Add the ntopng Repository
1
2
3
4
wget http://apt-stable.ntop.org/jessie/all/apt-ntop-stable.deb
dpkg -i apt-ntop-stable.deb
apt-get clean all
apt-get update
Update the System and Install ntopng
Verify that your system is up to date. Install ntopng and supporting services:

1
2
apt update && apt upgrade -yuf
apt install pfring nprobe ntopng ntopng-data n2disk ethtool
Add System User for ntopng
By default, ntopng is run as the user nobody. This is a good choice for daemons requiring minimal access to the system. However, ntopng installs files in directories to which the user nobody may not have access. Depending on how your system is configured, you can mitigate this by creating a new user for it:

Add user ntopng:

1
useradd -r -s /bin/false ntopng
Set permissions for user ntopng and installation files/directories as shown:

1
2
3
4
5
mkdir /var/tmp/ntopng
chown -R ntopng:ntopng /usr/share/ntopng /var/tmp/ntopng
chmod 1770 -R /var/tmp/ntopng
find /usr/share/ntopng -type d -print0 | xargs -0 chmod 744
find /usr/share/ntopng -type f -print0 | xargs -0 chmod 755
Configure ntopng
Ntopng has a built in web server and initializer. Configuration options can be defined in a config file or set from the command line during initialization on a per-use basis. If you use both the command line and the config file, ntopng will prioritize the settings in the config file.

Disable TCP segmentation offload. Replace eth0 with your primary connection interface (usually eth0):

1
ethtool -K eth0 gro off gso off tso off
Check and verify that TCP segmentation is disabled:

1
ethtool -k eth0
Verify that the tcp-segmentation-offload section in the output matches the following:

1
2
3
4
5
tcp-segmentation-offload: off
        tx-tcp-segmentation: off
        tx-tcp-ecn-segmentation: off
        tx-tcp-mangleid-segmentation: off
        tx-tcp6-segmentation: off
Create /etc/ntopng/ntopng.conf and match the contents to the example listed below. Replace 192.0.2.0 with your Linode’s domain or public IP address. If needed, replace eth0 with your primary network interface. If you want to review available configuration parameters, run man ntopng from the terminal.

/etc/ntopng/ntopng.conf
1
2
3
4
5
6
7
8
--user=ntopng
--interface=eth0
-w=192.0.2.0:3005
--community
--daemon
--dump-flows=logstash # optional
--disable-autologout # optional
--disable-login=1 # optional