Davide
it won’t work on your setup. ntopng is a bump-in-the-wire (i.e a bridge) so you 
need to install it on a a PC/Ubiquity that interconnects your red interface to 
the firewall

Luca

> On 20 Apr 2015, at 12:59, Davide <[email protected]> wrote:
> 
> Thanks a lot Luca,
> the working method is quite clear to me, e.g. I could use a linux box with 2 
> ethernet cards, LAN to eth0, ROUTER to eth1 and processing all the traffic 
> from the lan to the router.
> 
> In my environment I install ntopng  over an UTM firewall, so every ethernet 
> card as a role, e.g. my eth0 is the LAN interface and my eth2 is my RED 
> interface (connected to the router), I make iptables rules in order to make 
> to firewall working as expected as well as send in a transparent way packets 
> to filtering services, should I bridge the local and the public interface?
> Do you already have a best practice to manage this kind of environment?
> thanks in advance
> 
> 
> Davide
> 
>> Hi Davide,
>> 
>>> On 20 Apr 2015, at 10:54, Davide <[email protected] 
>>> <mailto:[email protected]>> wrote:
>>> 
>>> Hi all,
>>> my name is Davide Marini and I write from Italy.
>>> As I saw in this video https://www.youtube.com/watch?v=NT5WHWUBQN4 
>>> <https://www.youtube.com/watch?v=NT5WHWUBQN4> the new ntopng can be used 
>>> for filtering purposes and this is what I would like to do.
>> Note that it i still under-development so some features are not 100% yet 
>> there (example the traffic shaping)
> ok, I just
>> 
>>> I download the 1.99xxx version and I upgraded it to the pro version 
>>> (because of the filtering feature).
>>> Now I'm trying to make it work but I think I need some help...
>>> 
>>> *  do I need to install also pf_ring?
>> Not necessary even though it would be desirable
>>> *  After installed pf_ring do I need to set something other?
>> No, just run as -i bridge:ethX,ethY
>> 
>> Luca
>>> 
>>> Thanks in advance
>>> Davide
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> Ntop mailing list
>>> [email protected]
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> _______________________________________________
>> Ntop mailing list
>> [email protected] <mailto:[email protected]>
>> http://listgateway.unipi.it/mailman/listinfo/ntop 
>> <http://listgateway.unipi.it/mailman/listinfo/ntop>
> 
> _______________________________________________
> Ntop mailing list
> [email protected] <mailto:[email protected]>
> http://listgateway.unipi.it/mailman/listinfo/ntop 
> <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to