Im am very new to this and have very little knowledge with Linux here is what I tried
ntopng -v 03/Nov/2015 10:27:23 [src/Ntop.cpp:785] Setting local networks to 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8,127.0.0.0/8,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 192.168.0.0/16 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 172.16.0.0/12 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 10.0.0.0/8 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 127.0.0.0/8 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 0.0.0.0/32 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 224.0.0.0/8 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 239.0.0.0/8 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 255.255.255.255/32 03/Nov/2015 10:27:23 [src/AddressResolution.cpp:135] Rule 127.0.0.0/8 03/Nov/2015 10:27:23 [src/Redis.cpp:93] Successfully connected to redis 127.0.0.1:6379@0 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:134] ERROR: [LICENSE] Invalid or missing ntopng License [Empty license file] 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:145] WARNING: [LICENSE] ntopng will now run in pro mode for 10 minutes 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:147] WARNING: [LICENSE] before returning to community mode 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:148] WARNING: [LICENSE] You can buy a permanent license at http://shop.ntop.org 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:149] WARNING: [LICENSE] or run ntopng in community mode starting 03/Nov/2015 10:27:23 [pro/NtopPro.cpp:150] WARNING: [LICENSE] ntopng --community 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 0 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 1 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 2 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 3 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 4 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 5 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 6 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 7 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 8 with no shaping max rate 03/Nov/2015 10:27:23 [pro/L7Policer.cpp:80] Created policer 9 with no shaping max rate 03/Nov/2015 10:27:24 [src/NetworkInterface.cpp:2419] Interface [any][Pseudo-device that captures on all interfaces] not valid or down: discarded 03/Nov/2015 10:27:24 [src/NetworkInterface.cpp:2419] Interface [nflog][Linux netfilter log (NFLOG) interface] not valid or down: discarded 03/Nov/2015 10:27:24 [src/NetworkInterface.cpp:2419] Interface [nfqueue][Linux netfilter queue (NFQUEUE) interface] not valid or down: discarded 03/Nov/2015 10:27:24 [src/main.cpp:128] System has 1 CPU cores 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 0 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 1 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 2 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 3 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 4 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 5 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 6 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 7 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 8 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 9 with no shaping max rate 03/Nov/2015 10:27:24 [src/PF_RINGInterface.cpp:54] Reading packets from PF_RING v.6.0.3 interface eth0... 03/Nov/2015 10:27:24 [src/Ntop.cpp:1033] Registered interface view eth0 [id: 1] 03/Nov/2015 10:27:24 [src/Ntop.cpp:1003] Registered interface eth0 [id: 0] 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 0 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 1 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 2 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 3 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 4 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 5 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 6 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 7 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 8 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 9 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 0 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 1 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 2 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 3 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 4 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 5 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 6 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 7 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 8 with no shaping max rate 03/Nov/2015 10:27:24 [pro/L7Policer.cpp:80] Created policer 9 with no shaping max rate 03/Nov/2015 10:27:24 [src/PcapInterface.cpp:81] Reading packets from interface lo... 03/Nov/2015 10:27:24 [src/Ntop.cpp:1033] Registered interface view lo [id: 2] 03/Nov/2015 10:27:24 [src/Ntop.cpp:1003] Registered interface lo [id: 1] 03/Nov/2015 10:27:24 [src/Utils.cpp:292] User changed to nobody 03/Nov/2015 10:27:24 [src/main.cpp:236] PID stored in file /var/tmp/ntopng.pid 03/Nov/2015 10:27:24 [src/HTTPserver.cpp:445] Found SSL certificate /usr/share/ntopng/httpdocs/ssl/ntopng-cert.pem 03/Nov/2015 10:27:24 [src/HTTPserver.cpp:486] ERROR: Unable to start HTTP server (IPv4) on ports 3000,3001s Success I then tried [root@vmnetflow init.d]# ntopng /etc/ntopng/ntopng.conf 03/Nov/2015 10:40:32 [src/Prefs.cpp:795] Logging into /var/tmp/ntopng/ntopng.log 03/Nov/2015 10:40:32 [src/Ntop.cpp:785] Setting local networks to 10.5.21.0/24,192.168.0.0/16,172.16.0.0/16,150.4.0.0/16 03/Nov/2015 10:40:32 [src/Redis.cpp:93] Successfully connected to redis 127.0.0.1:6379@0 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:134] ERROR: [LICENSE] Invalid or missing ntopng License [Empty license file] 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:145] WARNING: [LICENSE] ntopng will now run in pro mode for 10 minutes 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:147] WARNING: [LICENSE] before returning to community mode 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:148] WARNING: [LICENSE] You can buy a permanent license at http://shop.ntop.org 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:149] WARNING: [LICENSE] or run ntopng in community mode starting 03/Nov/2015 10:40:32 [pro/NtopPro.cpp:150] WARNING: [LICENSE] ntopng --community 03/Nov/2015 10:40:32 [src/Ntop.cpp:759] Parent process is exiting (this is normal) [root@vmnetflow ntopng]# more ntopng.conf -G=/var/tmp/ntopng.pid -i=tcp://127.0.0.1:5556 -e= -m="10.5.21.0/24,192.168.0.0/16,172.16.0.0/16,150.4.0.0/16" Colin Bell ICT Engineer Finance & IT Renfrewshire House 0141 618 4848 From: Simone Mainardi <[email protected]> To: [email protected] Date: 02/11/2015 16:19 Subject: Re: [Ntop] ntopng won't start Sent by: [email protected] Colin, The output suggests that you are you trying to start ntopng in HTTPS. Please go through this howto: https://github.com/ntop/ntopng/blob/dev/doc/README.SSL If that doesn't solve the issue then please enclose: - ntopng configuration file or command-line parameters - exact ntopng startup command You may want to add a -v to the startup command to increase verbosity. Simone On Mon, Nov 2, 2015 at 11:34 AM, <[email protected]> wrote: ntopng ran on this box fine, I removed it and then re-installed using YUM it now the service wont start. I don't think there is anything bound to this port what is the best way to determine this? I tried the following below. I also tried to configure ntopng to run on a different port but it still failed to start. [root@vmnetflow init.d]# netstat -lnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 1677/snmpd tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN 1603/redis-server tcp 0 0 0.0.0.0:5556 0.0.0.0:* LISTEN 1040/nprobe tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1690/sshd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1850/master tcp 0 0 :::80 :::* LISTEN 1861/httpd tcp 0 0 :::22 :::* LISTEN 1690/sshd tcp 0 0 ::1:25 :::* LISTEN 1850/master tcp 0 0 :::443 :::* LISTEN 1861/httpd udp 0 0 0.0.0.0:2055 0.0.0.0:* 1040/nprobe udp 0 0 0.0.0.0:161 0.0.0.0:* 1677/snmpd udp 0 0 :::2055 :::* 1040/nprobe Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node PID/Program name Path unix 2 [ ACC ] STREAM LISTENING 11868 1850/master public/cleanup unix 2 [ ACC ] STREAM LISTENING 11875 1850/master private/tlsmgr unix 2 [ ACC ] STREAM LISTENING 11879 1850/master private/rewrite unix 2 [ ACC ] STREAM LISTENING 11883 1850/master private/bounce unix 2 [ ACC ] STREAM LISTENING 11887 1850/master private/defer unix 2 [ ACC ] STREAM LISTENING 11891 1850/master private/trace unix 2 [ ACC ] STREAM LISTENING 11895 1850/master private/verify unix 2 [ ACC ] STREAM LISTENING 11899 1850/master public/flush unix 2 [ ACC ] STREAM LISTENING 11903 1850/master private/proxymap unix 2 [ ACC ] STREAM LISTENING 11907 1850/master private/proxywrite unix 2 [ ACC ] STREAM LISTENING 11911 1850/master private/smtp unix 2 [ ACC ] STREAM LISTENING 11915 1850/master private/relay unix 2 [ ACC ] STREAM LISTENING 11919 1850/master public/showq unix 2 [ ACC ] STREAM LISTENING 11923 1850/master private/error unix 2 [ ACC ] STREAM LISTENING 11927 1850/master private/retry unix 2 [ ACC ] STREAM LISTENING 11931 1850/master private/discard unix 2 [ ACC ] STREAM LISTENING 11935 1850/master private/local unix 2 [ ACC ] STREAM LISTENING 11939 1850/master private/virtual unix 2 [ ACC ] STREAM LISTENING 11943 1850/master private/lmtp unix 2 [ ACC ] STREAM LISTENING 11947 1850/master private/anvil unix 2 [ ACC ] STREAM LISTENING 11951 1850/master private/scache unix 2 [ ACC ] STREAM LISTENING 8325 1/init @/com/ubuntu/upstart Colin Bell ICT Engineer Finance & IT Renfrewshire House 0141 618 4848 From: Simone Mainardi <[email protected]> To: [email protected] Date: 27/10/2015 17:22 Subject: Re: [Ntop] ntopng won't start Sent by: [email protected] make sure no other process is bound to ports 3000 or 3001. simone On Tue, Oct 27, 2015 at 5:48 PM, <[email protected]> wrote: Thanks ill have a read at that. I have used the./ntopng start command successfully in the past. I tried just running ntopng there and this was the outcome ntopng 27/Oct/2015 16:46:09 [src/Ntop.cpp:785] Setting local networks to 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8,127.0.0.0/8,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8 27/Oct/2015 16:46:10 [src/Redis.cpp:93] Successfully connected to redis 127.0.0.1:6379@0 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:134] ERROR: [LICENSE] Invalid or missing ntopng License [Empty license file] 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:145] WARNING: [LICENSE] ntopng will now run in pro mode for 10 minutes 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:147] WARNING: [LICENSE] before returning to community mode 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:148] WARNING: [LICENSE] You can buy a permanent license at http://shop.ntop.org 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:149] WARNING: [LICENSE] or run ntopng in community mode starting 27/Oct/2015 16:46:10 [pro/NtopPro.cpp:150] WARNING: [LICENSE] ntopng --community 27/Oct/2015 16:46:10 [src/PF_RINGInterface.cpp:54] Reading packets from PF_RING v.6.0.3 interface eth0... 27/Oct/2015 16:46:10 [src/Ntop.cpp:1033] Registered interface view eth0 [id: 1] 27/Oct/2015 16:46:10 [src/Ntop.cpp:1003] Registered interface eth0 [id: 0] 27/Oct/2015 16:46:10 [src/PcapInterface.cpp:81] Reading packets from interface lo... 27/Oct/2015 16:46:10 [src/Ntop.cpp:1033] Registered interface view lo [id: 2] 27/Oct/2015 16:46:10 [src/Ntop.cpp:1003] Registered interface lo [id: 1] 27/Oct/2015 16:46:10 [src/Utils.cpp:292] User changed to nobody 27/Oct/2015 16:46:10 [src/main.cpp:236] PID stored in file /var/tmp/ntopng.pid 27/Oct/2015 16:46:10 [src/HTTPserver.cpp:486] ERROR: Unable to start HTTP server (IPv4) on ports 3000,3001s Success Colin Bell ICT Engineer Finance & IT Renfrewshire House 0141 618 4848 From: Lorenzo Mangani <[email protected]> To: [email protected] Cc: [email protected], [email protected] Date: 27/10/2015 16:26 Subject: Re: [Ntop] ntopng won't start Sent by: [email protected] Hi Colin, If you are trying to start the service, that is the wrong syntax. Have you tried running ntopng (with no trailing ./, no parameters) I suggest checking out: https://github.com/ntop/ntopng/blob/dev/doc/README.ntopng and getting familiar with the command line options. Lorenzo Mangani [email protected] NL: +31 20 8080468 US: +1 202 6327227 IT: +39 075 9696117 On Tue, Oct 27, 2015 at 5:02 PM, <[email protected]> wrote: yum install pfring n2disk nprobe ntopng ntopng-data nbox ./ntopng start Starting ntopng: Unable to start ntopng [FAILED] From: Lorenzo Mangani <[email protected]> To: [email protected] Cc: [email protected] Date: 27/10/2015 13:27 Subject: Re: [Ntop] ntopng won't start Sent by: [email protected] Hi Colin, Could you please paste how exactly how you installed and how you are running the command? Regards, Lorenzo Mangani [email protected] NL: +31 20 8080468 US: +1 202 6327227 IT: +39 075 9696117 On Tue, Oct 27, 2015 at 2:04 PM, <[email protected]> wrote: When trying to start the service it fails There is no error message, it simply just says it failed. How to I go about trouble shooting this and finding out the reason for it not starting. Colin Bell ICT Engineer Finance & IT Renfrewshire House 0141 618 4848 Renfrewshire Council Website - http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s). This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipiit/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop Renfrewshire Council Website - http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s). This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipiit/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop Renfrewshire Council Website - http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s). This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop Renfrewshire Council Website - http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s). This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <table width="600"> <tr> <td> <hr size=2> <FONT FACE="arial"> <p>Renfrewshire Council Website - http://www.renfrewshire.gov.uk</p> <p>This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager.</p> <p>Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s).</p> <p>This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses.</p> </FONT> <hr size=2> </td> </tr> </table>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
