Realtime High-Speed Network Traffic Monitoring Using ntopng

Monitoring network traffic has becomeincreasingly challenging in terms of number of hosts, protocolproliferation and probe placement topologies. Virtualisedenvironments and cloud services shifted the focus from dedicatedhardware monitoring devices to virtual machine based, softwaretraffic monitoring applications.This paper covers the design and implementation of ntopng, anopen-source traffic monitoring application designed for highspeednetworks. ntopng's key features are large networks realtimeanalytics and the ability to characterise applicationprotocols and user traffic behaviour. ntopng was extensivelyvalidated in various monitoring environments ranging fromsmall networks to .it ccTLD traffic analysis