Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - preilly

#1
Ntopng moved the view option to the pro version.  That's why view no longer works.
#2
Prior to the upgrade to ntopng v.6.4.250617 (os-ntopng 1.3), I could add the line -i=view:all to /usr/local/etc/ntopng.conf to add a new view that aggregated traffic from all interfaces. 

Log prior to upgrade looked like this:
cat /var/db/ntopng/ntopng.log | grep view
11/Jun/2025 18:19:44 [NetworkInterface.cpp:3820] Started packet polling on interface 'view:all' [id: 6]...

That was with this version and earlier:
13/Jun/2025 18:04:39 [Ntop.cpp:553] Welcome to ntopng amd64 v.6.2.250409 (:6.2.250409)

Now since v.6.4.250617 no errors show in the log, the GUI shows that the view:all is being applied, but no view is actually made:
ntopng --interface 'igc4' --interface 'igc5' --interface 'igc1' --interface 'igc3' --interface 'igc2' --interface 'view:all' --http-port '3000' --dns-mode '1' --data-dir '/var/db/ntopng' --user 'ntopng' --pid '/var/run/ntopng/ntopng.pid' --httpdocs-dir '/usr/local/share/ntopng/httpdocs' --scripts-dir '/usr/local/share/ntopng/scripts' --callbacks-dir '/usr/local/share/ntopng/scripts/callbacks' --daemon

Here is my /usr/local/etc/ntopng.conf
-i=igc4
-i=igc5
-i=igc1
-i=igc3
-i=igc2
-i=view:all
-w=3000
-n=1
-d=/var/db/ntopng

I can see traffic properly on each individual interface (as I could before), but no longer can see the additional view, which was a very convenient ntopng feature.

#3
General Discussion / Posting Rules?
June 28, 2025, 09:42:39 PM
Attempted to post earlier today regarding the ntopng plugin, and post would not succeed (hourglass), and now from the IP I used, I am blocked.  The post was all text, no attached files.  It involved describing what to me looks like a bug with the new release of the plugin v.6.4.250617.

Was the block an error, or is something wrong with the attempted post that I need to understand?

Thanks,
#4
I'm having the same issue.  Any solutions?

c-icap-client -s avscan -req "http://pkg.opnsense.org/test/eicar.com.txt" -v
ICAP server:localhost, ip:127.0.0.1, port:1344

No modification needed (Allow 204 response)

ICAP HEADERS:
   ICAP/1.0 204 No Content
   Server: C-ICAP/0.6.3
   Connection: keep-alive
   ISTag: "CI0001-eRb34ZeSPgmlqubf7+AL1QAA"

REQMOD HEADERS:
   GET http://pkg.opnsense.org/test/eicar.com.txt HTTP/1.0
   Date: Tue, 22 Apr 2025 00:15:41 GMT
   User-Agent: C-ICAP-Client/x.xx