cento

Advancements in Traffic Processing Using Programmable Hardware Flow Offload

This week we have presented at the IEEE HPSR (IEEE International Conference on High Performance Switching and Routing) our latest work that shows how nProbe can benefit of acceleration provided by modern SmartNICs to achieving multi-100 Gbit traffic processing (both passive and inline) on low-end servers while deep-packet inspecting traffic using nDPI. If you want to know more about it, you can view the presentation slides, or read thw paper. Your feedback is welcome. Enjoy ! …
ntopng

Extended Multilanguage Support in ntopng: Korean, Spanish and French

This is to announce that ntopng now enables users to use a new languages: Korean, Spanish and French.  We have also improved translations of German and Italian. The translation is done using an automatic tool so, we cannot guarantee that the translation is completely correct. Error or typos are accepted as a GitHub issue: please open a ticket if you find problems. To change language click on the top right icon in ntopng and enter in the admin page A popup will open, select language and a list of available …
ntop

ntop and Endian Enter Partnership for Open Source OT Monitoring

ntop develops monitoring tools for IT and OT networks, whereas Endian is a leading Italian company that develops a Secure Digital Platform for OT networks. Both companies use and develop open source tools that can be a key value in OT networks where most tools are proprietary. This partnership allows both companies to complement each other and offer better tools for their user community. The complete announcement can be found at this page. Enjoy ! …
ntop

You’re Invited to the ntop Community Call: Thu July 18th, 15:00 CET, 9:00 AM EST

This is to invite you to the next ntop community call that is scheduled for Thu July 18th, 15:00 CET, 9:00 AM EST. The topics we would like to discuss with our community include Planning for the next ntop Conference 2024/25: decide conference location, contents, format and details. Discuss about other potential community meeting (either in person or virtual) Preview of the upcoming stable released scheduled for late July. Feedback and Q&A This event does not require registration and you can simply add it to your calendar using this link …
n2disk

Howto Build a (Cheaper) 100 Gbit Continuous Packet Recorder using Commodity Hardware

Those who follow this blog probably read a few posts where we described how to build a 100 Gbit continuous packet recorder using n2disk and PF_RING, providing specs for recommended hardware and sample configurations (if you missed them, read part 1, part 2 and part 3). In those posts we recommended the use of FPGA-based adapters (e.g. Napatech) with support for PCAP chunk mode (e.g. ability for the NIC to collapse packets onside the adapter in pcap format without the need to read packet-by-packet as with most network adapters), in addition …
ntop

InfluxDB v2 support in ntopng is Now (partially) Available

It’s been 3 years since InfluxDB v.2 was released and until a couple of months ago we didn’t plan to add the support to the InfluxDB v.2 due to many reasons: migration from SQL to Flux query language, v2 performance not better than v1. The in the meantime InfluxData release InfluxDB v3 that is currently only supported on their cloud and not yet packaged as on-prem product. However due to the more pressing requests and suggestions from our customers we finally decided to add the support as follows: as InfluxDB …
ntop

Upcoming Events: CheckMK Conference and Interop Tokio

In the next couple of weeks we’ll be active in meeting our user community at two events: As you know ntopng is natively integrated with CheckMK. CheckMK Conference that will take place on June 11-13 in Munich, Germany. The ntop team will organize a one-day workshop about ntopng and cybersecurity.  Thanks to our partner for Japan Jupiter Technology Company, ntop tools will be presented at Interop Tokio 2024. Below you can find an introductory video. Hope to meet our community in person ! …
ntop

ELLIO and ntop partnership: combining cybersecurity with high-speed network traffic analysis

Prague, Czech Republic / Pisa, Italy, May 29, 2024 – ELLIO, a provider of real-time, highly accurate intelligence for filtering of unwanted network traffic and cybernoise, and ntop, a provider of open-source and commercial high-speed traffic monitoring applications, have announced a partnership to enhance visibility into malicious traffic originating from opportunistic scans and attacks within the network traffic monitoring tool ntopng. ELLIO empowers ntopng’s users with advanced insights into mass exploitations, botnets, and other widespread activities on the Internet. By integrating a highly accurate and real-time ELLIO: Feed, ntopng’s users …
ntop

ELLIO for ntopng: HowTo Prevent CyberAccidents Using Blacklists

Time is one of the main problems in cybersecurity. Detecting issues after they have happened can cost you money and resources to restore the system. Network traffic monitoring tools have as goal to show what is happening on a network.  Traditionally, monitoring protocols such as IPFIX/NetFlow export monitoring data periodically and often limit their analysis to the protocol header, thus the flow collector is partially blind as it is informed after a certain event happened with limited contextual information. In ntop tools we operate in real-time with pre-labelled information thanks …
nProbe

HowTo Use Cloud Licenses

As discussed in our spring webinar, it is now possible to use (in beta) cloud licenses with ntopng and nProbe. Contrary to standard licenses that are bound to a physical system (based on the systemId), cloud licenses are “floating” as the same license file can be used on multiple hosts, of course not simultaneously (i.e. only one system at time can use the license). This is good news for those who use containers or VMs as they do no have to pay attention to the systemId anymore. If you want …
ntop

Using WeChat For Delivering ntopng Alerts

WeChat is a multi-purpose messaging, social media, and mobile payment app developed by Tencent in China. Our Chinese-speaking users requested for a long  time an integration of ntopng with it, and this is to announce it. By integrating ntopng alerts with WeChat, users can conveniently access network notifications within a platform they are already comfortable with. Overall, integrating ntopng alerts with WeChat enhances the user experience by providing timely, centralised, and customisable notifications directly to users’ preferred communication platform. So, we are happy to announce that it is now possible …