ntopng

Free and paid

Two price stories were visible. The README and the SPDX field say GPLv3. The binary printed Community build. The shop prints paid licenses: Pro 299.95 euro, Enterprise M 699.95, L 899.95, and XL 1499.95 for x64, as listed on 18 Oct 2026. Those euro amounts are the shop's. They are not a guess about what the community build disables. Cite the shop row for the license you would buy, and cite the version string for the build you ran. Redis, which this process needed, is a separate install and was not priced on the ntop page.

ntopng collects from a mirror, a TAP, or NetFlow, and shows hosts, flows, and applications in a browser. The README calls it the successor of ntop and says prebuilt packages are published at packages.ntop.org. The version string from the Ubuntu community package was 5.2.240401. This listing pointed it at http2_follow_multistream.pcapng with login disabled on localhost and a local Redis. The log said packet polling started on that file and then terminated. A later open of the dashboard, whose clock was 18 Oct 2026, showed no traffic in the live window. The sample's packets are dated 2017. An empty current-day chart is not a result, so the Screenshots section is removed rather than filing that empty view.

• Community 5.2.240401. The version line includes the words Community build. The README says GPLv3.
• The file was polled. The log started and then terminated packet polling on the sample pcap. The dashboard's current day stayed empty.
• Shop prices are licenses. Pro was 299.95 euro for x64. Enterprise M, L, and XL were 699.95, 899.95, and 1499.95.

1. 1

   Match the UI time range to the pcap before you conclude there was no traffic.

2. 2

   Cite Community build or the shop SKU, not both as the same price.

3. 3

   Use Zeek or TShark when you need the SNI from this sample written to a file.

• You point the community build at a file and the dashboard looks empty. On 18 Oct 2026 ntopng 5.2.240401, which printed Community build, logged that it started packet polling on the sample and then terminated. The web UI's current day showed no traffic because the packets are from 2017. Match the time range to the file before you write a conclusion.
• A purchase order says the GPL binary costs 299.95 euro. The shop listed ntopng Pro for x64 at 299.95 euro, Enterprise M at 699.95, L at 899.95, and XL at 1499.95. The README says GPLv3 and the SPDX field is GPL-3.0. Cite the shop row for the license you would buy and the version string for the build you ran.
• The sample's server name is needed in a file. This ntopng run did not write that name into a saved log this listing kept, and the empty today-chart was not filed. Use Zeek ssl.log or TShark's field extraction for www.mozilla.org. Redis was required to start the process and was not priced on the ntop page.

Hard cases

The case where the first result is easy to over-read.

Questions

Titled sources. These public pages are what the quotes on this listing come from.