Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Queries ntopng network monitoring data from Redis via a secure SSH tunnel to provide device identification, traffic analysis, and connection auditing. Targets lab, test, and controlled audit environments where elevated access to network gateway data is authorized.
Reads live ntopng data directly from Redis over SSH without requiring an active web UI session, making queries scriptable and fully auditable.
When to use it
- Identify unknown devices on a local network by MAC and IP
- Audit external domains contacted by a specific device
- Flag devices with abnormal upload-to-download traffic ratios
- Verify ntopng service health and global device counts
- Investigate suspicious MAC addresses for spoofing indicators
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: List all devices on the network with their traffic volumes
- 1Establishes SSH tunnel to the configured OPNSENSE_HOST
- 2Runs ntopng-helper.sh list against the remote Redis instance
- 3Parses output with jq to extract MAC, IP, traffic, and last-seen fields
- 4Returns a formatted device inventory table
A list of network devices showing MAC address, IP, total traffic volume, and last-seen timestamp for each
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.