[HN Gopher] Self-hosted home network traffic monitoring with nto...
___________________________________________________________________
Self-hosted home network traffic monitoring with ntopng and a Fritz
Box
Author : fortym2
Score : 65 points
Date : 2022-12-29 09:06 UTC (13 hours ago)
(HTM) web link (davquar.it)
(TXT) w3m dump (davquar.it)
| amaccuish wrote:
| Fritzboxes have the best non-OpenWRT OS IMHO
| TillE wrote:
| They're the only home routers I've ever owned which aren't
| constantly failing in some way. It's a shame they're only
| really available in Germany (and I guess Austria).
| codetrotter wrote:
| I've seen FritzBoxes in a computer shop in Spain as well.
| Don't know how wide-spread they are in Spain however.
| nasalter wrote:
| I'm in the UK and use Zen Internet as my ISP. Zen distribute
| a FRITZ!Box 7530 as their home router [1].
|
| I was sufficiently pleased by the FRITZ!Box that I bought a
| 2nd one to extend the wifi in my home - very easy to do with
| the fritz devices.
|
| [1] https://www.zen.co.uk/broadband/broadband-router
| fortym2 wrote:
| I agree. Probably best consumer-level router OS
| hansel_der wrote:
| iirc fritz-os was very much based on openwrt, same as most
| homerouters
| gsich wrote:
| Not sure that is the case. Most use Linux.
| hansel_der wrote:
| openwrt indeed uses the linux kernel
| binkHN wrote:
| I've been doing something similar at home for years. An OpenBSD
| box at the egress point exports IPFIX data to nfdump and I
| designed custom charts for myself using the legacy dygraphs.
| IPFIX plus nfdump is wonderful as I can quickly use a tcpdump-
| like interface to very quickly search against data from months
| ago and the dygraphs charting allows me to easily see traffic
| patterns with the ability to quickly zoom in.
| richrichardsson wrote:
| Slightly off-topic: "an" should not be used with words beginning
| with H, _unless_ the H is unvoiced, such as "an homage".
| akerl_ wrote:
| I just assumed that, because the server was providing
| resistance to the flow of packets on the network, it was
| properly called "an ohm server".
| fortym2 wrote:
| You are right, thank you :D
| dmacvicar wrote:
| Off-topic but interesting to this audience: since the last
| update, Fritz boxes support Wireguard.
|
| https://en.avm.de/news/the-latest-news-from-fritz/2022/wireg...
| j3th9n wrote:
| [flagged]
| Macha wrote:
| It's a short spiral pattern, seems a little weird to attribute
| it to anything?
|
| I wasn't aware there was a pedophile symbol so I searched it
| and found some 00s parenting advice "these are the symbols to
| be aware of", while also warning about AIM abbreviations that
| I'm pretty sure is just a made up panic, and some pizzagate
| articles, so I'm not sure that that's even a real thing.
| JadoJodo wrote:
| This symbol was also in the TV show True Detective.
| Attributing that to this article is kind of ridiculous
| though.
| Jnr wrote:
| And I thought he is a fan of Debian distro.
| TillE wrote:
| Was that their version of the Yellow Sign? I like the
| Pelgrane Press one:
|
| https://pelgranepress.com/2020/02/06/our-yellow-sign-is-
| your...
| MonkeyClub wrote:
| The "symbol" in question is this:
|
| https://davquar.it/images/post/self-hosting/ntopng-
| fritzbox-...
|
| Fundamentally it's a bunch of points superimposed on a map
| of Milan through geolocation.
|
| The author's comment doesn't indicate that he views it as
| something sinister in the pd sense.
| m0rbz wrote:
| Hopefully he was alluding to the Debian logo
| gsich wrote:
| No.
| c0nsumer wrote:
| This is neat.
|
| A word of caution, depending on how the network is laid out, this
| could cause severe bandwidth overhead if there isn't a dedicated,
| and unmonitored, interface for the capture to flow over.
|
| One needs to be careful not to have the captured traffic flowing
| out to the monitor via an interface that's being monitored,
| otherwise load will snowball.
|
| The example here omits eth1, so I'm presuming that's the path the
| capture takes, but it would have been nice to see the author call
| this out. Otherwise, without some sort of capture-side filter,
| which the fritzdump.sh script and example doesn't seem to
| include, the capture will include a copy of the monitoring stream
| and the bandwidth will snowball.
|
| There's also the issue of the monitoring port likely not able to
| capture full bandwidth of the aggregate of the other ports being
| monitored. Since the buffer in the device likely isn't unlimited,
| there's a possibility for lost data during times of high traffic.
___________________________________________________________________
(page generated 2022-12-29 23:01 UTC)