ntop tools are totally passive but they occasionally perform some active traffic to operate. Knowing the list of these IP/hosts can help to make sure the firewall infrastructure is ntopng-friendly
- When ntopng starts up it connects to https://www.google.com to check if the host has Internet connectivity.
- Availability of new packages are periodically connecting to packages.ntop.org.
- In the top right ntopng corner there is a feed that connects to feed.ntop.org to fetch the latest news.
- ntopng periodically downloads blacklists (menu Settings -> Category Lists) so make sure you can connect to them in order to download the files.
If you are using ntopng on a site with no Internet access, ntopng might be slow. For this reason we invite you start ntopng with –offline to disable Internet access to the above sites.
Posted in: ntop