Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tip
More information on ntop can be found here: https://www.ntop.org/guides/ntopng/api/index.html


Debugging


Show active flows

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/rest/v1/get/flow/active.lua?ifid=0"   
{"rc_str_hr":"Success","rc":0,"rsp":{"perPage":2000,"currentPage":1,"sort":[["column_column_bytes","asc"]],"totalRows":0,"data":[]},"rc_str":"OK"}

Get flow counters for the L4 protocol

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/rest/v1/get/flow/l4/counters.lua?ifid=0"
{"rsp":[],"rc_str_hr":"Success","rc":0,"rc_str":"OK"}

Get flow counters for the L7 protocol

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/rest/v1/get/flow/l7/counters.lua?ifid=0"
{"rsp":[],"rc_str_hr":"Success","rc":0,"rc_str":"OK"}

Get ntop alerts

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl -u admin:cmk1234567 -H "Content-Type: application/json" -d '{"ifid": "0", "status": "historical-flows", "epoch_begin": 1590710400, "epoch_end": 1673652781}' http://localhost:3000/lua/rest/v1/get/alert/ts.lua


Get ntop top talker

Note

Only available in the pro version https://www.ntop.org/guides/ntopng/web_gui/dashboard.html#dashboard-in-the-professional-version


For interfaces

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/pro/rest/v1/get/interface/top/local/talkers.lua?ifid=0"

...

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/pro/rest/v1/get/host/top/remote/talkers.lua?ifid=0"

For hosts

Code Block
languagebash
themeRDark
root@mylinuxhost ~# curl  -u admin:cmk1234567 "http://127.0.0.1:3000/lua/pro/rest/v1/get/host/top/remote/talkers.lua?ifid=0"

Filter by label (Content by label)
showLabelsfalse
max5
spacesKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ( "ntop" , "ntop_integration" , "kb-how-to-article" ) and type = "page" and space = "KB"
labelsbusinessintelligence

...