ntopng network monitoring and discovery
summary
ntopng is presented as an open-source passive packet-capture monitoring tool extended with active device discovery to identify and classify endpoints (e.g., tablets, TVs, PCs). The talk covers ntopng’s passive and active techniques for device discovery and classification, how those classifications drive monitoring reports and enforcement of network policies (for example blocking bittorrent on printers), and how selected devices can be monitored both actively and passively for comprehensive coverage.
AI-written summary · about
related talks
26mNetwork monitoring with FOSS
40mThe NOC Report
32mThere and Back Again: Discovering OT Devices Across Protocol Gateways
38mThe Black Hat Europe Network Operations Center (NOC) Report
33mThe Black Hat Europe NOC Report
24mDeep Network Traffic Observability with Pktvisor and Prometheus
38mONAP (Open Network Automation Platform) Introduction and Use Case Deep Dive
44mNetsec is Dead(?): Modern Network Fingerprinting for...