Network Traffic Monitoring tools and Analysis Ntop and Ntopng
Ntop Tools
Ntop
Ntop is a tool for monitoring network traffic. Using ntop to display network usage is more intuitive and detailed than some other network management software. Ntop can even list the network bandwidth utilization of each node computer.
How Ntop works
1. command line interface
2. web interface
Ntop's functions
1. Can automatically get useful information from the network
2. The acquired packet information can be converted into a recognizable format
3. Can record the network communication time and process
4. Discover communication in a networked environment
5. Can automatically identify the operating system used by the client
Installation of Ntop
1. download
[root@Clone1 ~]# wget http://download.chinaunix.net/down.php? id=178&ResourceID=93&site=1
2. installation
[root@Clone1 ~]# tar -xf ntop-3.2.tgz
[root@Clone1 ~]# cd ntop-3.2
[root@Clone1 ~]# yum install -y libpcap libpcap-devel zlib zlib-devel gd gd-devel gcc-c++
[root@Clone1 ~]# ./ configure --prefix=/usr/local/ntop --sbindir=/usr/local/sbin --bindir=/usr/local/bin --with-tcpwrap
[root@Clone1 ~]# make && make install
3. configured
[root@Clone1 ~]# cd /usr/local/ntop/var/
[root@Clone1 ~]# chown -R ntop.ntop ntop
Applications of Ntop
1. Change your password for logging in to the web
[root@Clone1 ~]# ntop -A
2. Start ntop service
[root@Clone1 ~]# ntop -i eth0 -L -d
3. Web page view, web default port is 3000, ntop-w parameter can be web port
Ntopng Tool
Ntopng
Ntopng is an upgraded version of Ntop, removing some features from Ntop and adding real-time network monitoring.
Features of Ntopng
1. Graphically and dynamically present traffic status
2. Real-time monitoring and reporting of network data
3. Display IP traffic as rectangles
4. HTML5/AJAX-based web traffic statistics can be generated
5. Support historical data analysis
6. Dynamic graphical user interface based on HTML5
Ntopng Installation
1. download
[root@Clone2 ]# wget https://jaist.dl.sourceforge.net/project/ntop/ntopng/ntopng-2.4-stable.tar.gz
2. installation
[root@Clone2 ]# cd ntopng-2.4-stable
[root@Clone2 ]# yum install automake git libpcap-devel libcurl-devel sqlite-devel mysql-devel
[root@Clone2 ]# ./ configure --bindir=/usr/local/bin --sbindir=/usr/local/sbin --prefix=/usr/local/ntopng
[root@Clone2 ]# make && make install
3. configured
[root@Clone2 ]#
4 . start
[root@Clone2 ]# ntop
Ntopng Common Command Details
1. format
ntopng
or
ntopng
2. option
-i: Specify the listening interface
-d: Specify database directory, default is/var/tmp/ntopng
-1: http documents, default to httpdocs
-2: scripts dir, default to scripts
-3: callbacks dir, default to scripts, callbacks
-w: Specify http port, default is 3000
-W: Specify HTTPS port. Default is 3001
-U user: The user who executes ntopng.
Ntop's web page
