ntopng
ntopng is a network traffic probe and analyser. It shows who is talking to whom, which protocols and applications are in use, and keeps historical traffic statistics, with alerting and flow export on top. This installs the free Community Edition from the official ntop repository.
ntopng
In Development
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
Installation
Default install:
1
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/ct/ntopng.sh)"
Default Credentials
| Username | Password |
|---|---|
admin | admin |
Configuration
Config file:
1
/etc/ntopng/ntopng.conf
Notes
Log in at http://[IP]:3000 with admin/admin and change the password immediately.
By default ntopng only sees the container's own traffic. To analyse the whole network you have to feed it traffic - a mirror/SPAN port on your switch, or a flow exporter (NetFlow/sFlow/IPFIX) from your router. Set the interface with the -i line in /etc/ntopng/ntopng.conf.
This is the Community Edition. Retention, historical flow drilldown and some alerting features are reserved for the paid Pro/Enterprise editions.
Installed from the official ntop apt repository (packages.ntop.org/apt-stable), which pulls in redis-server and its other dependencies automatically. Updates go through apt.