Configure Time Sync and Time Zone

The following steps are required for installation of NetMon 5.0.0 and above.

NetMon 5.0.0 moved to using Chrony for time sync, which requires command line configuration following installation. It is recommended you also set the Time zone for the NetMon appliance to ensure the syslog output to your SIEM is correctly timestamped to the same time zone as the receiving agent. By default, NetMon uses 2.rocky.pool.ntp.org for its time source, which requires internet access and NTP UDP/123 to be open. Most environments will have this blocked and require NTP to be pointed to internal NTP servers.

To configure Chrony for NetMon time sync and the NetMon time zone, use the following commands:

sudo vi /etc/chrony.conf (replace pool 2.rocky.pool.ntp.org with "server x.x.x.x iburst", add additional lines as necessary)
sudo chkconfig chronyd on
sudo systemctl start chronyd
sudo timedatectl set-timezone Australia/Melbourne (replace with your appropriate timezone matching the syslog receiver agent)
sudo reboot

The default time zone for NetMon is Americas/Denver. To find the string that corresponds to your time zone, use the command sudo tzselect.

Following changes to NetMon time or time zone, a reboot is required.