Usando NTOP para monitorar a rede

O NTOP é uma ferramenta para monitorar e gerenciar redes de computadores, além de ter muitos recursos que demonstram tudo através de gráficos e informações detalhadas que permitem com que haja interação entre usuários. Monitora e gera relatórios sobre o tráfego e suporte dos hosts por estes protocolos:TCP/UDP/ICMP, (R)ARP, IPX, DLC, DECnet, AppleTalk, Netbios, TCP/UDP.

Instalando o NTOP

Slackware
Dependências: rrdtool, GeoIP, and graphviz
rrdtool
$wget "http://oss.oetiker.ch/rrdtool/pub/rrdtool-1.4.5.tar.gz"
$wget "http://slackbuilds.org/slackbuilds/13.1/libraries/rrdtool.tar.gz"
$tar -xzvf rrdtool.tar.gz
$mv rrdtool-1.4.5.tar.gz rrdtool
$cd rrdtool
$chmod +x rrdtool.Slackbuild
#./rrdtool.Slackbuild
Aguarde... irá descompactar, converter para tgz e mover para /tmp
#installpkg /tmp/rrdtool-1.4.5-i486-1_SBo.tgz

GeoIP
$wget "http://geolite.maxmind.com/download/geoip/api/c/GeoIP-1.4.5.tar.gz"
$wget "http://slackbuilds.org/slackbuilds/13.1/network/GeoIP.tar.gz"
$tar -xzvf GeoIP.tar.gz
$mv GeoIP-1.4.5.tar.gz GeoIP
$cd GeoIP
$chmod +x GeoIP.Slackbuild
#./GeoIP.Slackbuild
Aguarde... irá descompactar, converter para tgz e mover para /tmp
#installpkg /tmp/GeoIP-i486-1_SBo.tgz

graphviz
$wget "http://graphviz.org/pub/graphviz/stable/SOURCES/graphviz-2.26.3.tar.gz"
$wget "http://slackbuilds.org/slackbuilds/13.1/graphics/graphviz.tar.gz"
$tar -xzvf graphviz.tar.gz
$mv graphviz-2.26.3.tar.gz graphviz
$cd graphviz
#./graphviz.Slackbuild
Aguarde... irá descompactar, converter para tgz e mover para /tmp
#installpkg graphviz-i486-1.SBo.tgz

Ntop
$wget "http://sourceforge.net/projects/ntop/files/ntop/ntop-4.0.1/ntop-4.0.1.tar.gz?download"
$wget "http://slackbuilds.org/slackbuilds/13.1/network/ntop.tar.gz"
$tar -xzvf ntop.tar.gz
$mv ntop-4.0.1.tar.gz ntop
$cd ntop
$chmod +x ntop.Slackbuild
#./ntop.Slackbuild

Aguarde... irá descompactar, converter para tgz e mover para /tmp

#installpkg /tmp/ntop-4.0.1-i486-1_SBo.tgz

OU
$wget "http://http://prdownloads.sourceforge.net/ntop/ntop-4.0.1.tar.gz?download"
$tar -xzvf ntop-4.0.1.tar.gz
$cd ntop-4.0.1
$#./autogen.sh
#make
#make install

Debian

#apt-get install libcap libcap-dev glib gdbm gdbm-devel
#apt-get install libtool automake autoconf -y
#apt-get install gcc cpp -y
#apt-get install tcpdump nmap -y
#apt-get install libpcap-devel zlib zlib-devel geoip geoip-devel
$wget "http://downloads.sourceforge.net/project/ntop/ntop/Stable/ntop-4.0.1.tar.gz"
$tar -xzvf ntop-4.0.1.tar.gz
$cd ntop-4.0.1
$#./autogen.sh
#make
#make install

CentOS

#yum install libcap libcap-devel glib gdbm gdbm-devel
#yum install libtool automake autoconf -y
#yum install gcc cpp -y
#yum install tcpdump nmap -y
#yum install libpcap-devel zlib zlib-devel geoip geoip-devel
$wget "http://downloads.sourceforge.net/project/ntop/ntop/Stable/ntop-4.0.1.tar.gz"
$tar -xzvf ntop-4.0.1.tar.gz
$cd ntop-4.0.1
$#./autogen.sh
#make
#make install

Agora vamos definir uma senha para o usuário admin do NTOP. Para isso vamos executar o comando abaixo:

#ntop

http://IP-SERVIDOR:3000

Feito!