License: GNU General Public License v3.0 Click for full size image (this image shows the web GUI) Website: Support: User’s Guide, GitHub Code Repository Identity Management, including correlation of VPN users to traffic.SNMP v1/v2c support and continuous monitoring of SNMP devices.Alerts engine to capture anomalous and suspicious hosts.Interactive historical exploration of monitored data exported to MySQL.

Support for MySQL, ElasticSearch and LogStash export of monitored data.Full Layer-2 support (including ARP statistics).Produce HTML5/AJAX network traffic statistics.Report IP protocol usage sorted by protocol type.Analyse IP traffic and sort it according to the source/destination.Characterize HTTP traffic by leveraging on characterization services provided by Google and HTTP Blacklist.Discover application protocols (Facebook, YouTube, BitTorrent, etc) by leveraging on nDPI, ntop Deep Packet Inspection (DPI) technology.Geolocate and overlay hosts in a geographical map.Store on disk persistent traffic statistics to allow future explorations and post-mortem analyses.Monitor and report live throughput, network and application latencies, Round Trip Time (RTT), TCP statistics (retransmissions, out of order packets, packet lost), and bytes and packets transmitted.Top talkers (senders/receivers), top ASs, top L7 applications.Produce long-term reports for several network metrics including throughput and application protocols.Show realtime network traffic and active hosts.Sort network traffic according to many criteria including IP address, port, L7 protocol, throughput, Autonomous Systems (ASs).The Community version is free to use and open source. Ntopng comes in four versions, Community, Professional, Enterprise M, Enterprise L.

Network htop