ntopng

[MickLesk]

Name of the Script

ntopng

Script Type

CT (LXC Container)

Does this script support arm64?

arm64 not supported

📋 Script Details

ntopng is a network traffic probe and analyser — who talks to whom, which protocols and applications, historical statistics, alerting and flow export. Community Edition. Requested in discussion #8505.

• Official ntop repository: apt-ntop-stable.deb from packages.ntop.org/apt-stable/$(get_os_info codename)/all/ registers the repo, then apt install ntopng. Verified the trixie path returns HTTP 200 and ships ntopng 6.6.260803.
• No manual dependency list needed — the package pulls redis-server, ndpi, pfring and the rest itself.
• Config at /etc/ntopng/ntopng.conf; the capture interface is detected from the default route at install time. Web UI on 3000, admin/admin.
• Note: out of the box ntopng only sees the container's own traffic. Analysing the network needs a SPAN/mirror port or a NetFlow/sFlow/IPFIX exporter pointed at it — flagged as a warning in the JSON so nobody expects magic.
• has_arm: false — only x64 exists under the trixie suite in the ntop repo.
• Update path is apt-based.

Source: https://www.ntop.org/products/traffic-analysis/ntop/

[MickLesk]

Fixed during testing: dpkg -i /tmp/apt-ntop-stable.deb failed with apt-ntop-stable depends on lsb-release; however: Package lsb-release is not installed.

dpkg -i does not resolve dependencies. Replaced with apt install -y /tmp/apt-ntop-stable.deb, which installs the local .deb and pulls its dependencies from the archive.

[github-actions]

The ntopng script is ready for testing:

bash -c "$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/ntopng.sh)"

Default credentials:
Username: admin
Password: admin

Log in at http://:3000 with admin/admin and change the password immediately.
By default ntopng only sees the container's own traffic. To analyse the whole network you have to feed it traffic - a mirror/SPAN port on your switch, or a flow exporter (NetFlow/sFlow/IPFIX) from your router. Set the interface with the -i line in /etc/ntopng/ntopng.conf.
This is the Community Edition. Retention, historical flow drilldown and some alerting features are reserved for the paid Pro/Enterprise editions.
Installed from the official ntop apt repository (packages.ntop.org/apt-stable), which pulls in redis-server and its other dependencies automatically. Updates go through apt.

Note: This is not in the official repo yet—it's just a dev version! After merging into ProxmoxVE, it will need to be recreated.

Discord testing thread: https://discord.com/channels/1302816934508630047/1534083156599374025

[github-actions]

A PR has been created for ntopng: community-scripts/ProxmoxVE#16387

[maxindahouze]

Please, add netflow2ng

[cottinghamk]

Like maxindahouze said, Netflow monitoring requires nProbe, which is a paid feature. netflow2ng is a free replacement, but as far as I know, there is no compiled version anywhere.

[michelroegl-brunner]

Merged with #16387 in ProxmoxVE