The following instructions can be used to install the ntop 3:3.3-11+b2 on Untangle 9.0.1. This process has been tested on the 32 bit and 64 bit versions of Untangle.
Please Note: ntop 4 is not mainstream at this time. I have tested it on Untangle 9.0.1 but its incredibly unstable on Debian 5.0.8. I recommend continuing to use ntop 3 at this time.
WARNING: If you have no experience with *nix command line environments please do not attempt this guide. Cutting and pasting commands from a 'how to' without a full understanding of the syntax and implications is bound to cause you problems.
1. Backup the original APT sources.list in case of problems during the install -
2. Add the Debian 5.x Repositories to your server:Code:cp /etc/apt/sources.list /etc/apt/sources.list.orig
3. Update packages and install ntop:Code:echo "deb http://http.us.debian.org/debian/ lenny main contrib non-free" >>/etc/apt/sources.list echo "deb-src http://http.us.debian.org/debian/ lenny main" >>/etc/apt/sources.list
4. Set ntops default administrative password:Code:apt-get update apt-get install ntop
5. Configure nTOP to use TCP port 4000 for remote connections.Code:ntop -A
6. Restore the original APT sources list:Code:echo 'GETOPT="-w 4000"' >>/etc/default/ntop
7. Run an APT update:Code:cp /etc/apt/sources.list.orig /etc/apt/sources.list rm /etc/apt/sources.list.orig
8. Start ntop:apt-get update
9. Confirm nTOP is listening on TCP port 4000:Code:/etc/init.d/ntop start
NOTE: The expected result is *:4000 (Listen)./var/lib/ntop # lsof -i :4000
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
ntop 20617 ntop 1u IPv4 1852260 TCP *:4000 (LISTEN)
10. Configure a packet filter for ntop
*See packet filter image, attachment below.
11. Secure ntop access from outside the UTM.
a. Browse your UTM at http://ip-address:4000
b. Click "Admin" then "Configure" then "Protect URL's"
c. Enter username "admin" and your password (set in step 4 above) when prompted.
e. Click "Add URL" then "Add URL" again.
NOTE: This will require a username and password to access http://your-ip-ddress:4000
12. If you need to resolve internal host names of your clients connecting out through the Untangle machine be sure to set Untangle to handle DNS resolution using your internal DNS servers rather than your external. This will allow ntop to show the internal host names of your clients connecting outbound.