NTOP-NG

NTOPNG (I rponounce it N-Top-N-G) is a browser based server application you can run in Docker. By setting it up properly, it can scan your entire network and provide analytical data back about traffic patterns ad levels from different machines or sub-networks within your network.

Whether you’re an IT admin, or an at-home self-hoster, viewing, analyzing, and understanding your network traffic patterns can help keep your networks more secure by detecting anomolies and potential intrusion quickly, as well as helping to close security gaps.

Installing NTOPNG in Docker

Install Docker

I have several posts that go through the steps of installing Docker and Docker-Compose on Ubuntu based systems for 18.04 and 20.04. If you don’t have docker setup already, I use Docker_CE (not Docker.io) to run all of my docker containers. I recommend you go back to those posts and get Docker installed at the very least. It’s truly basic terminal commands, and should only take 5 or so minutes. Click the link below, or right click and open it in a new tab or window to reference it as you continue.

https://shownotes.opensourceisawesome.com/putting-it-all-together/

Install NTOPNG

Now that you’ve got Docker installed, it’s time to get into the NTOPNG installation inside of Docker. Not to worry, while most docker containers are “confined” to their container and docker networks, this one is going to be able to access the NIC (Network Interface Card) we specify when running the command to install it and start it up. So let’s go identify our active network device name.

In Linux you have a couple of commands that may give you results. The newer command is

version: ‘3’

services:

ntopng:
image: vimagick/ntopng
command: — community -d /var/lib/ntopng -i ens33 -r 127.0.0.1:6379@0 -w 0.0.0.0:80
volumes:
— ./data/ntopng:/var/lib/ntopng
network_mode: host
restart: unless-stopped

redis:
image: redis:alpine
command: — save 900 1
ports:
— “6379:6379”
volumes:
— ./data/redis:/data
restart: unless-stopped

http://IP

version: ‘3’

services:

ntopng:
image: vimagick/ntopng
command: — community -d /var/lib/ntopng -i ens33 -r 127.0.0.1:6379@0 -w 0.0.0.0:3000
volumes:
— ./data/ntopng:/var/lib/ntopng
network_mode: host
restart: unless-stopped

redis:
image: redis:alpine
command: — save 900 1
ports:
— “6379:6379”
volumes:
— ./data/redis:/data
restart: unless-stopped