Alerts Graph

With ntopng versions starting from May 2025, a new feature has been added: Alerts graph.

This graph is used to show the relationship between IP addresses that generate or suffered flow alerts and lets users easily visualize how alerts are connected between hosts, find possible C2, botnets and similar by looking at the distribution of flow alerts.

License Pre Requisites

This new feature is available for ntopng Enterprise L and above and nEdge enterprise L and above.

More information on this new feature can be found on our blog post:.`