Alerts

ntopng alerts are:

• Evaluated with Behavioural Checks for pools of hosts, interfaces, SNMP devices, and other network elements
• Delivered to recipients using type- or severity-based criteria

Contrary to tools based on signatures, ntopng is a behavioural-based tool. Below you can read more about available behavioural checks and how alerts are delivered to recipients.

• Alerts Explorer
  • Engaged Alerts
  • Past Alerts
  • Flow Alerts
  • Alerts Filters
  • Custom Queries
• Available Alerts
  • Interface Types
  • Alerts List
• Mitre Classification
  • Mitre ATT&CK Framework Integration
  • Security Report
  • Alerts Explorer
  • Alert Details
• Alerts List per License
  • Host Behavioural Checks
  • Interface Behavioural Checks
  • Local Networks Behavioural Checks
  • SNMP Behavioural Checks
  • Flow Behavioural Checks
  • System Behavioural Checks
  • Active Monitoring Behavioural Checks
  • Syslog Behavioural Checks
• Available Recipients
  • Discord
  • Elasticsearch
  • Email
  • Fail2Ban
  • Mattermost
  • MS Teams
  • PagerDuty
  • Shell Script
  • Slack
  • Syslog
  • Telegram
  • Webhook
  • WeChat
  • TheHive
• Alert Exclusions
  • Exclude Risks Domain/Networks with nDPI
• Developing Alerts
  • Checks
  • Alerts
  • Simple Host Alert Example