Custom Applications and Categories

[dkggpeters]

Environment:

• OS name: Ubuntu
• OS version: 22.04
• Architecture: amd64
• ntopng version/revision: Enterprise L v.6.3.250124

What happened:
Setup up Custom Applications and Categories to break out high usage on data downloads to reduce Unspecified for Top Categories and Unknown for Top Protocols. 80%+ of my data is classified as Unspecified/Unkown as a result.

Using host 140.90.101.48 as an example I have the following Application and Categories setup

I am using NProbe on PFSense 24.11 so I am not sure if I need to do something on the Nprobe Config.

I have restarted NTopNG as well.

[lucaderi]

Can you please specify the same protos.txt file in both ntopng and nProbe? In nProbe you can add it to the CLI using
[--ndpi-protocols|-O]

[dkggpeters]

I am not using --ndpi-protocols for nprobe as my understanding is that it filters only known protocols. I did try using the protos.txt file below that is used by NTopNG and received a protocal error message as invalid protocol and no flows are exported to Ntop. I also tried using --ndpi-proto-ports using the protos.txt and received an invalid command.

Do you have an example of the nprobe protos.txt?

Below is the protos.txt file in Ntop which was generated by Ntop itself when adding and Application/Category

[lucaderi]

The file format is the same for both ntopng and nprobe. Please try again

[dkggpeters]

I receive the below error when using the same protos.txt for Nprobe as used for NTopNG