
The Community version is free to use and opensource (code can be found on Github). Ntopng comes in four versions, Community, Professional, Enterprise M, Enterprise L.
REST API to ease integrations with third-parties.Behavioral traffic analyses such as lateral movements and periodic traffic detection.

Identity Management, including correlation of VPN users to traffic.SNMP v1/v2c/v3 support and continuous monitoring of SNMP devices.Interactive historical exploration of monitored data exported to ClickHouse.Support for ClickHouse, MySQL, ElasticSearch export of monitored data.
Ntopng windows full#
Full Layer-2 support (including ARP statistics).Produce HTML5/AJAX network traffic statistics.Report IP protocol usage sorted by protocol type.Analyze IP traffic and sort it according to the source/destination.Discover Layer-7 application protocols (Facebook, YouTube, BitTorrent, etc) by leveraging on nDPI, ntop Deep Packet Inspection (DPI) technology.Geolocate and overlay hosts in a geographical map.Store on disk persistent traffic statistics to allow future explorations and post-mortem analyses.Monitor and report live throughput, network and application latencies, Round Trip Time (RTT), TCP statistics (retransmissions, out of order packets, packet lost), and bytes and packets transmitted.Top talkers (senders/receivers), top ASs, top L7 application protocols.Produce long-term reports for several network metrics including throughput and L7 application protocols.Show realtime network traffic and active hosts.

