Ntopng development
-
ntopng is back in the 2.3.2 snapshot, see https://redmine.pfsense.org/issues/6443
However, the ability to install from custom package repository urls was removed in 2.3.x as far as I can tell, so I'm not aware of an easy way to install it on the current 2.3.1 release. (Happy to be corrected on that if someone can point me in the right direction).
-
@Andrew453 Thanks for the details.
I see that 2.3.2 is not a stable build yet.
Guess I'll be waiting a little longer unless someone can correct you :)so I'm not aware of an easy way to install it on the current 2.3.1 release. (Happy to be corrected on that if someone can point me in the right direction).
-
… if you're happy to run off a development snapshot, you can specify the development branch in the update settings in pfSense, but that will update your entire system.
-
I've been following the developments very closely. There isn't any way ntopng is going to be included in 2.3.1 update 2, is there? Or will we need to wait until the stable release of 2.3.2?
-
If it proves stable enough on 2.3.2, it may be made available elsewhere. It's still being tested, though.
-
great. I think there's a lot of ppl waiting for it.
just because it's an excellent interface to monitor realtime bandwidth usage on the fw and I don't seem to be able to find a good alternative to it.
-
Thank you for adding this package! It is working well for me locally, but I am having issues with setting up ntopng over HTTPS via NGINX.
I have tried setting up a proxy_pass directive, but I cannot get past the login screen. I also tried editing the /usr/local/etc/rc.d/ntopng.sh file to add –http-prefix="/ntopng" to the startup strings, but unfortunately I get the same issue.
Can we integrate SSL certificates into ntopng or allow for native nginx https proxy through pfSense's nginx setup?
Thank you!
-
temporarily to fix the authentication/login issue through NGINX, I have added –disable-login '1' to the /usr/local/pkg/ntopng.inc file in the DNS Mode string:
/* DNS Mode */ if (is_numeric($ntopng_config['dns_mode']) && ($ntopng_config['dns_mode'] >= 0) && ($ntopng_config['dns_mode'] <= 3)) { $dns_mode = "--disable-login '1' --dns-mode " . escapeshellarg($ntopng_config['dns_mode']); }I enabled htaccess password protection via nginx.
Everything is working great now! Thanks!
-
If it proves stable enough on 2.3.2, it may be made available elsewhere. It's still being tested, though.
Is there a chance that it will be included as an alpha release in 2.3.2?
-
It's already in 2.3.2. If you install a 2.3.2 snapshot you can use it now (or at least once I get this fix pushed to correct the password handling)
When 2.3.2 releases (probably next week) you'll have access to it.
-
any chance of pulling in the 2.4 version of ntopng that is available in FreeBSD ports?
The changelog is long, but the first 2 items alone seem enough to make it worth it:
-
Memory-management, stability and speed have been fundamentally improved
-
We have kept an eye on security and hardened the code to prevent privileges escalation and XSS
-
-
any chance of pulling in the 2.4 version of ntopng that is available in FreeBSD ports?
The changelog is long, but the first 2 items alone seem enough to make it worth it:
-
Memory-management, stability and speed have been fundamentally improved
-
We have kept an eye on security and hardened the code to prevent privileges escalation and XSS
After we release 2.3.2 we can look into that.
-
-
Great package, haven't used ntop in years and its great to get this level of detail back, thank you! Looking forward to ntopng 2.4
-
Hi Guys
Thanks to everyone involved in getting the ntopng package back into pfsense with version 2.3.2. Its great and works well.
Could I possibly ask for one, hopefully minor, improvement?
For the historical data could we specify the max period that the data is kept for eg. 30 days.
This is should be supported by ntop but I can't find the option to specify the limit before I enable the Historical Data storage
Ref: http://www.ntop.org/ntopng/exploring-historical-data-using-ntopng/Much appreciated.
-
The screen shown on that page is for a MySQL database. That isn't what is in use on pfSense. Eventually the package could grow the ability to export to an external MySQL server, but it wouldn't ever be using a MySQL database on the firewall itself.
-
How are people accessing the ntopng dashboard? I get an SSL error every I try to access it. I'm pretty sure it's because pfsense is using HSTS, and thus my browser always wants to connect via HTTPS instead of HTTP, but I'm not really sure how to work around this problem.
-
Use HTTPS for the GUI and ntopng
-
HTTPS for ntopng isn't working for me. I receive a SSL protocol error when attempting to access. I haven't tracked it down yet. HTTP via IP address works fine.
Use HTTPS for the GUI and ntopng
-
Wasn't too hard to find. HTTPS is disabled because there is no certificate installed. From ntopng.log:
27/Jul/2016 21:45:14 [HTTPserver.cpp:464] HTTPS Disabled: missing SSL certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem 27/Jul/2016 21:45:14 [HTTPserver.cpp:466] Please read https://github.com/ntop/ntopng/blob/dev/doc/README.SSL if you want to enable SSL. 27/Jul/2016 21:45:14 [HTTPserver.cpp:509] Web server dirs [/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts] 27/Jul/2016 21:45:14 [HTTPserver.cpp:512] HTTP server listening on port 3000 -
Thanks Jimp
Using an external MySQL instance would be a great option.
For now though, if we enable the historical usage, where is it going to store the data?
If its in daily files I could just add a cronjob to wipe the older files after x days. Just a thoughtThe screen shown on that page is for a MySQL database. That isn't what is in use on pfSense. Eventually the package could grow the ability to export to an external MySQL server, but it wouldn't ever be using a MySQL database on the firewall itself.
