ntop tools are totally passive but they occasionally perform some active traffic to operate. Knowing the list of these IP/hosts can help to make sure the firewall infrastructure is ntopng-friendly
- When ntopng starts up it connects to https://www.google.com to check if the host has Internet connectivity.
- Availability of new packages are periodically connecting to packages.ntop.org.
- In the top right ntopng corner there is a feed that connects to blog.ntop.org to fetch the latest news.
- ntopng periodically downloads blacklists (menu Settings -> Category Lists) so make sure you can connect to them in order to download the files.
Posted in: ntop