About this project

ntopng is a web-based network traffic monitoring application released under GPLv3. It is the modern incarnation of the original ntop, rewritten for improved performance, usability, and features. The application provides real-time network traffic analysis through an interactive web interface. It captures and displays detailed flow data including protocol distribution, top talkers, bandwidth utilization, and application-level traffic breakdowns. For cybersecurity use cases, it can identify anomalous traffic patterns and suspicious network behavior. Key capabilities include: - Web-based graphical dashboard for traffic visualization - Protocol and application identification - Top talkers and flow analysis - Historical traffic data retention and reporting - NetFlow/sFlow/IPFIX export support - Packet capture (pcap) based analysis - Real-time host and subnet visibility Pre-built binary packages are available for: - Debian/Ubuntu LTS x64 - CentOS/RedHat/RockyLinux/AlmaLinux Linux x64 - Windows x64 - Raspberry Pi / Debian ARM - FreeBSD / OPNsense / pfSense Source compilation instructions are available in the repository's doc/README.md file. Additional documentation, including a user guide and API documentation, is available at the ntop website.