ntop is a network probe that shows network usage like * nix applications top and processes. 15 years after the original ntop was introduced, it’s time to create a new, modern ntop. We call it ntopng, ntop next generation (ntop the next generation). The objectives pursued by this application are multifaceted:
Publication under GNU GPLv3
Presentation of a modern HTML5 and Ajax-based web interface (caution: you need a modern browser to use ntopng)
Small application engine, reasonable memory consumption and fault tolerance
Ability to define application protocol using nDP, DPI (Deep Packet Inspection) ntop framework with open source
The ability of users to use scripts, expand and modify the pages of ntopng programming with the help of LuaJIT, a small but at the same time fast language
Characterize HTTP traffic by using block.si categorization services (ntopng already includes a license code, but you can get a personal code by contacting info@block.si.)
Using redis as a data cache, to separate the engine and data storage
The ability to collect flows - flows (sflow, NetFlow, IPFIX) using nProbe as a probe / proxy
Fast, very fast engine scaling up to 10 Gbit on a bare PC using PF_RING / DNA.
Unix, BSD, MacOSX and Windows support (including 7/8).
')
The ntop engine is written in C ++, web pages are generated using LUA. In the coming weeks, we will publish development guides for those who are willing to contribute to this project and make ntopng even better. We understand that many other features are missing, but they will come later this year, as additional updates. We will show a development plan in the near future, and we will also encourage users and companies to use ntopng in their products and distributions. The goal is to create an ecosystem where everyone can contribute.
MacOS binary (installs / usr / local / bin / ntopng)
Windows binary (demo). The full release is available here : this is our way to support the project, but you can build the project from source yourself.