ntopng 2.4.160627 Professional-0daytown

ntopng是一款采用开源技术（GPLv3）的网络流量分析工具，它为实时监控网络流量提供了一个Web界面。它可以在多个平台上运行，包括Linux和Mac OS X。ntopng本身随带一个简单的类似RMON的代理软件，内置Web服务器功能，并使用支持Redis的键值服务器来存储时间序列统计数字。你可以将ntopng网络流量分析工具安装到与你网络连接的任何指定的监控服务器上，可以使用Web浏览器，访问服务器上现有的实时流量报告。

ntopng 2.4.160627 Professional | 37.0 MB

High-Speed Web-based Traffic Analysis and Flow Collection. ntopng is the next generation version of the original ntop, a network traffic probe that monitors network usage. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Windows as well.

Main Features
Sort network traffic according to many criteria including IP address, port, L7 protocol, throughput, Autonomous Systems (ASs)
Show realtime network traffic and active hosts
Produce long-term reports for several network metrics including throughput and application protocols
Top talkers (senders/receivers), top ASs, top L7 applications
Monitor and report live throughput, network and application latencies, Round Trip Time (RTT), TCP statistics (retransmissions, out of order packets, packet lost), and bytes and packets transmitted
Store on disk persistent traffic statistics to allow future explorations and post-mortem analyses
Geolocate and overlay hosts in a geographical map
Discover application protocols (Facebook, YouTube, BitTorrent, etc) by leveraging on nDPI, ntop Deep Packet Inspection (DPI) technology
Characterise HTTP traffic by leveraging on characterisation services provided by Google and HTTP Blacklist.
Analyse IP traffic and sort it according to the source/destination.
Report IP protocol usage sorted by protocol type
Produce HTML5/AJAX network traffic statistics.
Full support for IPv4 and IPv6
Full Layer-2 support (including ARP statistics)
GTP/GRE detunnelling
Support for MySQL, ElasticSearch and LogStash export of monitored data
Interactive historical exploration of monitored data exported to MySQL
Alerts engine to capture anomalous and suspicious hosts
SNMP v1/v2c support and continuous monitoring of SNMP devices