Guides Archives

Most ntopng users make extensive use of ClickHouse support for storing historical flow data and running analysis on it. ClickHouse is highly optimized and offers a high compression rate (estimated at an…

Announce

January 23, 2025

Introducing ntopng Policy Menu

In the past months we have extended our behaviour analysis introducing new features such as the ACL or device policies. For this reason we have rearranged the menus and create a new…

Features

June 27, 2023

Using Traffic Rules To Supervise Network Traffic

The Problem Let's assume that you have a Network where local hosts generate a constant amount of traffic. How do you find if they are misbehaving? It happens that some local host…

Guides

January 20, 2021

ntopng, InfluxDB and Grafana: A Step-By-Step Guide to Create Dashboards

Creating Grafana dashboards out of ntopng data basically boils down to: Configuring ntopng to export timeseries data to InfluxDB Configuring the Grafana InfluxDB datasource to extract timeseries data from InfluxDB Adding Grafana…

Guides

September 20, 2018

Best Practices for the Collection of Flows with ntopng and nProbe

ntopng can be used to visualize traffic data that has been generated or collected by nProbe. Using ntopng with nProbe is convenient in several scenarios, including: The visualization of NetFlow/sFlow data originated…

Guides

December 13, 2017

PF_RING and Network Namespaces

Last week we made a couple of presentations at LinuxLab 2017 where we spoke about Containers, focusing on Network Namespaces support in PF_RING, and User and IoT-oriented Network Traffic Monitoring on Embedded…

Guides

August 14, 2017

When Live is not Enough: Connecting ntopng and nProbe via MySQL for Historical Flows Exploration

Using nProbe in combination with ntopng is a common practice. The benefits of this combination are manyfold and include: A complete decoupling of monitoring activities (taking place on the nProbe) from visualization…

Guides

April 3, 2017

Filling the Pipe: Exporting ntopng Flows to Logstash

Logstash comes in very handy when it is necessary to manipulate or augment data before the actual consolidation. Typical examples of augmentation include IP address to customer ID mappings and geolocation, just…

Guides

July 1, 2016

Best Practices for Efficiently Running ntopng

The default ntopng configuration, is suitable for most of our users who deploy it on a home network or small enterprise network (typically a /24 network) with link speed <= 100 Mbit.…

Guides

June 20, 2016

Tweaking MySQL to Improve ntopng Flows Storage Space Usage

Edit: MySQL tables engine has been migrated to MyISAM in ntopng 2.4 so this post only applies for versions <= 2.3. This is the first post that tries to give hints on…

Guides

May 21, 2016

How to Analyse MikroTik Traffic Using ntopng

MikroTik routers are pretty popular in particular in the wireless community and many users of the original ntop are familiar with it. With the advent of ntopng, we have decided to avoid…

Features

March 1, 2016

Exploring Historical Data Using ntopng: Part 2

ntopng is able to deliver monitored traffic flows data to a MySQL server. We have already discussed how to configure ntopng to deliver this data in another blog post. In this article…

Export and Archive ClickHouse Flows in ntopng for Regulatory Compliance

Introducing ntopng Policy Menu

Using Traffic Rules To Supervise Network Traffic

ntopng, InfluxDB and Grafana: A Step-By-Step Guide to Create Dashboards

Best Practices for the Collection of Flows with ntopng and nProbe

PF_RING and Network Namespaces

When Live is not Enough: Connecting ntopng and nProbe via MySQL for Historical Flows Exploration

Filling the Pipe: Exporting ntopng Flows to Logstash

Best Practices for Efficiently Running ntopng

Tweaking MySQL to Improve ntopng Flows Storage Space Usage

How to Analyse MikroTik Traffic Using ntopng

Exploring Historical Data Using ntopng: Part 2