ntopng Documentation

ntopng is a passive network monitoring tool focused on flows and statistics that can be obtained from the traffic captured by the server.

• What is ntopng
  • Licensing
• Basic Concepts
  • Network Interfaces
  • Hosts
    • Local Hosts
  • Alerts
    • Events
    • User-Configurable Thresholds
    • Events vs. Thresholds
    • Severity
    • Entities
    • Type
    • Third-Party Endpoints
  • Timeseries
    • RRD Driver
    • InfluxDB Driver
    • Timeseries Configuration
• How to Start ntopng
  • The ntopng Configuration File
  • Running ntopng as a Daemon
    • Daemon Configuration File
    • Automatic Daemon Startup on Boot
    • Daemon Control
  • Running on Windows
    • Specify Monitored Interfaces
    • Execution as a Windows Service
• Command Line Options
• The ntopng Web GUI
  • 1. Home Menu
    • 1.1. About ntopng
    • 1.2. ntop Blog
    • 1.3. Report an Issue
    • 1.4. Dashboard
  • 2. Dashboard
    • 2.1. Dashboard in the Community Version
    • 2.2. Dashboard in the Professional Version
  • 3. Report
  • 4. Flows
    • 4.1. Application
    • 4.2. Layer-4 Protocol (L4 Proto)
    • 4.3. Client
    • 4.4. Server
    • 4.5. Duration
    • 4.6. Breakdown
    • 4.7. Actual Throughput
    • 4.8. Total Bytes
    • 4.9. Info
  • 5. Categories
    • 5.1. Custom Category Hosts
    • 5.2. Flow Shortcut
  • 6. Hosts
    • 6.1. All Hosts
    • 6.2. Host Pools
    • 6.3. Networks
    • 6.4. Autonomous Systems
    • 6.5. Countries
    • 6.6. Operating Systems
    • 6.7. HTTP Servers (Local)
    • 6.8. Top Hosts (Local)
    • 6.9. Geo Map
    • 6.10. Tree Map
    • 6.11. Local Flow Matrix
  • 7. Host Details
    • 7.1. Home
    • 7.2. Traffic
    • 7.3. Packets
    • 7.4. Ports
    • 7.5. Peers
    • 7.6. Protocols
    • 7.7. DNS
    • 7.8. HTTP
    • 7.9. Flows
    • 7.10. SMNP
    • 7.11. Talkers
    • 7.12. Geography
    • 7.13. Alerts Configuration
    • 7.14. Statistics
  • 8. Interfaces
    • 8.1. Home
    • 8.2. Packets
    • 8.3. Protocols
    • 8.4. ICMP
    • 8.5. ARP
    • 8.6. Statistics
    • 8.7. Traffic Profiles (Professional Version)
    • 8.8. Settings
    • 8.9. Host Pools
  • 9. ntopng Settings
    • 9.1. Manage Users
    • 9.2. Preferences
    • 9.3. Manage Stored Data
    • 9.4. Backup Configuration
    • 9.5. Restore Configuration
  • 10. Administration
  • 11. Alerts
    • 11.1. Alert Endopints
  • 12. Host Search
• Using ntopng with nProbe
  • Exported Flow Fields
  • Collecting from Multiple Exporters
  • Using Behind a Firewall
• Remote Assistance
  • Remote Assistance Status
  • Security Considerations
• Continuous Traffic Recording
  • Enabling Traffic Recording
  • Traffic Extraction
    • REST API
• Advanced Features
  • 1. User Authentication
    • 1.1. Local Authentication
    • 1.2. LDAP Authentication
    • 1.3. RADIUS Authentication
    • 1.4. HTTP Authentication
    • 1.5. Unable to Login
  • 2. sFlow/NetFlow collection
  • 3. Physical Interfaces Aggregation: Interface Views
  • 4. Dynamic Interfaces Disaggregation
  • 5. Traffic Profiles
    • 5.1. Realtime Profiles
    • 5.2. Historical Profiles Statistics
  • 6. Device Protocols
  • 7. Bridging and Traffic Policing
  • 8. Flows Dump
    • 8.1. MySQL
    • 8.2. MySQL Performance
    • 8.3. ElasticSearch
    • 8.4. Logstash
  • 9. Live Pcap Download
  • 10. Additional ntopng Features
• Operating ntopng on large networks
  • Red Badges
  • Packet Drops
  • Additional Tuning
• API Documentation
  • Lua C API
    • 1. ntop
    • 2. interface
  • Lua API
    • 1. Timeseries API
    • 2. Recording API