Advanced Features

Advanced ntopng features such as logical interface aggregation and bridging are described in this section.

• 1. AS Mode
  • 1.1. Dashboard
  • 1.2. Exporter Interfaces
  • 1.3. Flows
• 2. Bridging and Traffic Policing
• 3. IDS Acceleration
• 4. Interfaces
  • 4.1. Packet vs ZMQ Interfaces
    • 4.1.1. Packet Interfaces
    • 4.1.2. ZMQ Interfaces
    • 4.1.3. Traffic Analysis: Differences
    • 4.1.4. Packet vs ZMQ: Which One to use?
  • 4.2. View Interfaces
  • 4.3. Interfaces vs View Interfaces
  • 4.4. Interfaces Disaggregation
    • 4.4.1. Dynamic Disaggregation
    • 4.4.2. Custom Disaggregation
  • 4.5. Using nTap as Virtual Tap with ntopng
    • 4.5.1. ntopng Enterprise L
    • 4.5.2. All Other ntopng Editions
• 5. Live Pcap Download
• 6. Flow Deduplication
• 7. OEM Customizations
• 8. Snapshots
• 9. Syslog Log Ingestion
  • 9.1. ntopng Configuration
  • 9.2. Logs Demultiplexing
  • 9.3. Syslog Relay Configuration (Optional)
  • 9.4. Hosts Log Ingestion
  • 9.5. nBox Log Ingestion
• 10. ClickHouse Timeseries
  • 10.1. Overview
  • 10.2. Configuration
    • 10.2.1. Deployment Modes
    • 10.2.2. Timeseries Driver Preference
    • 10.2.3. Data Retention
  • 10.3. Database Schema
    • 10.3.1. Table Definition
    • 10.3.2. Column Details
    • 10.3.3. Partitioning and Ordering
  • 10.4. Query Behaviour
    • 10.4.1. Counter vs. Gauge Metrics
  • 10.5. Comparison with Other Drivers