Get a License
Contact Us

ntopng and nProbe

Routers send NetFlow, IPFIX or sFlow. nProbe collects, ntopng shows. Installs as services that start on boot.

Choose your system

ntopng + nProbe

sudo apt-get update
sudo apt-get install -y software-properties-common wget
sudo add-apt-repository -y universe
wget https://packages.ntop.org//apt-stable/24.04/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y nprobe ntopng
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
--zmq=tcp://*:5556
-i=none
-n=none
--collector-port=2055
-T=@NTOPNG@
EOF
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=zmq://127.0.0.1:5556
EOF
sudo systemctl restart nprobe
sudo systemctl restart ntopng

sudo apt-get update
sudo apt-get install -y software-properties-common wget
sudo add-apt-repository -y universe
wget https://packages.ntop.org//apt-stable/24.04/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
EOF
sudo systemctl restart ntopng

sudo apt-get update
sudo apt-get install -y software-properties-common wget
sudo add-apt-repository -y universe
wget https://packages.ntop.org//apt-stable/24.04/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y nprobe
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
-i=none
-n=none
--collector-port=2055
EOF
sudo systemctl restart nprobe

sudo apt-get update
sudo apt-get install -y software-properties-common wget
sudo add-apt-repository -y universe
wget https://packages.ntop.org//apt-stable/24.04/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo apt-get install -y apt-transport-https ca-certificates curl gnupg
curl -fsSL 'https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key' | sudo gpg --dearmor -o /usr/share/keyrings/clickhouse-keyring.gpg
ARCH=$(dpkg --print-architecture)
echo "deb [signed-by=/usr/share/keyrings/clickhouse-keyring.gpg arch=${ARCH}] https://packages.clickhouse.com/deb stable main" | sudo tee /etc/apt/sources.list.d/clickhouse.list
sudo apt-get update
sudo apt-get install -y clickhouse-server clickhouse-client
sudo service clickhouse-server start
clickhouse-client --query "CREATE DATABASE IF NOT EXISTS ntopng"
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
-F=clickhouse;127.0.0.1;ntopng;default;default
EOF
sudo systemctl restart ntopng

Debian 12 bookworm.

ntopng + nProbe

sudo apt-get update
sudo apt-get install -y wget
sudo sed -i '/^deb/ s/$/ contrib/' /etc/apt/sources.list
wget https://packages.ntop.org//apt-stable/bookworm/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y nprobe ntopng
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
--zmq=tcp://*:5556
-i=none
-n=none
--collector-port=2055
-T=@NTOPNG@
EOF
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=zmq://127.0.0.1:5556
EOF
sudo systemctl restart nprobe
sudo systemctl restart ntopng

sudo apt-get update
sudo apt-get install -y wget
sudo sed -i '/^deb/ s/$/ contrib/' /etc/apt/sources.list
wget https://packages.ntop.org//apt-stable/bookworm/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
EOF
sudo systemctl restart ntopng

sudo apt-get update
sudo apt-get install -y wget
sudo sed -i '/^deb/ s/$/ contrib/' /etc/apt/sources.list
wget https://packages.ntop.org//apt-stable/bookworm/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y nprobe
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
-i=none
-n=none
--collector-port=2055
EOF
sudo systemctl restart nprobe

sudo apt-get update
sudo apt-get install -y wget
sudo sed -i '/^deb/ s/$/ contrib/' /etc/apt/sources.list
wget https://packages.ntop.org//apt-stable/bookworm/all/apt-ntop-stable.deb
sudo apt install -y ./apt-ntop-stable.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo apt-get install -y apt-transport-https ca-certificates curl gnupg
curl -fsSL 'https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key' | sudo gpg --dearmor -o /usr/share/keyrings/clickhouse-keyring.gpg
ARCH=$(dpkg --print-architecture)
echo "deb [signed-by=/usr/share/keyrings/clickhouse-keyring.gpg arch=${ARCH}] https://packages.clickhouse.com/deb stable main" | sudo tee /etc/apt/sources.list.d/clickhouse.list
sudo apt-get update
sudo apt-get install -y clickhouse-server clickhouse-client
sudo service clickhouse-server start
clickhouse-client --query "CREATE DATABASE IF NOT EXISTS ntopng"
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
-F=clickhouse;127.0.0.1;ntopng;default;default
EOF
sudo systemctl restart ntopng

Rocky Linux 9 or AlmaLinux 9. On Rocky Linux 10, install redis first from another repository.

ntopng + nProbe

curl -s https://packages.ntop.org//centos-stable/ntop.repo | sudo tee /etc/yum.repos.d/ntop.repo > /dev/null
sudo dnf config-manager --set-enabled crb
sudo dnf install -y epel-release
sudo dnf install -y nprobe ntopng
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
--zmq=tcp://*:5556
-i=none
-n=none
--collector-port=2055
-T=@NTOPNG@
EOF
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=zmq://127.0.0.1:5556
EOF
sudo systemctl restart nprobe
sudo systemctl restart ntopng

curl -s https://packages.ntop.org//centos-stable/ntop.repo | sudo tee /etc/yum.repos.d/ntop.repo > /dev/null
sudo dnf config-manager --set-enabled crb
sudo dnf install -y epel-release
sudo dnf install -y ntopng
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
EOF
sudo systemctl restart ntopng

curl -s https://packages.ntop.org//centos-stable/ntop.repo | sudo tee /etc/yum.repos.d/ntop.repo > /dev/null
sudo dnf config-manager --set-enabled crb
sudo dnf install -y epel-release
sudo dnf install -y nprobe
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
-i=none
-n=none
--collector-port=2055
EOF
sudo systemctl restart nprobe

curl -s https://packages.ntop.org//centos-stable/ntop.repo | sudo tee /etc/yum.repos.d/ntop.repo > /dev/null
sudo dnf config-manager --set-enabled crb
sudo dnf install -y epel-release
sudo dnf install -y ntopng
sudo yum install -y yum-utils
sudo yum-config-manager --add-repo https://packages.clickhouse.com/rpm/clickhouse.repo
sudo yum install -y clickhouse-server clickhouse-client
sudo systemctl enable --now clickhouse-server
clickhouse-client --query "CREATE DATABASE IF NOT EXISTS ntopng"
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
-F=clickhouse;127.0.0.1;ntopng;default;default
EOF
sudo systemctl restart ntopng

Raspberry Pi OS 64 bit (arm64). Stable and dev use the same packages.

ntopng + nProbe

wget https://packages.ntop.org//RaspberryPI/apt-ntop.deb
sudo dpkg -i apt-ntop.deb
sudo apt-get update
sudo apt-get install -y nprobe ntopng
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
--zmq=tcp://*:5556
-i=none
-n=none
--collector-port=2055
-T=@NTOPNG@
EOF
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=zmq://127.0.0.1:5556
EOF
sudo systemctl restart nprobe
sudo systemctl restart ntopng

wget https://packages.ntop.org//RaspberryPI/apt-ntop.deb
sudo dpkg -i apt-ntop.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
EOF
sudo systemctl restart ntopng

wget https://packages.ntop.org//RaspberryPI/apt-ntop.deb
sudo dpkg -i apt-ntop.deb
sudo apt-get update
sudo apt-get install -y nprobe
sudo tee /etc/nprobe/nprobe.conf > /dev/null <<'EOF'
-i=none
-n=none
--collector-port=2055
EOF
sudo systemctl restart nprobe

wget https://packages.ntop.org//RaspberryPI/apt-ntop.deb
sudo dpkg -i apt-ntop.deb
sudo apt-get update
sudo apt-get install -y ntopng
sudo apt-get install -y apt-transport-https ca-certificates curl gnupg
curl -fsSL 'https://packages.clickhouse.com/rpm/lts/repodata/repomd.xml.key' | sudo gpg --dearmor -o /usr/share/keyrings/clickhouse-keyring.gpg
ARCH=$(dpkg --print-architecture)
echo "deb [signed-by=/usr/share/keyrings/clickhouse-keyring.gpg arch=${ARCH}] https://packages.clickhouse.com/deb stable main" | sudo tee /etc/apt/sources.list.d/clickhouse.list
sudo apt-get update
sudo apt-get install -y clickhouse-server clickhouse-client
sudo service clickhouse-server start
clickhouse-client --query "CREATE DATABASE IF NOT EXISTS ntopng"
sudo tee /etc/ntopng/ntopng.conf > /dev/null <<'EOF'
-i=eth1
-F=clickhouse;127.0.0.1;ntopng;default;default
EOF
sudo systemctl restart ntopng

The commands write the config files for you: /etc/ntopng/ntopng.conf and /etc/nprobe/nprobe.conf. Edit them later with any text editor, then run sudo systemctl restart ntopng (or nprobe).

Point the NetFlow, IPFIX or sFlow export of your router to this machine, UDP port 2055.

Then open https://YOUR-IP:3001 (accept the self-signed certificate). Login: admin / admin.

Replace eth1 with your interface (run ip a). ntopng Community is free. nProbe needs a license: get one in the shop.

Use cases

Next steps

Install ntopng only
High speed with Cento
NetFlow guide

High-performance network traffic monitoring and analysis tools.

Explore
Newsletter
Subscribe