Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Ntopng development

    Scheduled Pinned Locked Moved Traffic Monitoring
    83 Posts 28 Posters 37.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • kesawiK
      kesawi
      last edited by

      @polcape:

      I have the same problem. It's caused by an error to build the ssl certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

      Thanks, that fixed it.

      1 Reply Last reply Reply Quote 0
      • dennypageD
        dennypage
        last edited by

        Odd that your CERT doesn't have a new line at the end. Easy enough to fix. Where did the certificate originate from? Was it generated or imported?

        1 Reply Last reply Reply Quote 0
        • P
          polcape
          last edited by

          My CERT is imported.
          Where I find it in PFSense to add newline?

          Thanks

          1 Reply Last reply Reply Quote 0
          • dennypageD
            dennypage
            last edited by

            Unfortunately once a cert is imported, you cannot edit it. You can edit CAs, but not certs.

            1 Reply Last reply Reply Quote 0
            • kesawiK
              kesawi
              last edited by

              @dennypage:

              Odd that your CERT doesn't have a new line at the end. Easy enough to fix. Where did the certificate originate from? Was it generated or imported?

              I imported mine as well. Certificate works fine on the pfSense WebGUI

              @dennypage:

              Unfortunately once a cert is imported, you cannot edit it. You can edit CAs, but not certs.

              When importing a certificate into pfSense, the key and the certificate are pasted into separate form fields, so if the new line is skipped, it would be something to do with the way pfSense processes the data.

              1 Reply Last reply Reply Quote 0
              • dennypageD
                dennypage
                last edited by

                pfSense takes the pasted data exactly as is, so it means that the certificated when pasted didn't end in a newline. What you would see in the input box is that after the paste the cursor is at the end of the line that says "–---END CERTIFICATE-----" rather than on the next line.

                My guess is that the certificate originated on a Windows system which sometimes omits the newline on files.

                1 Reply Last reply Reply Quote 0
                • dennypageD
                  dennypage
                  last edited by

                  A PR has been created.

                  1 Reply Last reply Reply Quote 0
                  • dennypageD
                    dennypage
                    last edited by

                    Version 0.8.4_4 has the fix for the missing newline at the end of the certificate.

                    1 Reply Last reply Reply Quote 0
                    • empbillyE
                      empbilly
                      last edited by

                      @polcape:

                      I have the same problem. It's caused by an error to build the ssl certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

                      If you edit this file you have to change line between the certificate and the private key from
                      –---END CERTIFICATE----------BEGIN PRIVATE KEY-----
                      to
                      -----END CERTIFICATE-----
                      -----BEGIN PRIVATE KEY-----

                      So you have to add the newline with enter key.

                      Now works fine.

                      This tip save my day!!! :D

                      Thanks!!!!

                      https://eliasmoraispereira.wordpress.com/

                      1 Reply Last reply Reply Quote 0
                      • empbillyE
                        empbilly
                        last edited by

                        @dennypage:

                        Version 0.8.4_4 has the fix for the missing newline at the end of the certificate.

                        Yes!!! This new update fix missing newline at the end of the certificate.

                        Thanks!!

                        https://eliasmoraispereira.wordpress.com/

                        1 Reply Last reply Reply Quote 0
                        • dennypageD
                          dennypage
                          last edited by

                          Hey polcape, kesawi, can you let me know if your problem is resolved after you install 0.8.4_4 please? Thanks.

                          1 Reply Last reply Reply Quote 0
                          • kesawiK
                            kesawi
                            last edited by

                            @dennypage:

                            Hey polcape, kesawi, can you let me know if your problem is resolved after you install 0.8.4_4 please? Thanks.

                            Problem resolved, thanks for your quick response.

                            1 Reply Last reply Reply Quote 0
                            • P
                              polcape
                              last edited by

                              I confirm! Problem resolved!

                              Thanks for quickly fix!

                              1 Reply Last reply Reply Quote 0
                              • NogBadTheBadN
                                NogBadTheBad
                                last edited by

                                Could someone please get the ntopng setup to parse IPv6 addresses too.

                                I can cludge it by adding my IPv6 addresses to ntopng.sh but every time i go into the noting settings it just resets the values to my IPv4 addresses.

                                Andy

                                1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                1 Reply Last reply Reply Quote 0
                                • dennypageD
                                  dennypage
                                  last edited by

                                  Thanks for the help diagnosing guys. Much appreciated!

                                  @polcape:

                                  I confirm! Problem resolved!
                                  Thanks for quickly fix!

                                  @kesawi:

                                  Problem resolved, thanks for your quick response.

                                  1 Reply Last reply Reply Quote 0
                                  • kesawiK
                                    kesawi
                                    last edited by

                                    @Cino:

                                    I was able to get mysql historical data to work.

                                    I've been able to get ntopng to log data to MySQL for the LAN interface, but it didn't read any of the data back until I relocated the database on my NAS from the HDD array to the SSD array as the HDD was too slow to respond the the queries.

                                    Only LAN is keeping historical data. Not sure why but my other interfaces are vlans so that may have something to do with it.  Needs more testing to confirm.

                                    I modified the  /usr/local/pkg/ntopng.inc file to manually specify the interface for the NIC rather than the VLAN. All of my internal VLANs run through lagg0, so by changing the start up option as below it captures all VLANs on the lagg0 interface and allows me to then bring up global stats or those related to the specific VLAN I'm interested in.

                                    
                                    	$start .= "\t/usr/local/bin/ntopng -d /var/db/ntopng -G /var/run/ntopng.pid -e {$disable_alerts} -i lagg0 {$dump_flows} {$dns_mode} {$aggregations} {$local_networks} &\n";
                                    
                                    

                                    It would be great if the pfSense ntopng Settings could be updated to allow the underlying interface to be specified if VLANs are being used, and allow mysql settings to be entered from the webGUI.

                                    I've also been playing around with the -S local command line option to see if local hosts can be cached longer so that I can investigate specific hosts that may have been inactive for a little while. It would be good if this could be added as a configurable option in the webGUI as well.

                                    1 Reply Last reply Reply Quote 0
                                    • R
                                      reggie14
                                      last edited by

                                      I can't log into the webgui anymore under Chrome on Windows- the login button grays out as soon as I enter the second character of the password.  It's works fine on Edge.  Is anyone else having that problem?

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        sven784230
                                        last edited by

                                        Does this package still have a maintainer? Is the development still in progress?

                                        1 Reply Last reply Reply Quote 0
                                        • MikeV7896M
                                          MikeV7896
                                          last edited by

                                          @reggie14:

                                          I can't log into the webgui anymore under Chrome on Windows- the login button grays out as soon as I enter the second character of the password.  It's works fine on Edge.  Is anyone else having that problem?

                                          This has been found to be the Chrome RegEx issue that has plagued other parts of pfSense as well. A fix has been found, but hopefully the issue will be fixed in a future version of Chrome. See the link below for how to fix the ntop login page to work again in the meantime:

                                          https://forum.pfsense.org/index.php?topic=119163.msg660247#msg660247

                                          The S in IOT stands for Security

                                          1 Reply Last reply Reply Quote 0
                                          • N
                                            neo12_15
                                            last edited by

                                            Hello,
                                            Can be possible in a future version could activate the pro features?
                                            Or two editions for install.
                                            Because the html reports could be userful for me and other people.

                                            Thanks

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.