ntop

About ntop

ntop is a software company that develops network traffic monitoring, visibility, and cybersecurity tools. Its homepage describes both open-source and commercial products for real-time traffic analysis and network security. The main products named are ntopng (a traffic analysis console), nDPI (deep packet inspection for Layer 7 classification), nProbe (a flow exporter and collector), nProbe Cento, n2disk, disk2n, PF_RING, and nScrub. The homepage also introduces nAnalyst, an AI network analyst that the page says runs entirely on-premises and does not send traffic outside the user's infrastructure. This is a vendor claim from the homepage, and the page does not describe how the feature handles cloud backup, uploads, or external services.

The homepage excerpt is incomplete and does not state pricing or plan details. It mentions a "Get a License" option and a "Free Download" button, but it does not explain what each involves. The directory entry lists the product as not open source, while the homepage describes some components, including nDPI and ntopng, as open source. Readers who need specific licensing terms should check the vendor's site directly.

Key features

• Real-time traffic monitoring through flow data or traffic mirrors, with NetFlow and sFlow support
• Layer-7 application protocol detection, with the homepage citing 450+ protocols
• Threat detection for lateral movement, data exfiltration, and policy violations, with IDS/IPS integration
• Network-wide activity logging that correlates user, device, and application activity
• Probes for branch offices and WAN edges, scaling to 100 Gbit+ across distributed networks
• On-premises AI anomaly detection with root-cause explanations through nAnalyst

ntop at a glance