[Ntop] Anybody tried ntopng on ESXi 6.5

Discussion:

Ajit Sarnaik

2017-09-15 18:45:42 UTC

Hello Folks,

We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
appreciate if anybody has tried it and their experience with it with
regards to the following,
- Can we install any of the stable build provided by ntop.org?
- If stable build is not compatible with ESXi, effort involved in porting.
- Any limitation with regards to protocol and encapsulation
- Any other gotchas

Appreciate the help.

Regards,

Ajit Sarnaik
***@gmail.com

Enrico Kern

2017-09-15 19:16:58 UTC

Permalink

Sorry but what is the usecase to run it directly on esxi?

You can use netflow/sflow on dvswitch or just from your real switch.

You could also create one vm with ntop and use promisc mode in vmware to
see all traffic on this vm where you run ntop.

Post by Ajit Sarnaik
Hello Folks,
We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
appreciate if anybody has tried it and their experience with it with
regards to the following,
- Can we install any of the stable build provided by ntop.org?
- If stable build is not compatible with ESXi, effort involved in porting.
- Any limitation with regards to protocol and encapsulation
- Any other gotchas
Appreciate the help.
Regards,
Ajit Sarnaik
_______________________________________________
Ntop mailing list
http://listgateway.unipi.it/mailman/listinfo/ntop

Hossam

2017-09-15 19:28:50 UTC

Permalink

Hey Ajit

I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run nProbe on promiscuous interface that listens to the vswitch traffic.

We run some our solutions using nProbe on VM. So I can assure u that works fine :)

Sent from my iPhone, apologies for any typo.

Post by Enrico Kern
Sorry but what is the usecase to run it directly on esxi?
You can use netflow/sflow on dvswitch or just from your real switch.
You could also create one vm with ntop and use promisc mode in vmware to see all traffic on this vm where you run ntop.

Post by Ajit Sarnaik
Hello Folks,
We are looking into the possibility of running NTOPNG on ESXi 6.5. Would appreciate if anybody has tried it and their experience with it with regards to the following,
- Can we install any of the stable build provided by ntop.org?
- If stable build is not compatible with ESXi, effort involved in porting.
- Any limitation with regards to protocol and encapsulation
- Any other gotchas
Appreciate the help.
Regards,
Ajit Sarnaik
_______________________________________________
Ntop mailing list
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
http://listgateway.unipi.it/mailman/listinfo/ntop

Enrico Kern

2017-09-15 19:32:30 UTC

Permalink

Its just important that with promisc you see only the traffic of other vms
in the same portgroup. So if you have multiple pgs you need a interface for
each portgroup in promisc that you want to monitor.

Post by Hossam
Hey Ajit
I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run
nProbe on promiscuous interface that listens to the vswitch traffic.
We run some our solutions using nProbe on VM. So I can assure u that works fine :)
Sent from my iPhone, apologies for any typo.
Sorry but what is the usecase to run it directly on esxi?
You can use netflow/sflow on dvswitch or just from your real switch.
You could also create one vm with ntop and use promisc mode in vmware to
see all traffic on this vm where you run ntop.

_______________________________________________
Ntop mailing list
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
http://listgateway.unipi.it/mailman/listinfo/ntop