码迷,mamicode.com
首页 > 其他好文 > 详细

新一代Ntopng网络流量监控—可视化和架构分析

时间:2015-03-19 13:27:12      阅读:378      评论:0      收藏:0      [点我收藏+]

标签:

技术分享

技术分享

技术分享

技术分享

技术分享

技术分享



What ntopng can do for me? (http://www.ntop.org/products/ntop/)


  • Sort network traffic according to many protocols

  • Show network traffic and IPv4/v6 active hosts

  • Store on disk persistent traffic statistics in RRD format

  • Geolocate hosts

  • Discover application protocols by leveraging on nDPI, ntop’s DPI framework.

  • Characterise HTTP traffic by leveraging on characterisation services provided by block.si. ntopng comes with a demo characterisation key, but if you need a permanent one, please mail info@block.si.

  • Show IP traffic distribution among the various protocols

  • Analyse IP traffic and sort it according to the source/destination

  • Display IP Traffic Subnet matrix (who’s talking to who?)

  • Report IP protocol usage sorted by protocol type

  • Act as a NetFlow/sFlow collector for flows generated by routers (e.g. Cisco and Juniper) or switches (e.g. Foundry Networks) when used together with nProbe.

  • Produce HTML5/AJAX network traffic statistics


Brew快速安装

yanruideMacBook-Pro:~ yanrui$ ruby -v

ruby 2.0.0p481 (2014-05-08 revision 45883) [universal.x86_64-darwin14]

yanruideMacBook-Pro:~ yanrui$ ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

==> This script will install:

/usr/local/bin/brew

/usr/local/Library/...

/usr/local/share/man/man1/brew.1

Press RETURN to continue or any other key to abort

==> Downloading and installing Homebrew...

remote: Counting objects: 237423, done.

remote: Compressing objects: 100% (1040/1040), done.

remote: Total 237423 (delta 711), reused 0 (delta 0), pack-reused 236381

Receiving objects: 100% (237423/237423), 32.52 MiB | 1.01 MiB/s, done.

Resolving deltas: 100% (176649/176649), done.

From https://github.com/Homebrew/homebrew

 * [new branch]      master     -> origin/master

HEAD is now at 0faf905 Return early for the == case in Version#<=>

==> Installation successful!

==> Next steps

Run `brew doctor` before you install anything

Run `brew help` to get started

yanruideMacBook-Pro:~ yanrui$ brew ?

Error: Unknown command: ?

yanruideMacBook-Pro:~ yanrui$ brew?

-bash: brew?: command not found

yanruideMacBook-Pro:~ yanrui$ 

yanruideMacBook-Pro:~ yanrui$ 

yanruideMacBook-Pro:~ yanrui$ brew help

Example usage:

  brew [info | home | options ] [FORMULA...]

  brew install FORMULA...

  brew uninstall FORMULA...

  brew search [foo]

  brew list [FORMULA...]

  brew update

  brew upgrade [FORMULA...]

  brew pin/unpin [FORMULA...]

Troubleshooting:

  brew doctor

  brew install -vd FORMULA

  brew [--env | config]

Brewing:

  brew create [URL [--no-fetch]]

  brew edit [FORMULA...]

  open https://github.com/Homebrew/homebrew/blob/master/share/doc/homebrew/Formula-Cookbook.md

Further help:

  man brew

  brew home

yanruideMacBook-Pro:~ yanrui$ brew info

yanruideMacBook-Pro:~ yanrui$ brew update

Updated Homebrew from 0faf9056 to 90abb002.

==> Updated Formulae

libdnet


Brew install ntopng

yanruideMacBook-Pro:~ yanrui$ brew install ntopng

cairo: XQuartz is required to install this formula.

You can install with Homebrew Cask:

  brew install Caskroom/cask/xquartz

You can download from:

  https://xquartz.macosforge.org

pango: XQuartz is required to install this formula.

You can install with Homebrew Cask:

  brew install Caskroom/cask/xquartz

You can download from:

  https://xquartz.macosforge.org

Error: Unsatisified requirements failed this build.

yanruideMacBook-Pro:~ yanrui$ brew install Caskroom/cask/xquartz

Cloning into ‘/usr/local/Library/Taps/caskroom/homebrew-cask‘...

remote: Counting objects: 128670, done.

remote: Compressing objects: 100% (12/12), done.

remote: Total 128670 (delta 4), reused 0 (delta 0), pack-reused 128658

Receiving objects: 100% (128670/128670), 37.17 MiB | 6.00 KiB/s, done.

Resolving deltas: 100% (85113/85113), done.

Checking connectivity... done.


Ntopng 服务启动

yanruideMacBook-Pro:~ yanrui$ sudo ntopng

19/Mar/2015 11:51:40 [Ntop.cpp:586] Setting local networks to 192.168.1.0/24,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8

19/Mar/2015 11:51:40 [Redis.cpp:74] Successfully connected to Redis 127.0.0.1:6379

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface en0...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface en0 [id: 0]

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface awdl0...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface awdl0 [id: 1]

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface en1...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface en1 [id: 2]

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface en2...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface en2 [id: 3]

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface p2p0...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface p2p0 [id: 4]

19/Mar/2015 11:51:40 [PcapInterface.cpp:81] Reading packets from interface lo0...

19/Mar/2015 11:51:40 [Ntop.cpp:710] Registered interface lo0 [id: 5]

19/Mar/2015 11:51:40 [Utils.cpp:251] User changed to nobody

19/Mar/2015 11:51:40 [main.cpp:184] PID stored in file /var/tmp/ntopng.pid

Error Opening file /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoIPASNum.dat

19/Mar/2015 11:51:40 [Geolocation.cpp:59] WARNING: Unable to read GeoIP database /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoIPASNum.dat

Error Opening file /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat

19/Mar/2015 11:51:40 [Geolocation.cpp:59] WARNING: Unable to read GeoIP database /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat

Error Opening file /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoLiteCity.dat

19/Mar/2015 11:51:40 [Geolocation.cpp:59] WARNING: Unable to read GeoIP database /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoLiteCity.dat

Error Opening file /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoLiteCityv6.dat

19/Mar/2015 11:51:40 [Geolocation.cpp:59] WARNING: Unable to read GeoIP database /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/geoip/GeoLiteCityv6.dat

19/Mar/2015 11:51:40 [HTTPserver.cpp:351] HTTPS Disabled: missing SSL certificate /usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs/ssl/ntopng-cert.pem

19/Mar/2015 11:51:40 [HTTPserver.cpp:352] Please read https://svn.ntop.org/svn/ntop/trunk/ntopng/README.SSL if you want to enable SSL.

19/Mar/2015 11:51:40 [HTTPserver.cpp:389] Web server dirs [/usr/local/Cellar/ntopng/1.2.1/share/ntopng/httpdocs][/usr/local/Cellar/ntopng/1.2.1/share/ntopng/scripts]

19/Mar/2015 11:51:40 [HTTPserver.cpp:392] HTTP server listening on port 3000

19/Mar/2015 11:51:40 [main.cpp:232] Working directory: /var/tmp/ntopng

19/Mar/2015 11:51:40 [main.cpp:234] Scripts/HTML pages directory: /usr/local/Cellar/ntopng/1.2.1/share/ntopng

19/Mar/2015 11:51:40 [Ntop.cpp:206] Welcome to ntopng x86_64 v.1.2.1 (r1.2.1) - (C) 1998-14 ntop.org

19/Mar/2015 11:51:40 [PeriodicActivities.cpp:53] Started periodic activities loop...

19/Mar/2015 11:51:40 [RuntimePrefs.cpp:32] Dump alerts into syslog

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface en0 [id: 1]...

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface awdl0 [id: 2]...

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface en1 [id: 3]...

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface en2 [id: 4]...

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface p2p0 [id: 5]...

19/Mar/2015 11:51:40 [NetworkInterface.cpp:800] Started packet polling on interface lo0 [id: 6]...

Ntopng 依赖组件

技术分享

yanruideMacBook-Pro:Cellar yanrui$ pwd

/usr/local/Cellar

yanruideMacBook-Pro:Cellar yanrui$ ls -lrt

total 0

drwxr-xr-x  3 yanrui  admin  102  3 18 15:58 brew-cask

drwxr-xr-x  3 yanrui  admin  102  3 18 16:13 readline

drwxr-xr-x  3 yanrui  admin  102  3 18 16:13 sqlite

drwxr-xr-x  3 yanrui  admin  102  3 18 16:13 gdbm

drwxr-xr-x  3 yanrui  admin  102  3 18 16:14 openssl

drwxr-xr-x  3 yanrui  admin  102  3 18 16:15 python

drwxr-xr-x  3 yanrui  admin  102  3 18 16:15 autoconf

drwxr-xr-x  3 yanrui  admin  102  3 18 16:16 automake

drwxr-xr-x  3 yanrui  admin  102  3 18 16:16 pkg-config

drwxr-xr-x  3 yanrui  admin  102  3 18 16:16 libtool

drwxr-xr-x  3 yanrui  admin  102  3 18 16:16 gettext

drwxr-xr-x  3 yanrui  admin  102  3 18 16:17 libffi

drwxr-xr-x  3 yanrui  admin  102  3 18 16:17 glib

drwxr-xr-x  3 yanrui  admin  102  3 18 16:17 gobject-introspection

drwxr-xr-x  3 yanrui  admin  102  3 18 16:18 json-glib

drwxr-xr-x  3 yanrui  admin  102  3 18 16:18 wget

drwxr-xr-x  3 yanrui  admin  102  3 18 16:18 zeromq

drwxr-xr-x  3 yanrui  admin  102  3 18 16:18 libtasn1

drwxr-xr-x  3 yanrui  admin  102  3 18 16:19 gmp

drwxr-xr-x  3 yanrui  admin  102  3 18 16:19 nettle

drwxr-xr-x  3 yanrui  admin  102  3 18 16:19 gnutls

drwxr-xr-x  3 yanrui  admin  102  3 18 16:19 json-c

drwxr-xr-x  3 yanrui  admin  102  3 18 16:20 libpng

drwxr-xr-x  3 yanrui  admin  102  3 18 16:20 freetype

drwxr-xr-x  3 yanrui  admin  102  3 18 16:20 fontconfig

drwxr-xr-x  3 yanrui  admin  102  3 18 16:23 pixman

drwxr-xr-x  3 yanrui  admin  102  3 18 16:24 cairo

drwxr-xr-x  3 yanrui  admin  102  3 18 16:30 icu4c

drwxr-xr-x  3 yanrui  admin  102  3 18 16:31 harfbuzz

drwxr-xr-x  3 yanrui  admin  102  3 18 16:31 pango

drwxr-xr-x  3 yanrui  admin  102  3 18 16:31 rrdtool

drwxr-xr-x  3 yanrui  admin  102  3 18 16:32 luajit

drwxr-xr-x  3 yanrui  admin  102  3 18 16:32 geoip

drwxr-xr-x  3 yanrui  admin  102  3 18 16:33 redis

drwxr-xr-x  3 yanrui  admin  102  3 18 16:34 ntopng



新一代Ntopng网络流量监控—可视化和架构分析

标签:

原文地址:http://my.oschina.net/zijingshanke/blog/388864

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!