ntop

ntop is an open source network traffic probe that shows the network usage, similar to what the popular top Unix command does. ntop is based on libpcap and it has been written in a portable way. It includes support for popular tools and protocols such as NetFlow, sFlow, and RRD.

ntop is a hybrid layer 2 / layer 3 network monitor, that is by default it uses the layer 2 Media Access Control (MAC) addresses AND the layer 3 TCP/IP addresses.

ntop users can use a a web browser (e.g. Firefox) to navigate through ntop (that acts as a web server) traffic information and get a dump of the network status. In interactive mode, it displays the network status on the user's terminal. In Web mode, it acts as a web server, creating a HTML dump of the network status. It sports a NetFlow/sFlow emitter/collector, a HTTP-based client interface for creating ntop-centric monitoring applications, and RRD for persistently storing traffic statistics.

ntop 5.0.1

Price Free to download Size 38.3MB License GNU GPL v3 Developer Luca Deri and contributors Website www.ntop.org System Requirements libdbil librrd4 python-mako python-markupsafe Support Sites: SourceForge Project Page Selected Reviews: Linuxaria

Features include:

• Sort network traffic according to many protocols including IPv4, IPv6, IPX, DecNet, AppleTalk, Netbios, OSI, DLC, (R)ARP, TCP/UDO, Fibre Channel, and more
• Show network traffic sorted according to various criteria
• Display traffic statistics
• Traffic statistics are saved into RRD databases for long-run traffic analysis
• Identify the identity (e.g. email address) of computer users
• Passively (i.e. withou sending probe packets) identify the host OS
• Show IP traffic distribution among the various protocols
• Analyse IP traffic and sort it according to the source/destination
• Display IP Traffic Subnet matrix (who’s talking to who?)
• Report IP protocol usage sorted by protocol type
• Act as a NetFlow/sFlow collector for flows generated by routers (e.g. Cisco and Juniper) or switches (e.g. Foundry Networks)
• Internet Domain, AS (Autonomous Systems), VLAN (Virtual LAN) Statistics
• Produce RMON-like network traffic statistics 
• Multithread and MP (MultiProcessor) support
• Advanced ‘per user’ HTTP password protection with encrypted passwords
• Python lightweight API for extending ntop via scripts 
• HTTPS (Secure HTTP via OpenSSL) 
• VoIP support (SIP, Cisco SCCP and Asterisk IAX)
• NetFlow (including v5 and v9) and IPFIX support
• Passive remote host fingerprint (Courtesy of ettercap)

Return to Console Based Network 'top' Tools Home Page

Last Updated Tuesday, October 02 2012 @ 05:17 PM EDT