Robin we will provide instructions as soon as the ntopng development will be completed. Basically you need to complete this setup: http://www.ntop.org/wp-content/uploads/2015/04/Ubiquity.png
In essence 1. ntopng acts as a bridge in user-space: you do not need to set a bridge on Linux 2. You do not need to set an IP to the network interfaces 3. promiscuous mode is set by ntopng 4. *MAKE SURE YOU DON'T CREATE ANY LOOP IN YOUR NETWORK* This said in the Interfaces stats page you see statistics of dropped traffic. Please check if some packets are dropped by ntopng according to the policy you specified. You can see a configuration example here. Please let mw know your findings Regards Luca On 04/11/2015 10:38 PM, Robin Morrison wrote: > Hello all, > > I'm a relatively newbie when it comes to ntopng, but I love what I see > so far... > > I've been setting up an ntopng box using the development version of > ntopng so I could experiment with the layer 7 firewall/traffic > management. I seem to have managed to get the bridge up an running, > but I'm not sure it's working as well as it should be as some of the > devices behind the ntopng can't seem to access some of the servers on > the wan side of the ntopng. > > Is there a prefered configuration for the nics that are going to be > bridged using ntopng? Right now I have both sides inside my LAN as I > only put half my network behind it (so as to not completely cut off my > internet access while building this.) > > My Server has 4 NICs (2 embedded) and a Dual Port Bypass Card from > Silicom which is currently operating in Standard NIC mode, so > effectively is 2 Intel 1GBit NICs as far as Ubuntu/ntopng is > concerned. Should I be setting these ports to promiscuous mode, > setting them as static ip devices, or some other way? I'm trying to > build it as a bump in the wire setup that would go in place before my > Cisco ASA5520 and after my iPrism web filter, so I'm thinking the > adapters would work better in promiscuous mode, but I can't seem to > get it to play nice. > > If anyone has a cheat sheet for the Layer 7 recommended setups that > would be great. > > Thanks very much! > > Robin > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
