Hi
Correct me if Im wrong but EFW 2.1 already has NTOP with the whole pretty GUI.
You get it in SERVICES-->TRAFFIC MONITORING, tick to enable it and then you can get to it either by the link on that page that reads "administration interface" or by going to
https://EfwIpAddress:3001/Cheers
Sheldon