ntopng Network traffic & flows
Ask plain-English questions about your own ntopng — what is flowing on each interface, which hosts are driving traffic, the applications behind it, and what ntopng is flagging.
Connect your ntopng and Sauble will investigate a traffic incident against your live network data — no drilling through screens. It reads what is flowing on each interface right now, which hosts are driving it, the applications behind it, and the anomalies ntopng has flagged.
What Sauble can do
8 capabilities, grouped by what you are trying to find out.
See what ntopng is flagging
get_alertsAnomalies ntopng is engaged on right now — floods, misbehaving hosts, threshold breaches.get_historical_alertsThe alert timeline over a window — when something started, recurred, and cleared.Check your interfaces
get_interfacesThe network interfaces ntopng is watching, with speed and state.get_interface_statsThroughput on one interface — bytes, packets, drops — is it saturated right now?Trace hosts, flows & apps
get_top_talkersThe hosts moving the most traffic on an interface — the usual first suspects.get_flowsThe active conversations, each labelled with its application by deep packet inspection.get_hostsEvery active host on an interface, with bytes moved and a risk score.get_hostOne suspect host in detail — its flows, alerts, score, country, and OS.Full read APIget_ntopngreaches the rest of ntopng's read-only API — anything the curated tools don't cover.
Ask it things like
Natural language — Sauble picks the right tools for you.
How ntopng organizes your data
The 5 things Sauble reads — and how they connect.
Interfaces
The links ntopng monitors — the top-level view of everything flowing through your network.
Hosts
The devices seen on an interface, each with bytes moved and a risk score.
Flows
The individual conversations between two hosts — the raw traffic behind a spike.
Applications (DPI)
What each flow actually is — the application deep packet inspection identifies on the wire.
Alerts
The anomalies ntopng raises — active now, or historical across a time window.