A high-privilege network auditing tool that extracts real-time device and traffic data from ntopng via secure SSH tunnels.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ntopng-admin
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ntopng-admin using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is ntopng Network Monitor (Secure Edition)?
The ntopng-admin skill for Openclaw Skills is a professional-grade network monitoring and device identification tool designed for security auditing and diagnostic environments. By leveraging Redis data from ntopng, this skill provides network administrators with deep visibility into local traffic patterns and device behaviors without requiring complex direct database access. It serves as a bridge for security professionals to perform high-level forensics and inventory management while maintaining a secure posture.
Built with security in mind, this addition to Openclaw Skills prioritizes safe data handling. It utilizes SSH Key Authentication and implements strict input sanitization to ensure that network queries are performed reliably. Whether you are managing an OPNsense gateway or a complex home lab, this skill offers the transparency needed to detect anomalies and verify network health through a secure, scriptable interface.
ntopng Network Monitor (Secure Edition) Use Cases
- Identifying unauthorized or spoofed MAC addresses on a local network.
- Monitoring for data exfiltration by detecting anomalous upload-to-download ratios.
- Performing granular device forensics to see which external domains an IP has contacted.
- Verifying the operational status and global device counts of the ntopng service.
- Auditing protocol usage to ensure compliance with local security policies.
How ntopng Network Monitor (Secure Edition) Works
- The skill initiates a secure connection to the target gateway using SSH public key authentication.
- Commands are passed to a local helper script that interfaces with the ntopng Redis backend.
- Data is extracted and filtered using jq to produce clean, readable JSON or tabular output.
- The results are returned to the agent environment for analysis of MAC addresses, IPs, and traffic metadata.
- High-privilege actions are gated by manual approval to ensure the operator maintains oversight of sensitive network data.
ntopng Network Monitor (Secure Edition) Setup
To integrate this with your Openclaw Skills environment, ensure you have ssh and jq installed. Configure your connection details as environment variables:
export OPNSENSE_HOST="192.168.1.1"
export OPNSENSE_SSH_PORT="50222"
export NTOP_INSECURE="false"
Ensure your public SSH key is added to the target host to allow for non-interactive, passwordless authentication.
ntopng Network Monitor (Secure Edition) Data Schema & Taxonomy
| Component | Data Extracted | Purpose |
|---|---|---|
| Network Inventory | MAC, IP, Traffic Volume, Last Seen | Device discovery and baseline mapping |
| Device Forensics | Packet counts, Classification, Traffic breakdown | Detailed behavioral analysis |
| Connection Audit | Sampled External Domains | Domain reputation and exfiltration checks |
| Service Stats | ntopng status, Global device counts | Health monitoring and capacity planning |
ntopng Network Monitor (Secure Edition) Advanced Features
- Manual oversight mode: Autonomous invocation is disabled by default to ensure all high-privilege queries are reviewed.
- Secure-by-default architecture: SSL verification is active and credentials are never echoed in logs or scripts.
- Protocol anomaly detection: Ability to filter devices by specific application protocols to find hidden services.
- Anomaly flagging: Guidelines for identifying suspicious traffic ratios (e.g., 5:1 upload ratios) during audits.
SKILL.md
Loading
Related Openclaw Skills
Token Monitor
A lightweight monitoring utility that tracks OpenClaw provider quotas and sends alerts when token levels drop below a configurable threshold.
M365 Calendar for Microsoft Graph
A comprehensive automation skill for managing Microsoft 365 Business and Consumer calendars through the Microsoft Graph API.
Key Expiry Tracker
A metadata-only tracker that alerts you before your API keys, client secrets, and certificates expire to prevent unexpected service outages.
Job Execution Monitor
A heartbeat-driven monitoring system for scheduled cron jobs that alerts users when tasks fail or miss their execution windows.
OPNsense Admin
Automate OPNsense firewall administration, backups, and security monitoring via API and SSH.
AI Trend Hunter Pro - Automated Content Agent
A high-performance automation agent that transforms global trends into viral social media posts for platforms like X, LinkedIn, and Xiaohongshu.
METADATA
Featured*
