ntopng has the ability to provide visibility into the processes which are responsible for the generation of traffic flows, when used in combination with nProbe. Process and other process-related metadata is attached to traffic flows. To enable this feature, nProbe should be started with the –agent-mode option as described in Using ntopng with nProbe Agent.
Please note this was previously availble through a separate agent application, nprobe-agent, which has been replaces by nprobe in agent mode. The old guides are available at: