ntop – High Performance Network Monitoring Solutions based on Open Source and Commodity Hardware.

ntopng High-speed web-based traffic analysis.
ntopng Edge Make your network a safer place
nDPI Identify hundreds of L7 protocols.
nProbe Cento 100Gbit NetFlow Probe and Traffic Classifier
Get Started! Go to the download page

Packet Capture

Wire-speed packet capture/transmission using commodity hardware with PF_RING. Zero-Copy packet distribution across threads, applications, Virtual Machines. Libpcap support for seamless integration with legacy applications.

Traffic Recording

10 Gbit and above lossless network traffic recording with n2disk. Industry standard PCAP file format. On-the-fly indexing to quickly retrieve interesting packets using fast-BPF and time interval. Precise traffic replay with disk2n.

Network Probe

nProbe: extensible NetFlow v5/v9/IPFIX probe with plugins support for L7 content inspection. nProbe Cento: up to 100 Gbit NetFlow, traffic classification, and packet shunting for IDS/packet-to-disk acceleration.

Traffic Analysis

High-speed web-based traffic analysis and flow collection using ntopng. Persistent traffic statistics in RRD format. Layer 7 analysis by leveraging on nDPI, an Open Source DPI framework.

How enable DPI-based Traffic Management in pfSense using nEdge

March 19, 2019

We have been receiving several inquiries from pfSense users who would love to complement the classical firewall-style pfSense features with the inline Layer-7-based traffic policing offered by nEdge. Being able place pfSense and nEdge side by side allows to overcome … Continue reading →
ntopng Multilanguage Support: EN, IT, DE and JP

March 19, 2019

We are happy to announce that ntopng has gone fully international! The following languages are now officially supported: English Italian Japanese German Language files are completely opensource, meaning that you can choose your preferred ntopng language, no matter if you … Continue reading →
Cento 1.6 Stable Just Released

March 1, 2019

After more than one year since the latest stable release, we are glad to announce cento 1.6-stable. This new release brings stability, fixes and several new features. Among the new features, it is worth mentioning that: Flows can be exported … Continue reading →
nDPI 2.8-stable is Out

March 1, 2019

This new release brings several fixes that make nDPI more stable. Such fixes involve especially DNS and HTTP traffic dissection. Here is the full list of changes: New Supported Protocols and Services Added Modbus over TCP dissector Improvements Wireshark Lua … Continue reading →
How to export BGP routing information (AS Path) in network flows

February 28, 2019

Tools like traceroute have been used for a long time to track the forward path of packets, i.e. the journey of our packets to a remote destination. Unfortunately with traceroute nothing can be said about the path of ingress packets, … Continue reading →
How to Track an Fight Malware, Ransomware, Botnets… using ntopng

February 22, 2019

Malware blacklists are not something new to ntopng. ntopng (including ntopng Edge) has integrated the emerging threats blacklist https://rules.emergingthreats.net for a long time. The 3.6 stable release also introduced some webmining blacklists, which would flag online mining sites and generate … Continue reading →
Introducing libebpfflow: packet-less network traffic and container visibility based on eBPF

February 13, 2019

As previewed during our FOSDEM 2019 talk, this is to introduce libebpfflow a new library for enabling network traffic and container visibility based on eBPF. Designed to be CPU and memory friendly (its presence it is almost unnoticeable) , it … Continue reading →
Identifying Suspicious Flows: Network Issues or Misbehaving Hosts ?

February 9, 2019

Starting from the latest 3.9 version, ntopng features and handy dropdown menu that allows you to filter flows on the basis of their current TCP state. Being able to filter flows on the basis of their TCP state is particularly … Continue reading →
How to Detect Malware Hosts and Scanners Using ntopng

February 4, 2019

Hosts directly connected to the Internet are often contacted by scanners and malware hosts. Since a few releases ntopng integrates a blacklist that is refreshed daily. Whenever a host part of this list contacts your ntopng instance and alert is … Continue reading →
Network Traffic Analysis in ntopng (a.k.a. ntopng 2019 Roadmap)

January 31, 2019

Aut viam inveniam aut faciam, Hannibal 247-182 B.C. For years ntopng has been a solution for collecting, analysing and visualising network traffic, but with a major limitation. It is too rich in data display and reporting that users needs to … Continue reading →

ntopng High-speed web-based traffic analysis.

ntopng Edge Make your network a safer place

nDPI Identify hundreds of L7 protocols.

nProbe Cento 100Gbit NetFlow Probe and Traffic Classifier

Get Started! Go to the download page

Packet Capture

Traffic Recording

Network Probe

Traffic Analysis

How enable DPI-based Traffic Management in pfSense using nEdge

ntopng Multilanguage Support: EN, IT, DE and JP

Cento 1.6 Stable Just Released

nDPI 2.8-stable is Out

How to export BGP routing information (AS Path) in network flows

How to Track an Fight Malware, Ransomware, Botnets… using ntopng

Introducing libebpfflow: packet-less network traffic and container visibility based on eBPF

Identifying Suspicious Flows: Network Issues or Misbehaving Hosts ?

How to Detect Malware Hosts and Scanners Using ntopng

Network Traffic Analysis in ntopng (a.k.a. ntopng 2019 Roadmap)

Latest Posts

Upcoming Events