ntopng
ntopng is a freemium web-based traffic monitor used to inspect live network flows and talking hosts for network operations and security teams.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Network Security & Monitoring
- Pricing
- Freemium
- Platforms
- Linux
- License
- Open source
- Reviewed
- Last reviewed 25 October 2026
What it is
A web UI and engine from ntop that turns packet or flow data into live views of hosts, protocols, and conversations. The community build is GPL-3.0, and ntop also sells commercial editions with extra features.
What it helps with
- Watching live traffic and top talkers on a network
- Exploring flows and protocols through a browser UI
- Spotting unusual hosts or conversations during an incident
- Choosing community GPL builds or commercial ntop packages
Who it's for
Network administrators and SOC teams who monitor traffic.
Worth knowing
The GitHub project is GPL-3.0. Commercial packages and support are sold by ntop separately, which is why pricing is freemium. Deployment is typically on Linux.
Is the GitHub build the full commercial product?
No, GitHub hosts the community GPL-3.0 code; ntop sells separate commercial editions.
How does it compare with Zeek or Arkime?
In our view Zeek focuses on rich protocol logs, Arkime on packet search, and ntopng on an operator-friendly live traffic UI.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.