How to Monitor Network Traffic Using Ntopng on Ubuntu 18.04 LTS

Ntopng is a powerful, open-source software designed for real-time network traffic monitoring, offering an intuitive web interface. It is the successor to the original Ntop tool, functioning similarly to the popular Unix ‘top’ command by displaying network usage statistics. Ntopng supports various operating systems, including Unix, Linux, macOS, BSD, and Windows.

This guide will walk you through installing Ntopng on an Ubuntu 18.04 LTS (Bionic Beaver) server.

Requirements

  • An Ubuntu 18.04 server.
  • A non-root user account with sudo privileges.

Install Ntopng

Ntopng is not included in the default Ubuntu 18.04 repository. Follow these steps to add the necessary repository and install Ntopng:

wget http://apt.ntop.org/18.04/all/apt-ntop.deb
sudo dpkg -i apt-ntop.deb

After adding the repository, update your package list and install Ntopng along with its dependencies using the following commands:

sudo apt-get update -y
sudo apt-get install pfring-dkms nprobe ntopng n2disk cento -y

Configure Ntopng

Post-installation, modify the Ntopng configuration file located at /etc/ntopng/ntopng.conf:

sudo nano /etc/ntopng/ntopng.conf

Add or modify the following configuration settings:

-G=/var/run/ntopng.pid

    ## Specifies the network interface or collector endpoint for network monitoring.
    -i=enp0s3

    ## Defines the HTTP port for the web server.
    -w=3000

After saving and closing the file, create the ntopng.start file:

sudo nano /etc/ntopng/ntopng.start

Add lines reflecting your network configuration:

--local-networks "192.168.0.0/24"  ## Provide your local IP ranges here.
    --interface 1

Save and close the file. Then restart Ntopng and configure it to launch at boot:

sudo systemctl start ntopng
sudo systemctl enable ntopng

Access Ntopng

Once Ntopng is running, it listens on port 3000. To access it, open a web browser and navigate to http://your-server-ip:3000. You will be presented with the following login page:

Access Ntopng

Use the default credentials: username as “admin” and password as “admin”, and click the Login button. You should then see the Ntopng dashboard:

Ntopng web view

Links

FAQ

What should I do if the configuration file is missing or needs adjustment?

Ensure that you correctly installed Ntopng and that the file paths are accurate. Follow the editing instructions carefully, specifying the appropriate network interface and IP ranges.

How can I change the default login credentials?

To enhance security, change the default password by accessing the web interface and navigating to the settings section. Alternatively, modify user credentials by editing configuration files as specified in the Ntopng documentation.

What to do if Ntopng does not start?

Check the service status with sudo systemctl status ntopng for any errors. Make sure all dependencies are installed, and verify your configuration files for any misconfigurations.

Is it possible to run Ntopng on a different port?

Yes, you can specify a different port by modifying the -w option in the /etc/ntopng/ntopng.conf file to match your preferred port number.