parsedmarc VS ntopng

For those looking to roll your own, I'd recommend looking into (and contributing to) https://domainaware.github.io/parsedmarc/. I've used it in the past. I also have had the pleasure of meeting the project owner and they're a real mensch. Point it at a mailbox and it can spit out reports to an ELK stack or S3.

To better interpret the XML reports sent to the internal mailbox, I setup ParseDMARC in a docker container based on this github repo (as the original repo was giving me some issues). I now have access to the Kibana interface and default custom graphs included in the repo.

Here's another one: https://domainaware.github.io/parsedmarc/

Parsedmarc is a mail reports monitoring tool. It will well, parse your DMARC reports.

Check out parsedmarc

Ever came across parsedmarc? https://github.com/domainaware/parsedmarc Wanted to set it up, but then got blocked

I use parsedmarc sending to a self hosted Splunk.

and use software: https://www.ntop.org/

InfluxDB 2.0 Support (ntopng github)

For what it's worth, there used to be a package in many Linux repositories called "ntop" [1] but became less popular when they went commercial. There is still a community version but I have no idea how popular it is any more. It was quite popular prior to projects like PiHole. Perhaps the older ntop has fallen out of favor so maybe there won't be any confusion.

[1] - https://www.ntop.org/

Have you seen https://github.com/ntop/ntopng?

NTOP -- Traffic Analysis.

One of the comments suggests using a managed switch that supports port mirroring, and installing a Flow collector on the connected system. Google netflow collector for software options. Something like ntop may work. See... HowTo Monitor Traffic in SMEs and Home Networks: A Primer

What can I do to implement GeoIP support into ntopng? The instructions I found on the internet (e.g. https://github.com/ntop/ntopng/blob/dev/doc/README.geolocation.md) did not seem to fit the case.