Ntopng development

dennypage

Output from sum is: 59748 12 /usr/local/pkg/ntopng.inc (so previosly file was modified by me);

Yep, that's the old version of ntopng.inc.

The problem is in the repository. There are three branches in the repository that are pertinent, devel, 2_3, and 2_3_2. As you would expect, development happens in the devel branch, and changes are then back-ported as appropriate to the other branches. The changed files (Makefile, ntopng.inc) are in devel, and were ported to 2_3 (currently seen as the 2.3.3 test distribution), but the port to 2_3_2 was incomplete. The Makefile change is there, but the ntopng.inc change is not.

There is a new PR to update the version number. I don't believe that the build server will be updated until Monday or possibly Tuesday. In the meantime, you can apply the following patch:

/usr/local/pkg: diff ntopng.inc.old ntopng.inc.new
149c149
< $http_args = "-w 0 -W 3000\n";
–-

$http_args = "-w 0 -W 3000";
152c152
< $http_args = "-w 3000\n";

$http_args = "-w 3000";

kesawi

Made the changes, saved the configuration through the GUI, still getting the error.

dennypage

Okay, let's start over following these steps:

1. Confirm the sum of ntopng.inc. It should be 51966.

2. Save the configuration on the ntopng settings page.

3. Post the contents of /usr/local/etc/rc.d/ntopng.sh as generated. Please use a code section to ensure that there are no changes in posting.

4. Post the entire output from ntopng startup (including the error message).

kesawi

@dennypage:

Okay, let's start over following these steps:

1. Confirm the sum of ntopng.inc. It should be 51966.

sum /usr/local/pkg/ntopng.inc
51966 12 /usr/local/pkg/ntopng.inc

2. Save the configuration on the ntopng settings page.

Done

3. Post the contents of /usr/local/etc/rc.d/ntopng.sh as generated. Please use a code section to ensure that there are no changes in posting.

cat /usr/local/etc/rc.d/ntopng.sh
#!/bin/sh
# This file was automatically generated
# by the pfSense service handler.

rc_start() {
                /usr/local/bin/redis-server --dir /var/db/ntopng/ --dbfilename ntopng.rdb &
        /usr/local/bin/ntopng -d /var/db/ntopng -G /var/run/ntopng.pid -s -e -w 0 -W 3000 -H   -i 'lagg0_vlan2' -i 'lagg0_vlan10' -i 'lagg0_vlan15' --dns-mode '0'  --local-networks '192.168.2.0/24,192.168.10.0/24,192.168.15.0/28' &

}

rc_stop() {
        /usr/bin/killall ntopng redis-cli redis-server

}

case $1 in
        start)
                rc_start
                ;;
        stop)
                rc_stop
                ;;
        restart)
                rc_stop
                rc_start
                ;;
esac

4. Post the entire output from ntopng startup (including the error message).

 /usr/local/etc/rc.d/ntopng.sh start
                 _._                                                                                                                                                                      
           _.-``__ ''-._
      _.-``    `.  `_.  ''-._           Redis 3.0.7 (00000000/0) 64 bit
  .-`` .-```.  ```\/    _.,_ ''-._
 (    '      ,       .-`  | `,    )     Running in standalone mode
 |`-._`-...-` __...-.``-._|'` _.-'|     Port: 6379
 |    `-._   `._    /     _.-'    |     PID: 87223
  `-._    `-._  `-./  _.-'    _.-'
 |`-._`-._    `-.__.-'    _.-'_.-'|
 |    `-._`-._        _.-'_.-'    |           http://redis.io
  `-._    `-._`-.__.-'_.-'    _.-'
 |`-._`-._    `-.__.-'    _.-'_.-'|
 |    `-._`-._        _.-'_.-'    |
  `-._    `-._`-.__.-'_.-'    _.-'
      `-._    `-.__.-'    _.-'
          `-._        _.-'
              `-.__.-'

87223:M 05 Sep 21:29:15.310 # Server started, Redis version 3.0.7
87223:M 05 Sep 21:29:15.316 * DB loaded from disk: 0.005 seconds
87223:M 05 Sep 21:29:15.316 * The server is now ready to accept connections on port 6379
05/Sep/2016 21:29:15 [Prefs.cpp:915] Logging into /var/db/ntopng/ntopng.log
05/Sep/2016 21:29:15 [Ntop.cpp:1013] Setting local networks to 192.168.2.0/24,192.168.10.0/24,192.168.15.0/28
05/Sep/2016 21:29:15 [Redis.cpp:92] Successfully connected to redis 127.0.0.1:6379@0
05/Sep/2016 21:29:15 [Ntop.cpp:987] Parent process is exiting (this is normal)

polcape

I have the same problem. It's caused by an error to build the ssl certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

If you edit this file you have to change line between the certificate and the private key from
–---END CERTIFICATE----------BEGIN PRIVATE KEY-----
to
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----

So you have to add the newline with enter key.

Now works fine.

kesawi

@polcape:

I have the same problem. It's caused by an error to build the ssl certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

Thanks, that fixed it.

dennypage

Odd that your CERT doesn't have a new line at the end. Easy enough to fix. Where did the certificate originate from? Was it generated or imported?

polcape

My CERT is imported.
Where I find it in PFSense to add newline?

Thanks

dennypage

Unfortunately once a cert is imported, you cannot edit it. You can edit CAs, but not certs.

kesawi

@dennypage:

Odd that your CERT doesn't have a new line at the end. Easy enough to fix. Where did the certificate originate from? Was it generated or imported?

I imported mine as well. Certificate works fine on the pfSense WebGUI

@dennypage:

Unfortunately once a cert is imported, you cannot edit it. You can edit CAs, but not certs.

When importing a certificate into pfSense, the key and the certificate are pasted into separate form fields, so if the new line is skipped, it would be something to do with the way pfSense processes the data.

dennypage

pfSense takes the pasted data exactly as is, so it means that the certificated when pasted didn't end in a newline. What you would see in the input box is that after the paste the cursor is at the end of the line that says "–---END CERTIFICATE-----" rather than on the next line.

My guess is that the certificate originated on a Windows system which sometimes omits the newline on files.

dennypage

A PR has been created.

dennypage

Version 0.8.4_4 has the fix for the missing newline at the end of the certificate.

empbilly

@polcape:

I have the same problem. It's caused by an error to build the ssl certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

If you edit this file you have to change line between the certificate and the private key from
–---END CERTIFICATE----------BEGIN PRIVATE KEY-----
to
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----

So you have to add the newline with enter key.

Now works fine.

This tip save my day!!! :D

Thanks!!!!

empbilly

@dennypage:

Version 0.8.4_4 has the fix for the missing newline at the end of the certificate.

Yes!!! This new update fix missing newline at the end of the certificate.

Thanks!!

dennypage

Hey polcape, kesawi, can you let me know if your problem is resolved after you install 0.8.4_4 please? Thanks.

kesawi

@dennypage:

Hey polcape, kesawi, can you let me know if your problem is resolved after you install 0.8.4_4 please? Thanks.

Problem resolved, thanks for your quick response.

polcape

I confirm! Problem resolved!

Thanks for quickly fix!

NogBadTheBad

Could someone please get the ntopng setup to parse IPv6 addresses too.

I can cludge it by adding my IPv6 addresses to ntopng.sh but every time i go into the noting settings it just resets the values to my IPv4 addresses.

dennypage

Thanks for the help diagnosing guys. Much appreciated!

@polcape:

I confirm! Problem resolved!
Thanks for quickly fix!

@kesawi:

Problem resolved, thanks for your quick response.