• ntopng High-speed web-based traffic analysis.

  • nDPI Identify hundreds of L7 protocols.

  • Get Started! Go to the download page

Packet Capture

Wire-speed packet capture/transmission using commodity hardware with PF_RING. Zero-Copy packet distribution across threads, applications, Virtual Machines. Libpcap support for seamless integration with legacy applications.

Traffic Recording

10 Gbit and above lossless network traffic recording with n2disk. Industry standard PCAP file format. On-the-fly indexing to quickly retrieve interesting packets using fast-BPF and time interval. Precise traffic replay with disk2n.

Network Probe

nProbe: NetFlow v5/v9/IPFIX probe for analysing Gbit networks at full speed. Distribute network probes on the network, sending traffic information towards a central traffic analysis console such as ntopng.

Traffic Analysis

High-speed web-based traffic analysis and flow collection using ntopng. Persistent traffic statistics in RRD format. Layer 7 analysis by leveraging on nDPI, an Open Source DPI framework.
  • Best practices for using Bro IDS with PF_RING ZC. Reliably.

    Zero copy technologies such as PF_RING ZC allow applications to read packets in memory without any actor involved, being it the kernel or a memory copy. This is the reason why using ZC you can easily fill up a 10 … Continue reading

  • Using nfsen-like Traffic Profiles in ntopng

    One of the great features of nfsen is the ability to specify filters for identifying specific traffic and thus aggregate and graph it. In ntopng we aggregate traffic per host and networks. However sometimes you want to aggregate using other criteria. … Continue reading

  • Towards 100-Gbit Flow-Based Network Monitoring

    Last week we have previewed at FlowCon 2016 conference our new 100 Gbit probe called nProbe cento (cento is 100 in Italian). You can find our presentation slides here. We believe that it is important to combine flow monitoring with … Continue reading

  • Join us at the San Francisco Network Visibility Meetup on Jan 19th

    After the Flocon 2016 meetup we held this week, next week we’re organising a meetup for our users of the bay area where we will discuss a new arguments including high-speed sensors and network analytics. #meetup_oembed .mu_clearfix:after { visibility: hidden; display: … Continue reading

  • You’re invited to the ntop Meetup at Flocon 2016

    Topic: ntop Meetup – Affordable High-Speed Sensors Everywhere Abstract:  Come and meet Luca Deri, members of the ntop team, and fellow “ntop stack” users and partners as we talk about making instrumentation of the entire infrastructure possible with sensor prices … Continue reading

  • ntop 2016 Roadmap

    2015 has been a year full of activities that allowed us to consolidate our tools and thus provide a better service to the community. In 2016 the plan is the following: 100 Gbit As in 2015 we have added support for … Continue reading

  • Ntopng Integration with Nagios

    This tutorial shows how to properly configure nagios and ntopng (Professional) in order to send asynchronous ntopng-generated alerts to nagios. Prerequisites It is assumed that the following software is already installed and properly configured: nagios daemon nagios NSCA (Nagios Service Check Acceptor) … Continue reading

  • Interview with Luca Deri

    For all our Italian-speaking friends, yesterday I have been interviewed by an Italian magazine. This is the link to the interview. Enjoy!

  • ntopng 2.2 Just Released

    After over 6 months of work, we’re pleased to announce the release of ntopng 2.2 (as already discussed even numbers identify stable releases whereas odd number development versions). The goal of this release has been to consolidate the existing work, … Continue reading

  • Introducing PF_RING 6.2

    This is to announce the release of PF_RING 6.2 that has several improvements with respect to the previous version. As previously accounted, we have extended support of non-Intel devices in PF_RING to provide you the best experience supporting many new … Continue reading