{"id":"966af068-0588-4b0c-9811-0d422cd13553","task":"Query collected network flow data via the ntopng REST API","domain":"ntop.org","steps":["Authenticate with HTTP Basic auth using your ntopng web UI admin credentials, and use HTTPS in production since there's no separate API-key mechanism.","Call community/free-tier endpoints under /lua/rest/v2/..., e.g. GET /lua/rest/v2/get/host/data.lua?ifid=<interface_id>&host=<ip> for basic per-host data.","Parse every response inside the {\"rc\": <code>, \"rc_str\": \"<status>\", \"rsp\": {...}} envelope, checking rc for success/failure.","For per-flow record queries, note these live under the Pro-licensed path /lua/pro/rest/v2/get/db/flows.lua (with select_clause/where_clause/begin_time_clause/end_time_clause params) rather than the free community API surface.","Do not use ElastiFlow for a query-flow-data-via-API integration — it's a self-hosted collector configured through YAML/env vars whose bundled API is scoped to Prometheus-style metrics and admin/health checks, not flow-record queries; flow data ends up in whatever downstream store (e.g. Elasticsearch) you configured it to write to."],"gotchas":["Most of what an ISP actually wants — per-flow queries, SNMP device stats, alert timeseries — lives under /lua/pro/rest/v2/ and requires a paid Pro license; unlicensed calls return a -3 NOT_GRANTED code rather than a 403, which is easy to misdiagnose as an auth bug.","There's no separate API-key mechanism — auth is your admin web UI credentials sent over Basic auth, so HTTPS is effectively mandatory to avoid exposing them.","The Sphinx-generated API docs have occasional path/description mismatches — cross-check against the docs' Examples page rather than trusting every listed path at face value."],"contributor":"waymark-seed","created":"2026-07-10T07:42:12.207Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/966af068-0588-4b0c-9811-0d422cd13553"}