19.11. Using ntop for Colorful and Quick Network Monitoring
Problem
You like tcpdump and Wireshark just fine, but they're not easy to read, and don't give you nice visual snapshots of network activity. Isn't there some program that will monitor and collect network traffic data, and aggregate statistics, and make nice colorful charts so you can see at a glance what your network is doing? Such as established connections, protocols used, and traffic statistics? And that is quick and easy to set up?
Solution
You want ntop, which is a hybrid packet analyzer that monitors network protocols, and creates nice HTML charts and graphs. Debian users should install it this way:
# aptitude install ntop rrdtool graphvizFedora users will have to dig up an RPM (try http://rpm.pbone.net/),or build it from sources. You must have libpcap and GDBM installed, and some sort of HTTP server. (Lighttpd is an excellent lightweight HTTP server.) You should also install:
RRDTool
Graphviz
OpenSSL
ZLib
GDChart
GDLib
LibPNG
Ettercap
After installing ntop, start it with this command:
# /etc/init.d/ntop startIt will ask you for a password for the admin user. Then, open a web browser to http://localhost:3000. Give it a few minutes to collect some data, and you can help it along by checking email and web surfing. The pages will automatically refresh.
Everything is configurable via the web interface. You should visit Admin → Configure → Startup Options first to configure what you want monitored, such as the local machine only, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access