NTOP installation in CentOS 7/8

Adding the ntop Packages Repository

In order to add the official ntop package repository do (as root):

curl https://packages.ntop.org/centos-stable/ntop.repo > /etc/yum.repos.d/ntop.repo

Then, perform the following steps, depending on your distribution.

Rocky 8

Open your shell and type:

dnf config-manager --set-enabled powertools
dnf install epel-release

CentOS/RedHat 8

Open your shell and type:

yum install epel-releaserpm -ivh http://rpms.remirepo.net/enterprise/remi-release-8.rpmyum install dnf-plugins-corednf config-manager --set-enabled PowerTools  
##you may have to change the key work to powertools in some cases
dnf config-manager --set-enabled remi

CentOS/RedHat 7

Open your shell and type:

yum install epel-release

Installing ntop Packages

Now that the ntop packages repository has been added, packages can be installed as:

yum clean allyum updateyum install pfring-dkms n2disk nprobe ntopng cento ntap

Configure Firewall

Configure firewall to allow traffic to ntopng. If you have not installed firewall in your CentOS 7, then install it using following commands.

#yum install firewalld
#systemctl start firewalld
#systemctl enable firewalld

Now open the following port to public using firewall-cmd

#firewall-cmd --zone=public --add-port=3000/tcp --permanent
#firewall-cmd --zone=public --add-port=6379/tcp --permanent
#firewall-cmd --reload

 

Create configuration files for ntopng

By default, redis and ntopng installed in /usr/local/ folder.  We need to create configuration files for ntopng.

# cd /usr/local/etc
# mkdir ntopng
# cd ntopng
# nano ntopng.start

Put these lines :

–local-network “192.168.0.0”             ### 192.168.0.0 is the network ID##
–interface 0
Create ntop config file:
# nano ntopng.pid
Put this line :
-G=/var/run/ntopng.pid
ntopng pid location
Restart ntopng/redis
# systemctl restart redis
# systemctl restart ntopng

Access the ntop dashboard at 192.168.0.x:3000



Comments

Post a Comment

Popular posts from this blog

Configure IPsec site-to-site VPN in Linux Machine

Image
 Configure IPsec site-to-site VPN in Linux Machine: Update the system and install the package  apt update && sudo apt upgrade -y  apt install strongswan -y Check if the following kernel parameter is set or not sysctl net.ipv4.ip_forward=1 To list all configured parameters: sysctl -a root@ubuntu-server-main:~# sysctl net.ipv4.ip_forward=1 net.ipv4.ip_forward = 1 root@ubuntu-server-main:~# sysctl net.ipv4.conf.all.accept_redirects=0 net.ipv4.conf.all.accept_redirects = 0 root@ubuntu-server-main:~# sysctl net.ipv4.conf.all.send_redirects=0 net.ipv4.conf.all.send_redirects = 0 root@ubuntu-server-main:~# Network Diagram: IPsec Config: Configure the PSK and update the VPN endpoints ++++++++++++++ cat /etc/ipsec.secrets # source      destination 192.168.0.2   192.168.0.108 : PSK "87zRQqylaoeF5I8o4lRhwvmUzf+pYdDpsCOlesIeFA/2xrtxKXJTbCPZgqplnXgPX5uprL+aRgxD8ua7MmdWaQ" ++++++++++++++ cat /etc/ipsec.conf: config setup         charondebug="all"         uniqueids=yes  
Read more

TACACS+ Installation on Linux [CentOS]

 TACACS+  Installation on CentOS: In the example below I will show you how to install tac_plus on a CentOS server. There’s a RPM available so this will save you the hassle of compiling the source code yourself. Let’s add the repository first: [root@server ~]# cd /etc/yum.repos.d/ [root@server yum.repos.d]# vim nux-misc.repo We will create a new repository file where we can grab tac_plus. This is what you should enter: [nux-misc] name=Nux Misc baseurl=http://li.nux.ro/download/nux/misc/el6/x86_64/ enabled=0 gpgcheck=1 gpgkey=http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro Save the file and install tac_plus with the following command: [root@server ~]# yum --enablerepo=nux-misc install tac_plus That’s all you need to do. All configuration is done from a single config file. Let’s take a look at its contents: [root@server /]# vim /etc/tac_plus.conf You will see a lot of things in this default configuration file. Let me walk you through some of the fields. The first thing you see is a key,
Read more

Free Radius setup/configuration in Linux [Ubuntu/CentOS]

Free Radius setup/configuration in Linux [Ubuntu/CentOS]   1) Free RADIUS Client: CentOS:  yum install freeradius-utils Ubuntu: apt-get install freeradius-utils   2) Free RADIUS Server: Add the client device to free RADIUS server: i) vi /etc/freeradius/3.0/clients.conf  ii) Append below lines to the file above ############# client FortiGate-VM64-Xen {        ipaddr           = 192.168.0.108        secret           = testing123 } client sumit-linux-amp {        ipaddr           = 192.168.0.190        secret           = testing123 } #############   iii) Add users to the RADIUS server: Append below lines to the file "users" > vi /etc/freeradius/3.0/users #############  sumit1 Cleartext-Password := "password" sumit2 Cleartext-Password := "password"   #############   iv) restart the free RADIUS services: Ubuntu: > systemctl restart freeradius   CentOS: >  systemctl restart freeradius                   > sudo firewall-cmd --add-service={http,https,ra
Read more