ntopng 0.8.13_10 on 2.7.0 [Build 2.7.0.a.20221221.1946]

LandRocket

I haven't posted this to redmine, as I prefer to figure out if I've got an OSI Layer 8 error first

I've been reinstalling pfSense-CE 2.7 to try and make sure that I'm not messing things up with my configuration, and also just trying to get things how I want them... and I'm getting there.

However, today's task was to install ntopng from packages, and the install goes brilliantly, however every access to the ntopng WebUI would complain that it was running without Geolocation support.

I have a Maxmind key, as I'm using GeoIP with pfBlockerNG-devel.

I've managed to "bodge" a fix, but I wanted to be 100% sure that I'm not doing something stupid....

My bodge to get GeoIP working with ntopng:

Login to your Maxmind account here
On the left hand side, under the GeoIP2 / GeoLite2 header, click on "Download Files"
For the 1st Entry "GeoLite2 ASN", click on "Get Permalinks"

This returns:
https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-ASN&license_key=YOUR_LICENSE_KEY&suffix=tar.gz

If you really want to, you can get the permalink for GeoLite2 City, but I'm going to save you the trouble...

From a pfSense shell (console/SSH):

cd /usr/local/bin
cp ntopng-geoip2update.sh ntopng-geoip2update.bak
vi ntopng-geoip2update.sh

Look for the lines (currently starting at lline 28):

echo Fetching GeoLite2-City
_fetchextract 'https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz'

echo Fetching GeoLite2-ASN
_fetchextract 'https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz'

Change this to
(whilst also replacing YOUR_LICENSE_KEY with your own personal GeoLite2 DB License Key

echo Fetching GeoLite2-City
_fetchextract 'https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=YOUR_LICENSE_KEY&suffix=tar.gz'

echo Fetching GeoLite2-ASN
_fetchextract 'https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-ASN&license_key=YOUR_LICENSE_KEY&suffix=tar.gz'

Restarting the ntopng service then brings back the GeoIP options in the WebIF