ntop / ntopng

[Subliminal Aura]

The last time I used ntop was like 2 decades ago and it was a chunky and clunky app

Man this software has come a long way

Running this in a docker container on my hypervisor (proxmox) listening to bond0 which hosts all my VMs including openwrt

Docker compose

services:
   ntop:
     image: ntop/ntopng:stable
     restart: always
     network_mode: "host"
     command: ["-i", "bond0", "-w", "3010", "-n", "1", "-m", "10.0.0.0/24=LAN,10.0.1.0/24=IOT","--community","--disable-login", "1", "--no-promisc"]
     environment:
       TZ: "Europe/London"

 

[Ad_Augendae]

Noted thanks

Mikrotik​

ntopng features Mikrotik traffic monitoring. To monitor Mikrotik traffic, ntopng needs to be used in combination with nProbe (see Using ntopng with nProbe). A blog post How to Analyse MikroTik Traffic Using ntopng explains how to properly configure the Mikrotik, nProbe and ntopng for this purpose.


Note

An nProbe license is required.

 

[Subliminal Aura]

ntopng features Mikrotik traffic monitoring. To monitor Mikrotik traffic, ntopng needs to be used in combination with nProbe (see Using ntopng with nProbe). A blog post How to Analyse MikroTik Traffic Using ntopng explains how to properly configure the Mikrotik, nProbe and ntopng for this purpose.

Yeah that's what I ran into last night when I first installed it as a test on a VM.... How do I actually monitor my openwrt instance ?!

I had my thinking all wrong when I realised why not install it on the hypervisor itself instead .... no need for exporting traffic flows - just listen to network bond itself - win win