- ntop build

This commit is contained in:
mpelle426
2019-07-22 20:48:32 +01:00
parent 710adf958b
commit 5125dd9b0c
4 changed files with 78 additions and 114 deletions

186
hosts
View File

@@ -1,112 +1,74 @@
sdwcltm2 ansible_host=192.168.50.2 site_clli=CRHMNJAW # list all of the raspberry PI devices in the network
sdwcltm3 ansible_host=192.168.201.55 site_clli=MTLRNJIK # the host name on each will be set to the first column
sdwcltm5 ansible_host=192.168.35.1 site_clli=PHLJPAMT # it can be 1-20 characters, letters, digits, and hyphens
sdwsrvm ansible_host=192.168.60.2 site_clli=WLGRPABW wes-host1 ansible_host=127.0.0.1
sdwcltm8 ansible_host=192.168.150.2 site_clli=FTCLCORN #wes-host2 ansible_host=192.168.88.240
ubuntu-server-2 ansible_host=192.168.198.2 site_clli=CMCYCOJL #wes-host3 ansible_host=192.168.88.218
sdwcltm7 ansible_host=192.168.199.2 site_clli=SRSPNYGN
sdwsrvl ansible_host=192.168.90.2 site_clli=LSBGFL59 [ansible-hosts]
sdwcltm4 ansible_host=192.168.100.2 site_clli=PROVUTZZ # there must only be one ansible-host. this is the device
sdwcltm6 ansible_host=192.168.200.34 site_clli=PHLJPAMT # that will act as the configuration server
ubuntu-server-1 ansible_host=192.168.201.2 site_clli=MTLRNJIK wes-host1
sdwcltm9 ansible_host=192.168.200.163 site_clli=NRCRGAQN
#192.168.201.3 [pi]
ipsectest1 ansible_host=192.168.201.90 # include all Raspberry Pi devces here
ssh-jump ansible_host=192.168.201.9 wes-host1
[pi] #wes-host2
sdwcltm2 #wes-host3
sdwcltm3
sdwcltm5 # use variables for passwords
sdwsrvm # currently not implemented
sdwcltm8 [pi:vars]
sdwcltm6 vncpassword=vncpass99
sdwcltm7 pipassword=pipassword99
sdwsrvl
sdwcltm4 [samba-server]
#192.168.201.3 # it is best to have only one samba-server host
wes-host1
[samba-server]
ipsectest1 [smbclient]
# it would probably be best to limit this to 10 clients
[smbclient] #wes-host2
sdwcltm2 #wes-host3
sdwcltm3
ubuntu-server-1 [public]
sdwcltm5 # not currently used
sdwsrvm #
sdwcltm8 [snmpd]
sdwcltm6 # installs SNMP daemon
sdwcltm7 #
sdwsrvl wes-host1
sdwcltm4
sdwcltm9 [netflows]
# installs flow client
[public] #
ubuntu-server-1 [facebook]
# devices can be set up for facebook, salesforce or youtube
[snmpd] # these are mutually exclusive and must be checked by you as there
#192.168.201.3 # is no automated process for that
sdwcltm2 wes-host1
sdwcltm3
sdwcltm6 [salesforce]
sdwcltm8 # see comment for facebook
#wes-host2
[netflows]
sdwcltm2 [youtube]
sdwcltm3 # see comment for facebook
sdwcltm5 #wes-host3
sdwcltm6
sdwcltm7 [ftpclient]
sdwcltm4
sdwcltm8 [sipclient]
sdwcltm9 # generates VoIP traffic, signaling and media
sdwsrvm wes-host1
sdwsrvl #wes-host3
ubuntu-server-1
ubuntu-server-2 [sipserver]
# there must only be one sipserver
[facebook] #wes-host2
sdwcltm5 wes-host1
sdwsrvm
sdwcltm4 [ntopng]
# hosts running ntop
[salesforce] wes-host1
sdwcltm3
sdwcltm6
sdwcltm7
sdwsrvl
sdwcltm8
[youtube]
sdwcltm2
sdwcltm3
[ftpclient]
sdwcltm2
sdwcltm3
sdwcltm4
sdwcltm5
sdwcltm6
sdwcltm7
sdwcltm8
sdwsrvm
ubuntu-server-1
[sipclient]
sdwcltm2
sdwcltm3
sdwcltm4
sdwcltm5
sdwcltm6
sdwcltm7
sdwcltm8
sdwcltm9
sdwsrvl
sdwsrvm
[sipserver]
ubuntu-server-2
[ntopng]
sdwcltm6

View File

@@ -27,6 +27,7 @@
state: present state: present
tags: update_hosts tags: update_hosts
- name: install required packages - name: install required packages
become: true
package: package:
name: "{{ dependency_packages }}" name: "{{ dependency_packages }}"
state: present state: present

View File

@@ -1,5 +1,5 @@
---
dependency_packages: dependency_packages:
- name:
- expect - expect
- ftp - ftp
- cadaver - cadaver

View File

@@ -12,7 +12,7 @@
when: ntopng_check_deb.rc == 1 when: ntopng_check_deb.rc == 1
- name: Install ntopng source - name: Install ntopng source
become: yes become: yes
apt: deb="/home/{{ ansible_env.USER }}/Downloads/{{ ntopng_deb }}.deb" apt: deb="/home/{{ ansible_env.USER }}/Downloads/{{ ntopng_deb }}.deb" allow_unauthenticated=yes
when: ntopng_check_deb.rc == 1 when: ntopng_check_deb.rc == 1
- name: install ntopng - name: install ntopng
become: yes become: yes
@@ -20,6 +20,7 @@
name: ntopng name: ntopng
state: present state: present
update_cache: yes update_cache: yes
force: yes
- name: start ntopng - name: start ntopng
become: yes become: yes
systemd: systemd: