pfSense » pfSense Packages

maybe find some help in forums? https://forum.pfsense.org/index.php?topic=142576.0

Thanks. Yes, looking at the ntopng prefs.cpp on GitHub it looks like that command line option has been removed in 3.2. So the pfSense package should also have the option removed from the GUI, hence this bug report.

By the way, I think there's an additional issue in that this warning is triggered on start up:

ntopng has not been compiled with libcap-dev
Network discovery and other privileged activities will fail

... so the new functionality in 3.2 doesn't appear to be working anyway.

Thanks.

I could be wrong but libcap is a linux specific library to support capabilities as supported by the linux kernel.

There is and I don't think there cannot be a libcap for FreeBSD.

FreeBSD uses a capability framework known as capsicum, which is a different thing, with a different API and most probably different features.

Anyway adding capsicum support in ntopng would require some development activity in ntopng, which is different from simply adding a dependency.

I'll be asking the ntopng developers anyway.

UPDATE:

The functionality protected by capabilities mode is available on any OS as long as ntopng is running as root.

libcap is used to allow limited capabilities to be retained after dropping privileges as far as i understand.

Similar functionality should be possible using capsicum but that's to be investigated.

Tested on 2.4.4.a.20180412.1121, service starts and can be accessed.