Hack The Sec-Leading Resource Of Linux Tutorial: Cacti

<div dir="ltr" style="text-align: left;" trbidi="on">
Setup Cacti on RHEL 7.x and CentOS 7.x System 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPknc-KxjFEsEFc3TJas554xPxL7yopdQxZQCyql94RHhsRnnvHHOt-OHnslcJzQHfOhtQaOTHlmXe9KY9pYW-E3WwCt8LZUJkQJCZgPllCratXAK1V2zG9xBBs_cLDcZphDVNpGB5WxEw/s1600/cacti.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPknc-KxjFEsEFc3TJas554xPxL7yopdQxZQCyql94RHhsRnnvHHOt-OHnslcJzQHfOhtQaOTHlmXe9KY9pYW-E3WwCt8LZUJkQJCZgPllCratXAK1V2zG9xBBs_cLDcZphDVNpGB5WxEw/s1600/cacti.png" /></a>Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-end application for the open-source, industry-standard data logging tool RRDtool. Cacti allows a user to poll services at predetermined intervals and graph the resulting data. It is generally used to graph time-series data of metrics such as CPU load and network bandwidth utilization. A common usage is to monitor network traffic by polling a network switch or router interface via Simple Network Management Protocol (SNMP). 
 
The front end can handle multiple users, each with their own graph sets, so it is sometimes used by web hosting providers (especially dedicated server,virtual private server, and collocation providers) to display bandwidth statistics for their customers. It can be used to configure the data collection itself, allowing certain setups to be monitored without any manual configuration of RRDtool. Cacti can be extended to monitor any source via shell scripts and executables. 
 
Cacti can use one of two back ends: "cmd.php", a PHP script suitable for smaller installations, or "Spine" (formerly Cactid), a C-based poller which can scale to thousands of hosts. 
Install Apache, MariaDb php SNMP and RRDtool 
 
Login in your Linux machine as root and run following command to install apache, php, MariaDB: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install httpd httpd-devel mariadb-server php-mysql php-pear php-common php-gd php-devel php php-mbstring php-cli -y</pre>
Install php-snmp, net-snmp and rrdtool 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install php-snmp net-snmp-utils net-snmp-libs rrdtool -y</pre>
Start HTTPD, MySQL and SNMP service 
 
To start HTTPD, MySQL and SNMP service enter following command in your console 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl start httpd.service
# systemctl start mariadb.service
# systemctl start snmpd.service</pre>
Add HTTPD, MySQL and SNMP service to start on boot time: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl enable httpd.service
# systemctl enable mariadb.service
# systemctl enable snmpd.service</pre>
Setup MySQL database and User Accounts 
 
First, set the MySQL root password: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysqladmin -u root password YOUR_PASSWORD</pre>
Now, create cacti database. Login into your MySQL server and create cacti database width user cacti and set the password for it: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysql -u root -p
MariaDB [(none)]> create database cacti;
MariaDB [(none)]> GRANT ALL ON cacti.* TO cacti@localhost IDENTIFIED BY 'cactipass';
MariaDB [(none)]> FLUSH privileges;
MariaDB [(none)]> quit;</pre>
Install Cacti on RHEL/CentOS 7.x 
 
For installing cacti trough YUM command you must enable EPEL repository: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install epel-release -y</pre>
After enabling EPEL repository, type following command to install cacti: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install cacti -y</pre>
Install cacti tables to MySQL and configure MySQL settings for cacti 
 
Now, import cacti database tables from the cacti.sql file. First locate cacti.sql file: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># rpm -ql cacti|grep cacti.sql
/usr/share/doc/cacti-0.8.8b/cacti.sql</pre>
Import tables to cacti database: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysql -u cacti -p cacti < /usr/share/doc/cacti-0.8.8b/cacti.sql
Enter password:</pre>
Open /etc/cacti/db.php file using nano of VI editor and edit the below lines: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cacti";
$database_password = "cactipass";</pre>
Open http port in firewall 
 
Open an http port in firewall: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># firewall-cmd --permanent --zone=public --add-service=http
# firewall-cmd --reload</pre>
Configure apache to Network Accessible 
 
Open file called /etc/httpd/conf.d/cacti.conf 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># etc/httpd/conf.d/cacti.conf</pre>
Now edit the "Allow From" line, Either set to ALL or enter your LAN subnet to allow access to cacti: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Alias /cacti /usr/share/cacti

<Directory /usr/share/cacti/>
 <IfModule mod_authz_core.c>
 # httpd 2.4
 Require host 192.168.0.0/24
 </IfModule>
 <IfModule !mod_authz_core.c>
 # httpd 2.2
 Order deny,allow
 Deny from all
 Allow from 192.168.0.0/24
 </IfModule>
</Directory></pre>
After editing cacti configuration file, restart the Apache service: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl restart httpd.service</pre>
Set cron for cacti 
 
Open /etc/cron.d/cacti file and uncomment the line: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">*/5 * * * * cacti /usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1</pre>
Run cacti installer 
 
Go to http://YOUR-IP-ADDRESS/cacti/ and just follow the instructions on screen. The default username and password for cacti is admin/admin. Upon first login you will be forced to change the default password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh47I9Z2dnv9gQIE5n3sgj9Q9B5qcfSGmPvgh3J-TpJbLDJMHdjdkSVIOD5VdYLBGfG15H7X-pm8OVXXtgcekLNwaYjtSEHbbuN68LK5jhV541YkeFZrkp9QItWi93XSrplCuV0VqQu7O_3/s1600/Cacti-console-screen_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh47I9Z2dnv9gQIE5n3sgj9Q9B5qcfSGmPvgh3J-TpJbLDJMHdjdkSVIOD5VdYLBGfG15H7X-pm8OVXXtgcekLNwaYjtSEHbbuN68LK5jhV541YkeFZrkp9QItWi93XSrplCuV0VqQu7O_3/s1600/Cacti-console-screen_hackthesec.co.in.png" /></a></div>
 
More information about cacti, see <a href="http://www.cacti.net/">HERE</a>. 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
<div style="text-align: center;">
 </div>
</div>

How to setup Cacti on RHEL/Centos 7.x

Setup Cacti on RHEL 7.x and CentOS 7.x System Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-...