admin, Author at ntop - Page 25 of 42

This week we have presented at Suricon 2019 our work about unifying ntopng with Suricata. https://youtu.be/g7NFjeSQG0c In short: Suricata is a great tool for analysing individual flows but It lacks a GUI…

ntop

October 23, 2019

New Directions in Network Traffic Security: Homework for 2020

Summary With today's traffic, most network IDSs (NIDS) have severe limitations in terms of visibility and ability to be easily circumvented by malware (for instance running a known service on a non-default…

ntop

October 19, 2019

Do You Know What Hackers Hide in SSL/TLS?

ntop believes that the future of traffic monitoring and network security will be played by the ability to inspect the behaviour of encrypted communications. It is fortunate that Sam Bocetta accepted to…

cento

October 4, 2019

nProbe Cento 1.10 is Out

After nDPI v3 release, today we have rolled out an incremental update of nProbe Cento. In addition to fixing a few issues, we introduce in Cento some of the fingerprints implemented by…

nDPI

October 4, 2019

Introducing nDPI v3: Encrypted/Malware Traffic Analysis with Ease

Those who though that DPI died with the advent of traffic encryption should play with nDPI v3 that we're introducing today. As already discussed, the pervasive use of encrypted traffic requires a…

nDPI

September 27, 2019

How Encryption Changed Network Traffic (Monitoring). Finally.

For years traffic monitoring tools assumed traffic was in clear text. This because when the Internet was created all the main protocols such as DNS, HTTP, SMTP, Telnet, POP were in clear.…

ntopng

September 10, 2019

Using RFC8520 (MUD) to Enforce Hosts Traffic Policies in ntopng

RFC8520 (Manufacturer Usage Description) specifies what is the intended (from the manufacturer standpoint) network behaviour of a network device. Being it defined in JSON format by the device manufacturer, it can be…

ntopng

August 26, 2019

Merging Infrastructure and Traffic Monitoring: Integrating ntopng with Icinga

Icinga2 is an open source monitoring system which checks the availability of hosts and services, notifies users of outages and generates performance data for reporting. Thanks to its scalability and extensibility, it…

nProbe

August 23, 2019

Packets vs eBPF/System Events: Positioning nProbe vs nProbe Agent

nProbe (and ntopng) is a traditional packet-based application, whose lifecycle is Capture a packet and dissect/decode it Update the representation in memory of the network traffic (e.g. the flow table) Export the…

nDPI

August 15, 2019

New Challenges in DPI Protocol Detection

In the early Internet days, each network protocol was designed for a specific purpose: SMTP for sending emails, HTTP for the web and so on. In order to make sure that implementations…

nProbe

August 1, 2019

Containers and Networks Visibility with ntopng and InfluxDB

For a while we have investigated how to combine system and network monitoring in a simple and effective way. In 2014 we have done a few experiments with Sysdig, and recently thanks…

nProbe

July 12, 2019

Measuring nProbe ElasticSearch Flow Export Performance

nProbe (via its export plugin) supports ElasticSearch flows export. Setting up nProbe for the ElasticSearch export is a breeze, it just boils down to specifying option --elastic. For example, to export NetFlow…

Author: admin

ntopng & Suricata: Unifying Visibility with Security

New Directions in Network Traffic Security: Homework for 2020

Do You Know What Hackers Hide in SSL/TLS?

nProbe Cento 1.10 is Out

Introducing nDPI v3: Encrypted/Malware Traffic Analysis with Ease

How Encryption Changed Network Traffic (Monitoring). Finally.

Using RFC8520 (MUD) to Enforce Hosts Traffic Policies in ntopng

Merging Infrastructure and Traffic Monitoring: Integrating ntopng with Icinga

Packets vs eBPF/System Events: Positioning nProbe vs nProbe Agent

New Challenges in DPI Protocol Detection

Containers and Networks Visibility with ntopng and InfluxDB

Measuring nProbe ElasticSearch Flow Export Performance