Unable to run ntop in container due to too many interfaces? about ntopng HOT 7 OPEN

Hi @unixbird the number of interfaces is bounded to the license, at most with a community license you can capture up to 8 interfaces. If you run ntopng with just --community ntopng automatically tries to capture from all interfaces (bringing the error you have).
I suggest on capturing the traffic only on the interfaces you want to capture by adding the -i option.
With the -i option it seems instead the problem could arise just in 2 cases:

• the interface you added does not exists in the container (so try to check out if you have that interface on the container)
• you do not have the sudo privileges to capture from that interface

So please add the interfaces you want to capture (up to 8) and check if you have the sudo privileges when running ntopng

from ntopng.

Hi @unixbird the number of interfaces is bounded to the license, at most with a community license you can capture up to 8 interfaces. If you run ntopng with just --community ntopng automatically tries to capture from all interfaces (bringing the error you have). I suggest on capturing the traffic only on the interfaces you want to capture by adding the -i option. With the -i option it seems instead the problem could arise just in 2 cases:

• the interface you added does not exists in the container (so try to check out if you have that interface on the container)
• you do not have the sudo privileges to capture from that interface

So please add the interfaces you want to capture (up to 8) and check if you have the sudo privileges when running ntopng

I gave the container full root access to test and whenever I let it find all interfaces it does find the vmbr0 interface but if i specify -i it no longer works which is what confuses me the most

from ntopng.

@unixbird what you are reporting is strange actually, are you able to ssh to the container and send the output of ifconfig to double check?

from ntopng.

@cardigliano running ifconfig returns all of the interfaces (which I didn't include) and it finds the vmbr0 interface.

from ntopng.

Made a mistake in the version of ntop. I use the stable tag not the latest.

from ntopng.

Could you check dmesg to see if there is any message?
Btw, please note you probably do not have PF_RING installed on the host system, as it is falling back to PCAP capture. Then ntopng is failing also in PCAP mode, it may be related to capabilities as the interface looks correct.

from ntopng.

This is all I see in dmesg. I also did install pf_ring on the host at one point and that didn't seem to do much.

To test I also ran the pfring container alongside this and got this:

(this is the parent interface of the bridge vmbr0 as I wanted to make sure but I get the same error whether its vmbr0 or eno1)

from ntopng.