HowTo Automate & Manage NST Geolocation Results

From NST Wiki
Revision as of 19:09, 21 October 2010 by Rwh (talk | contribs) (ntop Host Session - Table Column Descriptions)
Jump to navigationJump to search
***Note: Page Under Construction***


Overview - nstgeolocate Session Manager

The nstgeolocate Session Manager page was designed to help manage and automate the generation of certain geolocation types. The NST script: nstgeolocate is mostly used for results presented on the page. Currently, auto-generated "ntop Host" geolocation sessions can be created, monitored and managed. Also, all previously generated "IPv4 Address Conversation" geolocation sessions can be viewed or managed. Using the NST menu, one can navigate to the nstgeolocate Session Manager page as shown in the screen shot below.

NST WUI nstgeolocate Session Manager Menu Selection

Collapse / Expand Session Sections

The amount of information presented on the nstgeolocate Session Manager page can be large depending on the number of ntop Host sessions configured and/or the number of IPv4 Address Conversations archived. To help focus, save time and limit the amount of information presented on the page, use a combination of either the "Collapse All Sessions" button or the "Expand All Sessions" button with one or more "Hide / Show" session section folder icons to display your desired page view.

Manage & Monitor ntop Host Sessions

There are 2 sections that display configured ntop Host sessions. One for auto-generating ntop Host Geolocations on one or more Mercator World Map projections and the other for auto-generating one or more ntop Host Geolocations KML documents that can be rendered on Google Earth. ntop Host sessions are created and configured in section: Create / Update / Import nstgeolocate Host Session. A running ntop session can be local (i.e., Running on your NST probe) or remote (i.e., Running on a system other than your local NST probe).

ntop Host Session - Table Column Descriptions

Each configured ntop Host session type is presented in a table. The following describes each column header associated with the tables.

  • World Map nstgeolocate Host Session Directory :
Click on a link in this column to use the NST Directory/File Browser to view supporting files associated with the generation of producing the ntop World Map Host bit image.
  • KML Document nstgeolocate Host Session Directory:
Click on a link in this column to use the NST Directory/File Browser to view supporting files associated with the generation of producing the ntop KML Document.
  • C (Cron Control Status):
This column indicates if the configured ntop Host session is under cron control. A green circle icon indicates that it is and a red stop sign icon indicates that it is not. Use an associated "D" action button to disable cron control for the session.
  • Active 'ntop' Session :
  • ntop Mgt (HTTP):
Use this button to enter the NST WUI ntop web-based management interface (HTTP access) for the ntop session.
  • ntop Mgt (HTTPS):
Use this button to enter the NST WUI ntop web-based management interface (HTTPS access) for the ntop session.
  • HTTP Access:
Use this link to enter the ntop User web-based management interface (HTTP access) for the ntop session (Default port: 3000).
  • HTTPS Access:
Use this link to enter the ntop User web-based management interface (HTTPS access) for the ntop session (Default port: 3001).
  • Description:
The description for each ntop session includes the "Session Annotation", participating "Network Capture Interfaces" and the current "ntop Session Uptime".
  • Action (Buttons):
  • U (Update ntop Session Settings):
This action button will pre-fill all values associated with the ntop session into the " Create / Update / Import nstgeolocate Host Session" form. Use this action when making changes to an existing ntop session.
  • R (Remove ntop Host Session):
This action button will remove an entire ntop session including supporting files and all previously generated maps or KML documents. Make backups accordingly prior to using this action.
  • D (Disable Cron Control):
  • M (Monitor Auto-Generated Map or KML Document):


nstgeolocate Session Manager: Configured ntop Host Sessions

Manage & View IPv4 Address Conversation Sessions

nstgeolocate Session Manager: Archived IPv4 Address Conversations Geolocations

Create / Update / Import ntop Host Sessions

nstgeolocate Session Manager: Create, Update and Import ntop Host Sessions