Fully Fledged and High Performance
Network Visibility
and Cybersecurity
Enterprise-ready network monitoring solutions with an Open-Source heart.
New, Fast, Scalable ClickHouse Integration for High-Volume Networks
Network Visibility and Observability: ntopng vs SNMP+
HowTo Monitor+nDPI Traffic on Mikrotik Devices Using TZSP
Network Telemetry
Network KPI and QoE Monitoring. Many locations, single pane of glass.
With an intuitive web interface and support for advanced analytics, ntopng helps network administrators monitor, troubleshoot, and optimize their infrastructure with ease.
450+
App Protocols
100+
Behavioural Checks
Solutions
What ntop can do for you
Bandwidth Monitoring Monitor network traffic in real time using flow-based technologies or analysing traffic mirrors to ensure optimal performance and detect congestions or anomalies. Also collect from NetFlow or sFlow exporters.
Observability Measure network and application performance metrics, detect performance degradation, high-latency paths, or packet drops before they impact users or services.
Threat Detection Identify anomalous behaviours like lateral movements, data exfiltration or policy violations. Integrate with IDS/IPS systems and export enriched flow data for advanced correlation.
Activities Logging Log and correlate user, device, and application activity across the network. Track who did what, when, and where, essential for compliance, auditing, and forensic investigations.
Unlimited Scalability Deploy network probes at branch offices or WAN edges to monitor local traffic, export flows, and detect issues closer to the source. Scale horizontally and monitor distributed networks at 100 Gbit and more.
Industrial Monitoring Bridge IT and OT/SCADA visibility, monitor industrial control systems, networked sensors, and traditional IT infrastructure in a unified view.
DDoS Mitigation Deploy on-premise mitigation to block volumetric attacks at the edge ensuring service continuity without relying solely on upstream providers.
Enterprise and Community Support Build your monitoring infrastructure with with the help of professional consultancy services, or leverage insights from a large community of industry professionals.
Our Products
ntopng Web-based analyzer with a centralized console that provides real-time and historical visibility, flow analytics, host and application tracking, and cybersecurity insights.
nDPI Open Source Deep Packet Inspection toolkit for Layer 7 detection and metadata extraction. Used by our tools for advanced traffic classification, security analysis, and policy enforcement.
nProbe An extensible flow exporter and collector supporting NetFlow v5/v9/IPFIX, JSON and many other formats. Enables deep traffic monitoring, metadata enrichment, and integration with third-party systems.
nProbe Cento A high-performance, software-based flow probe designed for 100+ Gbps environments. Leverages PF_RING ZC for zero-copy packet processing and exports enriched NetFlow/IPFIX for scalable monitoring.
n2disk Lossless network traffic recording with on-the-fly indexing and timestamping with nanosecond precision. Ideal for trobleshooting, HFT optimization, lawful interception and forensics.
disk2n A PCAP traffic replay tool that injects previously captured packets from n2disk back into the network. Useful for testing, simulation, and forensic reconstruction with accurate timing.
PF_RING A packet capture acceleration engine for Linux. Powers ntop’s tools with efficient zero-copy capture and transmission, ideal for high-performance monitoring and inline applications.
nScrub An on-premise scrubbing solution that detects and blocks DDoS traffic in real time. Designed for HSP and large networks, nScrub filters volumetric attacks ensuring clean traffic reaches protected services.
Multi platform
Runs Anywhere You Need It.
Our software is designed for maximum flexibility — it runs seamlessly on major operating systems like Linux, Windows, and macOS, as well as on embedded platforms including Raspberry Pi, OpenWRT, and other ARM-based devices. Wherever your network lives, ntop is ready.
Turn key Solutions
nBox Appliances
Pre-packaged hardware appliances running ntop software, ideal for out-of-the-box traffic analysis, flow collection, and continuous traffic recording in enterprise and industrial environments.
25+ Years of
Monitoring Experience
We matured a strong experience developing network monitoring solutions and supporting thousands of customers worldwide for decades.
25
Years
Application
Frequently Asked Questions
What is ntop and why do I need it?
- ntop is a software company specializing in high-performance network traffic monitoring tools. We develop open-source and commercial applications for real-time traffic analysis, cybersecurity, and network visibility.
Is ntop software free to use?
- ntop software is available in both Community (free and open source) and Professional/Enterprise (commercial) editions. The commercial editions include additional features and support options.
Where can I download ntop software?
- You can download binaries for ntop software or access our repositories for major Linux distributions from the Software Installation section.
- You can download the source code from GitHub at github.com/ntop
How do I install and configure the software?
- Installation guides and documentation for ntopng and the other tools are available in the Software Installation page and our User’s Guide.
- We also provide Docker images and pre-built packages for quick deployment.
Does ntop offer commercial support?
- Yes. We provide professional support services including custom development, priority issue handling, and consulting. Visit the Professional Services page for details.
- ntop is a software company specializing in high-performance network traffic monitoring tools. We develop open-source and commercial applications for real-time traffic analysis, cybersecurity, and network visibility.
- ntop software is available in both Community (free and open source) and Professional/Enterprise (commercial) editions. The commercial editions include additional features and support options.
- You can download binaries for ntop software or access our repositories for major Linux distributions from the Software Installation section.
- You can download the source code from GitHub at github.com/ntop
- Installation guides and documentation for ntopng and the other tools are available in the Software Installation page and our User’s Guide.
- We also provide Docker images and pre-built packages for quick deployment.
- Yes. We provide professional support services including custom development, priority issue handling, and consulting. Visit the Professional Services page for details.
Blog
Latest Articles
New, Fast, Scalable ClickHouse Integration for High-Volume Networks
When it comes to monitoring very large networks and the flows’ cardinality reaches into the billions, the performance of historical data storage and query systems becomes a critical bottleneck. Network operators, analysts, and engineers need to access flow records quickly and reliably, whether for traffic analysis, security investigations, or compliance reporting. When faced with massive datasets, even small inefficiencies in the data pipeline can result in slow queries, high CPU and disk usage, and poor responsiveness. At ntop, our mission is to help users gain visibility into their networks with speed and precision. For this reason, over the past few …
Network Visibility and Observability: ntopng vs SNMP+
Recently, we’ve encountered users with high monitoring requirements. Some users need to monitor 1,000 routers and want to know who are the top talkers or top protocols. Others have a network with 200 branches, each with a NetFlow-enabled router. They need to know from a central location who are the top bandwidth users and ports on selected branches. Essentially, these users don’t need fine-grained network traffic monitoring. They just need a rough idea of who the top network users are (IP and ports). Often, users who ask us these questions are familiar with SNMP bytes/packets charts and need some insight …
HowTo Monitor+nDPI Traffic on Mikrotik Devices Using TZSP
Mikrotik devices are very popular in the ntop community. The simplest way to monitor traffic of these devices is using flows as described in this blog post. However sometimes flows might not be the best choice for various reasons including the inability to perform DPI on the captured traffic. For full visibility you can use a different option offered by Mikrotik devices. Under Tools -> Packet Sniffer you can export packets over the TZSP protocol (it is a sort of remote span protocol): just specify the IP of the remote collector and the collector port (usually 37008). The latest nTap …