Messages

1

18.7 Legacy Series / Re: ntopng: geolocation

« on: December 27, 2018, 03:48:00 am »

So you downloaded them manually, put them in the specified folder and then it worked?
What about this ntopng update script? Is there a way to specify this folder?

Correct.  /usr/local/bin/ntopng-geoipupdate.sh will need to be updated to do the right thing.

2

18.7 Legacy Series / Re: NTOPNG with HTTPS

« on: December 24, 2018, 02:44:07 am »

/usr/local/opnsense/scripts/OPNsense/Ntopng/generate_certs.php is missing execute permission and a shell script calls it to regenerate the certs when you change the ntopng config.

run: chmod +x /usr/local/opnsense/scripts/OPNsense/Ntopng/generate_certs.php

from your shell and it will solve the issue.  Hopefully this can be fixed in opnsense.

3

18.7 Legacy Series / Re: ntopng: geolocation

« on: December 20, 2018, 06:37:27 am »

I figured this out.

The code for ntopng 3.6 now looks for the following 2 files:
root@OPNsense:/usr/local/share/ntopng/httpdocs/geoip # ls -al *.mmdb
-rw-r--r--  1 2000  2000   6297816 Dec 18 10:26 GeoLite2-ASN.mmdb
-rw-r--r--  1 2000  2000  61305552 Dec 18 15:33 GeoLite2-City.mmdb

which come from:
https://geolite.maxmind.com/download/geoip/database/GeoLite2-City.tar.gz
https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz

None of the scripts/tools to auto update the db's deal with these new file formats.

4

18.7 Legacy Series / ntopng: geolocation

« on: December 20, 2018, 05:56:43 am »

Hey All,

geolocation does not seem to be working with ntopng plugin.  I've manually ran the download scripts etc, but to no avail, all ips are still non geolocated.  The status of ntopng does show that maxmind 1.3.2 is compiled in, and the maxmind files are on my opensense system.

I've run both of the following, but no positive impact after a restart of ntopng:
root@OPNsense:/var/tmp/ntopng # /usr/local/bin/geoipupdate.sh
Fetching GeoIP.dat and GeoIPv6.dat...
/usr/local/share/GeoIP/GeoIPupdate.U6v09v/GeoI100% of  694 kB 4043 kBps 00m00s
/usr/local/share/GeoIP/GeoIPupdate.Xwug8W/GeoI100% of 1187 kB 3953 kBps 00m00s
root@OPNsense:/var/tmp/ntopng # /usr/local/bin/ntopng-geoipupdate.sh
Fetching GeoLiteCity.dat...
-                                             100% of   12 MB 8199 kBps 00m02s
Fetching GeoLiteCityv6.dat...
-                                             100% of   14 MB 6580 kBps 00m02s
Fetching GeoIPASNum.dat...
-                                             100% of 2475 kB 5326 kBps 00m00s
Fetching GeoIPASNumv6.dat...
-                                             100% of 3006 kB 5775 kBps 00m01s


Any ideas?

Edit:  They switched geo location libs in 3.6 so I assume this is related.

5

General Discussion / Re: ntopng & HTTPS

« on: December 20, 2018, 05:53:43 am »

I got SSL working, but geo is not working.  No countries show up in ntopng.

6

General Discussion / Re: ntopng & HTTPS

« on: December 20, 2018, 04:52:48 am »

I have the same problem.  In my case opnsense was failing to execute /usr/local/opnsense/scripts/OPNsense/Ntopng/generate_certs.php as it did not have execute permission.  I fixed that, and the certs are generated successfully but the problem remains.

In addition geolocation also does not appear to be working in ntopng.  None of the ips are being assigned to countries, however the runtime status does say its included.  Is it not able to find the geo database?