NTOP. Ntop [Ntop] is an integrated tool that can do various kinds of measurements and types of analysis on IP traffic. The four main functions of Ntop are traffic measurement, traffic monitoring, network optimi- zation and planning, and detection of network security violations. Ntop is available as an open source package [OpenSource]. The basic operation of Ntop is the following. The tool in installed on a machine in a subnetwork, and starts capturing and analysing all packets that can be observed by that machine. This is done by put- ting the network card of the machine into promiscuous mode. This technique can therefore only be applied within a broadcast domain, for instance a shared ethernet segment. The information about the captured packets is then used to perform the four main Ntop functions.
Appears in 2 contracts