Mirror/SPAN/TAP MonitoringΒΆ

To monitor data from a mirror/SPAN port or from a tap, refer to Monitoring a Port Mirror/TAP.

Note

PF_RING Zero Copy licenses may be required when the traffic is above 1Gbps. In this case, see Operating ntopng on large networks and blog post Best Practices for Efficiently Running ntopng.