ntop Products: Traffic Analysis, NetFlow, DPI & Capture
Open source and commercial tools for network visibility
ntop builds software for network traffic monitoring, flow collection, deep packet inspection, packet capture, traffic recording and DDoS mitigation.
The products work together. PF_RING captures packets, nDPI identifies applications, nProbe turns traffic into flows, ntopng analyzes everything in real time and n2disk records the packets when you need the proof.

Layer-7 protocols
years of experience
line rate capture
Our products
Products by what you need to do
Traffic Analysis
ntopng, nAnalyst and nEdge: see hosts, flows, applications and alerts.
NetFlow Probes
nProbe and nProbe Cento: generate and collect NetFlow, sFlow and IPFIX.
Traffic Recording
n2disk and disk2n: record and replay full packets.
Deep Packet Inspection
nDPI: identify applications and extract TLS metadata.
Packet Capture
PF_RING, PF_RING ZC, PF_RING FT and nTap: capture at line rate.
DDoS Mitigation
nScrub: filter attack traffic on commodity hardware.
nBox Appliances
Ready to use hardware with the software preinstalled.
Where to start
Typical starting points
- Monitor a network with a mirror port or TAP: start with ntopng.
- Monitor routers and switches that export NetFlow, sFlow or IPFIX: nProbe and ntopng.
- Keep a packet archive for forensics: n2disk.
- Want hardware that just works: nBox appliances.
Get started
Not sure which one to choose?
Download the free Community edition, compare editions and buy in the shop, or talk to the ntop team about your requirements.

