Mailing List Archive: Anybody tried ntopng on ESXi 6.5

Anybody tried ntopng on ESXi 6.5

ajit.sarnaik at gmail

Sep 15, 2017, 11:45 AM

Post #1 of 7 (1068 views)

Hello Folks,

We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
appreciate if anybody has tried it and their experience with it with
regards to the following,
- Can we install any of the stable build provided by ntop.org?
- If stable build is not compatible with ESXi, effort involved in porting.
- Any limitation with regards to protocol and encapsulation
- Any other gotchas

Appreciate the help.

Regards,

Ajit Sarnaik
ajit.sarnaik@gmail.com

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

enrico.kern at glispamedia

Sep 15, 2017, 12:16 PM

Post #2 of 7 (1068 views)

Sorry but what is the usecase to run it directly on esxi?

You can use netflow/sflow on dvswitch or just from your real switch.

You could also create one vm with ntop and use promisc mode in vmware to
see all traffic on this vm where you run ntop.

Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:

> Hello Folks,
>
> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
> appreciate if anybody has tried it and their experience with it with
> regards to the following,
> - Can we install any of the stable build provided by ntop.org?
> - If stable build is not compatible with ESXi, effort involved in porting.
> - Any limitation with regards to protocol and encapsulation
> - Any other gotchas
>
> Appreciate the help.
>
> Regards,
>
> Ajit Sarnaik
> ajit.sarnaik@gmail.com
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

enrico.kern at glispamedia

Sep 15, 2017, 12:16 PM

Post #3 of 7 (1068 views)

Sorry but what is the usecase to run it directly on esxi?

You can use netflow/sflow on dvswitch or just from your real switch.

You could also create one vm with ntop and use promisc mode in vmware to
see all traffic on this vm where you run ntop.

Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:

> Hello Folks,
>
> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
> appreciate if anybody has tried it and their experience with it with
> regards to the following,
> - Can we install any of the stable build provided by ntop.org?
> - If stable build is not compatible with ESXi, effort involved in porting.
> - Any limitation with regards to protocol and encapsulation
> - Any other gotchas
>
> Appreciate the help.
>
> Regards,
>
> Ajit Sarnaik
> ajit.sarnaik@gmail.com
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

h.zalabany at interviewns

Sep 15, 2017, 12:28 PM

Post #4 of 7 (1068 views)

Hey Ajit

I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run nProbe on promiscuous interface that listens to the vswitch traffic.

We run some our solutions using nProbe on VM. So I can assure u that works fine :)

Sent from my iPhone, apologies for any typo.

> On 15. Sep 2017, at 21:16, Enrico Kern <enrico.kern@glispamedia.com> wrote:
>
> Sorry but what is the usecase to run it directly on esxi?
>
> You can use netflow/sflow on dvswitch or just from your real switch.
>
> You could also create one vm with ntop and use promisc mode in vmware to see all traffic on this vm where you run ntop.
>
> Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:
>> Hello Folks,
>>
>> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would appreciate if anybody has tried it and their experience with it with regards to the following,
>> - Can we install any of the stable build provided by ntop.org?
>> - If stable build is not compatible with ESXi, effort involved in porting.
>> - Any limitation with regards to protocol and encapsulation
>> - Any other gotchas
>>
>> Appreciate the help.
>>
>> Regards,
>>
>> Ajit Sarnaik
>> ajit.sarnaik@gmail.com
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

h.zalabany at interviewns

Sep 15, 2017, 12:28 PM

Post #5 of 7 (1068 views)

Hey Ajit

I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run nProbe on promiscuous interface that listens to the vswitch traffic.

We run some our solutions using nProbe on VM. So I can assure u that works fine :)

Sent from my iPhone, apologies for any typo.

> On 15. Sep 2017, at 21:16, Enrico Kern <enrico.kern@glispamedia.com> wrote:
>
> Sorry but what is the usecase to run it directly on esxi?
>
> You can use netflow/sflow on dvswitch or just from your real switch.
>
> You could also create one vm with ntop and use promisc mode in vmware to see all traffic on this vm where you run ntop.
>
> Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:
>> Hello Folks,
>>
>> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would appreciate if anybody has tried it and their experience with it with regards to the following,
>> - Can we install any of the stable build provided by ntop.org?
>> - If stable build is not compatible with ESXi, effort involved in porting.
>> - Any limitation with regards to protocol and encapsulation
>> - Any other gotchas
>>
>> Appreciate the help.
>>
>> Regards,
>>
>> Ajit Sarnaik
>> ajit.sarnaik@gmail.com
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

enrico.kern at glispamedia

Sep 15, 2017, 12:32 PM

Post #6 of 7 (1068 views)

Its just important that with promisc you see only the traffic of other vms
in the same portgroup. So if you have multiple pgs you need a interface for
each portgroup in promisc that you want to monitor.

Am 15.09.2017 21:29 schrieb "Hossam" <h.zalabany@interviewns.de>:

> Hey Ajit
>
> I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run
> nProbe on promiscuous interface that listens to the vswitch traffic.
>
> We run some our solutions using nProbe on VM. So I can assure u that works
> fine :)
>
> Sent from my iPhone, apologies for any typo.
>
> On 15. Sep 2017, at 21:16, Enrico Kern <enrico.kern@glispamedia.com>
> wrote:
>
> Sorry but what is the usecase to run it directly on esxi?
>
> You can use netflow/sflow on dvswitch or just from your real switch.
>
> You could also create one vm with ntop and use promisc mode in vmware to
> see all traffic on this vm where you run ntop.
>
> Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:
>
>> Hello Folks,
>>
>> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
>> appreciate if anybody has tried it and their experience with it with
>> regards to the following,
>> - Can we install any of the stable build provided by ntop.org?
>> - If stable build is not compatible with ESXi, effort involved in porting.
>> - Any limitation with regards to protocol and encapsulation
>> - Any other gotchas
>>
>> Appreciate the help.
>>
>> Regards,
>>
>> Ajit Sarnaik
>> ajit.sarnaik@gmail.com
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

Re: Anybody tried ntopng on ESXi 6.5 [ In reply to ]

enrico.kern at glispamedia

Sep 15, 2017, 12:32 PM

Post #7 of 7 (1068 views)

Its just important that with promisc you see only the traffic of other vms
in the same portgroup. So if you have multiple pgs you need a interface for
each portgroup in promisc that you want to monitor.

Am 15.09.2017 21:29 schrieb "Hossam" <h.zalabany@interviewns.de>:

> Hey Ajit
>
> I Double Enrico, you need to deploy an ubuntu VM, install ntop on it, run
> nProbe on promiscuous interface that listens to the vswitch traffic.
>
> We run some our solutions using nProbe on VM. So I can assure u that works
> fine :)
>
> Sent from my iPhone, apologies for any typo.
>
> On 15. Sep 2017, at 21:16, Enrico Kern <enrico.kern@glispamedia.com>
> wrote:
>
> Sorry but what is the usecase to run it directly on esxi?
>
> You can use netflow/sflow on dvswitch or just from your real switch.
>
> You could also create one vm with ntop and use promisc mode in vmware to
> see all traffic on this vm where you run ntop.
>
> Am 15.09.2017 20:45 schrieb "Ajit Sarnaik" <ajit.sarnaik@gmail.com>:
>
>> Hello Folks,
>>
>> We are looking into the possibility of running NTOPNG on ESXi 6.5. Would
>> appreciate if anybody has tried it and their experience with it with
>> regards to the following,
>> - Can we install any of the stable build provided by ntop.org?
>> - If stable build is not compatible with ESXi, effort involved in porting.
>> - Any limitation with regards to protocol and encapsulation
>> - Any other gotchas
>>
>> Appreciate the help.
>>
>> Regards,
>>
>> Ajit Sarnaik
>> ajit.sarnaik@gmail.com
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>