ntop Products: Traffic Analysis, NetFlow, DPI & Capture

Open source and commercial tools for network visibility

ntop builds software for network traffic monitoring, flow collection, deep packet inspection, packet capture, traffic recording and DDoS mitigation.

The products work together. PF_RING captures packets, nDPI identifies applications, nProbe turns traffic into flows, ntopng analyzes everything in real time and n2disk records the packets when you need the proof.

ntop ecosystem: ntopng, nProbe, n2disk, nDPI and PF_RING
450+

Layer-7 protocols

25+

years of experience

100 Gbit

line rate capture

Our products

Products by what you need to do

Traffic Analysis

ntopng, nAnalyst and nEdge: see hosts, flows, applications and alerts.

NetFlow Probes

nProbe and nProbe Cento: generate and collect NetFlow, sFlow and IPFIX.

Traffic Recording

n2disk and disk2n: record and replay full packets.

Deep Packet Inspection

nDPI: identify applications and extract TLS metadata.

Packet Capture

PF_RING, PF_RING ZC, PF_RING FT and nTap: capture at line rate.

DDoS Mitigation

nScrub: filter attack traffic on commodity hardware.

nBox Appliances

Ready to use hardware with the software preinstalled.

Where to start

Typical starting points

  1. Monitor a network with a mirror port or TAP: start with ntopng.
  2. Monitor routers and switches that export NetFlow, sFlow or IPFIX: nProbe and ntopng.
  3. Keep a packet archive for forensics: n2disk.
  4. Want hardware that just works: nBox appliances.

Get started

Not sure which one to choose?

Download the free Community edition, compare editions and buy in the shop, or talk to the ntop team about your requirements.