Use ntop to analyze network traffic

Use ntop to analyze network traffic
Business (xian) Business (de) needs (dan) to (teng), do the LAN egress traffic analysis.
Ntop is a mature network traffic analysis tool, which is easy to install and quick to use. It charges fees and takes several minutes to install it.
Environment: 1) configure an image port for the Huawei switch.
2) The network port p2p2 is connected to the Image Port of the DELL server.
3) CentOS 7

1. Configure the source. (Reference http://packages.ntop.org/centos)

 
 

  
  
cd /etc/yum.repos.d/
 
  
  
wget http://packages.ntop.org/centos/ntop.repo -O ntop.repo
  
  
wget http://packages.ntop.org/centos/epel-7.repo -O epel.repo

 
 

Ii. Installation (first re-create the source cache)

 
 

  
  
yum clean all
 
  
  
yum update

  
  
yum install pfring n2disk nprobe ntopng ntopng-data cento
 
 

3. Start the software
1. Start redis

 
 

  
  
systemctl start redis 
 
 

2. Start the collector.

Listens to port 5556 as the data receiving Interface

 
 

  
  
ntopng -i "tcp://127.0.0.1:5556" 
 
 

3. Start the detector.

The Detector collects data from the p2p2 interface and sends it to the tcp5556 interface.

 
 

  
  
nprobe --zmq "tcp://*:5556" -i p2p2 
 
 

4. web access interface.
Now you can directly access the web management interface through a browser.
Http: // 172.16.180.100: 3000/initial username/password admin/admin

As follows: