ntopng Logo

User's Guide

  • What is ntopng
  • Available Versions & Licensing
  • Installation
  • How to Start ntopng
  • Command Line Options
  • User Interface Guide
  • User Authentication
  • Using ntopng with ntop Tools
  • Flow Collection
  • Industrial Monitoring
  • Quality of Experience (QoE)
  • Operating ntopng on large networks
  • Flows Dump (ClickHouse)
  • Advanced Features
    • 1. AS Mode
    • 2. Bridging and Traffic Policing
    • 3. IDS Acceleration
    • 4. Interfaces
    • 5. Live Pcap Download
    • 6. Flow Deduplication
    • 7. OEM Customizations
    • 8. Snapshots
    • 9. Syslog Log Ingestion
    • 10. ClickHouse Timeseries
  • Third-Party Integrations
  • Performance and Hardware Sizing
  • FAQ

Developer's Guide

  • Developers
  • API Documentation

Other Products

  • nProbe
  • nProbe Cento
  • n2disk
  • nDPI
  • PF_RING
  • nEdge
  • nScrub
  • nBox
  • nTap
  • License Manager
ntopng
  • Advanced Features
  • View page source

Advanced Features

Advanced ntopng features such as logical interface aggregation and bridging are described in this section.

  • 1. AS Mode
    • 1.1. Dashboard
    • 1.2. Exporter Interfaces
    • 1.3. Flows
  • 2. Bridging and Traffic Policing
  • 3. IDS Acceleration
  • 4. Interfaces
    • 4.1. Packet vs ZMQ Interfaces
      • 4.1.1. Packet Interfaces
      • 4.1.2. ZMQ Interfaces
      • 4.1.3. Traffic Analysis: Differences
      • 4.1.4. Packet vs ZMQ: Which One to use?
    • 4.2. View Interfaces
    • 4.3. Interfaces vs View Interfaces
    • 4.4. Interfaces Disaggregation
      • 4.4.1. Dynamic Disaggregation
      • 4.4.2. Custom Disaggregation
    • 4.5. Using nTap as Virtual Tap with ntopng
      • 4.5.1. ntopng Enterprise L
      • 4.5.2. All Other ntopng Editions
  • 5. Live Pcap Download
  • 6. Flow Deduplication
  • 7. OEM Customizations
  • 8. Snapshots
  • 9. Syslog Log Ingestion
    • 9.1. ntopng Configuration
    • 9.2. Logs Demultiplexing
    • 9.3. Syslog Relay Configuration (Optional)
    • 9.4. Hosts Log Ingestion
    • 9.5. nBox Log Ingestion
  • 10. ClickHouse Timeseries
    • 10.1. Overview
    • 10.2. Configuration
      • 10.2.1. Deployment Modes
      • 10.2.2. Timeseries Driver Preference
      • 10.2.3. Data Retention
    • 10.3. Database Schema
      • 10.3.1. Table Definition
      • 10.3.2. Column Details
      • 10.3.3. Partitioning and Ordering
    • 10.4. Query Behaviour
      • 10.4.1. Counter vs. Gauge Metrics
    • 10.5. Comparison with Other Drivers
Previous Next

© Copyright 2026, ntop.

Built with Sphinx using a theme provided by Read the Docs.