Comments on: FREE: NTop-XTRA – shows network usage

By: Ronin Vladiamhe

Ronin Vladiamhe — Thu, 20 Nov 2008 17:30:58 +0000

With it support from it makes nonexistent, I’m a little hesitant about downloading it from the link provided by st3rling, and the nightmares that might be lurking. Of course, I’ll probablly download it and give it a look anyway.

By: st3rling

st3rling — Wed, 19 Nov 2008 19:08:33 +0000

I did check it for viruses. Several times. Using different scans Anyway, I already installed it and it works great!

By: Michael

Michael — Wed, 19 Nov 2008 19:01:51 +0000

st3rling, thanks! I hope you checked the file with an anti-virus software.

By: st3rling

st3rling — Wed, 19 Nov 2008 15:25:37 +0000

Oops, sorry forgot to paste the link:

http://www.wretch.cc/blog/ckm123/18713345

By: st3rling

st3rling — Wed, 19 Nov 2008 15:24:50 +0000

Found this one is still alive. Just click on Big Green button to download. Once downloaded, extract it. The actual ntop-extra is inside another .exe file.

By: hanu_blr

hanu_blr — Fri, 07 Nov 2008 16:06:22 +0000

ntop-xtra is no more available on the home page, now where can i find a copy of it for win32. hv been googling but no luck, any wrking url plz..

hanu

By: Ronin Vladiamhe

Ronin Vladiamhe — Mon, 25 Aug 2008 21:18:33 +0000

“NOTE: This package is no longer updated or supported by OPENXTRA.” What’s the 411 with that?

By: Jeff

Jeff — Tue, 12 Aug 2008 16:01:31 +0000

Hi Ronin,

Ntop-XTRA must be installed on a hard disk. You could use a USB Linux distro like Damn Small Linux with the persistent option and install the Linux version of Ntop on it and be able to run from a USB flash drive. It works quite well.

Jeff

By: Ronin Vladiamhe

Ronin Vladiamhe — Wed, 18 Jun 2008 21:14:49 +0000

I’m always looking to admin tools to add to my 8GB Toolkit (flash drive). Does NTop-XTRA fill the bill, or does it require a permanent hard drive home?

By: Jacky

Jacky — Wed, 30 Apr 2008 07:16:31 +0000

Hi Jeff,
Thanks for your advice. but i’m not familiar with linux now.maybe i need to learn it more.
your blog is so valuable, i used to have a look at it.
BTW, i’m from china, happy labor day!

By: Jeff

Jeff — Fri, 25 Apr 2008 16:32:33 +0000

Hi Jacky,

I’m glad that you like it. I felt the same way about it when I found it.

If you like this, you should check out OSSIM. It is a Network Traffic Monitoring/ Network Security system that installs on any linux distro. There is an sutomated installer that installs everything for you on Debain. I changed to this once I found it, and run it as a VM in ESX.

It includes:

* Arpwatch, used for mac anomaly detection.
* P0f, used for passive OS detection and os change analisys.
* Pads, used for service anomaly detection.
* Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
* Snort, the IDS, also used for cross correlation with nessus.
* Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
* Tcptrack, used for session data information which can grant useful information for attack correlation.
* Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
* Nagios. Being fed from the host asset database it monitors host and service availability information.
* Osiris, a great HIDS.
* OCS-NG, Cross-Platform inventory solution.
* OSSEC, integrity, rootkit, registry detection and more.

Enjoy!

Jeff

By: Jacky

Jacky — Fri, 25 Apr 2008 09:15:36 +0000

the tool is terrific! i download and used it today.it’s so great! thank you very much.

By: Leonardo

Leonardo — Wed, 23 Apr 2008 18:29:30 +0000

Haven’t seen that name in ages… I thought that by some alchemy they had “solved” the switched network “issue”… My switches are too stupid to be told what to do.

By: WRJ

WRJ — Tue, 22 Apr 2008 19:21:15 +0000

NTOP-XTRA is a quick way to get some network information out of a windows server/client in a pinch. I agree with the author that once one hits unix or linux worlds there are better packages of ntop.