
Features
What can ntop do?
- Classify traffic according to the protocol;
- See traffic as a function of various criteria;
- View traffic statistics;
- Store traffic statistics in RRD format;
- identity identification of users;
- Without having to send packages, identify the operating system;
- Display IP traffic information between the various protocols;
- Identify who talks to whom;
- Act as collector NetFlow and sFlow flows generated by network equipment such as routers and switches;
Operating System



Media
- Loopback
- Ethernet
- Token Ring
- PPP/PPPoE
- Raw IP
- FDDI
- Fiber Channel
- more...
Requirements
- Memory Usage: depends on the ntop configuration, the number of hosts, and the TCP active sessions. However it goes from a few MB for small networks up to 100MB for WANs;
- CPU usage is related to the ntop configuration and traffic conditions. On current server, not exceed 10% of the CPU load;
Protocols
- IPv4/IPv6
- IPX
- DecNet
- Apple Talk
- Netbios
- OSI
- DLC
- ...e molti altri
IP Protocols
- Fully user configurable
Additional Features
- Supporto VoIP (SIP, Cisco SCCP and Asterisk IAX)
- Supporto NetFlow (incluso v5 e v9) e IPFIX
- Network Flows
- Analisi di traffico Locale
- Multithread and MP (MultiProcessor) support on both Unix and Win32
- Python lightweight API for extending ntop via scripts
- Support of both NetFlow andsFlowas flow collector. ntop can collect simultaneously from multiple probes
- Traffic statistics are saved into RRDdatabases for long-run traffic analysis.
- Internet Domain, AS (Autonomous Systems), VLAN (Virtual LAN) Statistics
- Network assets discovery and categorization according to their OS and users
- Protocol decoders for many internet protocols
- Advanced 'per user' HTTP password protection with encrypted passwords
- RRDsupport for persistently storing per-host traffic information
- Passive remote host fingerprint (Courtesy of ettercap)
- HTTPS (Secure HTTP via OpenSSL)
- Virtual/multiple network interfaces support
- Graphical ntop launcher (Win32 only)