ntopng is a web-based network traffic probe for traffic analysis and flow collection. It provides real-time and historical views of network traffic, top talkers and application detection through the nDPI engine, and ingests data from traffic mirrors, NetFlow exporters, SNMP devices, firewall logs and IDS systems. Further capabilities include alerts, a REST API, geolocation of hosts and export to Elasticsearch or ClickHouse. It runs on Linux, FreeBSD, Windows and macOS, and it can be paired with nProbe for flow collection on high-speed links.
ntopng is developed by ntop, whose legal information page lists Italy as its country; its staff are geographically distributed across Europe. The Community edition is open source under the GNU GPLv3, while the Pro and Enterprise editions are commercial and licensed under ntop's EULA. ntopng is software that runs on your own systems, so traffic metadata stays on your own infrastructure rather than in a vendor cloud. For European organisations this makes it a self-hosted option for network visibility, with a European supplier behind the commercial editions.