Nagios could give you per IP bandwidth usage. Keep in mind, if someone connects from a router, a cafe or college public IP then many people usage will be under 1 IP. So you won't get a per session number.

If somehow the newest version of Nagios has this capability please let the community here know as I've moved on from that utility long ago.

they give an hint : Please ask the package maintainer if ntopng has been compiled with the libcap (capabilities, not libpcap) library (HAVE_LIBCAP in config.status should tell you this).

i don't see any reference to libcap here ->
https://github.com/pfsense/FreeBSD-ports/tree/devel/net/ntopng

ask madpilot i suppose or ignore the error message :)

Thanks I see...I actually have it running on my WAN side not my LAN. I'll set it up on my LAN side. Currently have the IPS policy set to security on the WAN side and just turned on blocking to see if it actually breaks my network. Don't think it's the best way to go about this but then I can open things up as they pop up.

@victorhooi said in ntopng 3.6 is quite old - any chance this could be updated? =):

Hi,

Ah - awesome.

Guess that's another reason for me to try pfSense 2.5.0 again =).

How is the stability for non-Production or lab usage right now? (This would be on a Netgate SG-3100 or Netgate XG-7100 - we have several of both).

And tangent - but do you know if the native builders for Go/Rust is fixed in 2.5.0 as well? (This is related to the missing Telegraf builds for ARM).

Thanks,
Victor

If anyone can comment, I'd like to know also. I want the latest ntopng package.

https://forum.netgate.com/topic/137960/issue-ntopng-not-displaying-values-in-historical-correctly

Is this issue the same as mine, I made over a year ago?

Yes.

Be ware : it might exists already. ntopng is a known tool.
Fire up your web search tool ?!

edit : the access to the GeoIP data will be invalid - their usage isn't free any more (see other forum posts).

Got the log directory changed when following a guide from 2015 from these forums.

-Toube

@Gertjan Thanks. I'll try that.