What ntopng is
ntopng is a web-based network traffic analysis application. It can observe packets and flow records, group activity by host and protocol, and retain time-series information for troubleshooting and capacity planning.
Screenshot evidence
Why I run it
Firewall logs answer whether a connection was allowed or blocked; ntopng helps answer what the network is doing over time. I use it to identify busy hosts, unexpected protocols, long-lived flows and traffic patterns that need a closer look.
How I use the data
- Compare current traffic with a normal baseline
- Investigate high-bandwidth or unusual hosts
- Confirm whether VLAN and policy changes alter flows as expected
- Correlate network events with Zabbix and firewall logs
- Review application and protocol classification carefully
- Avoid publishing internal hostnames or addresses