Contribute
Contribute to the project by sending encrypted, anonymous telemetry data to ntop.org.
| Plugin | Description | Source Location | Availability |
|---|---|---|---|
| Alert Store DB Endpoint | Handles alert notifications for the UI | /usr/share/ntopng/scripts/plugins/endpoints/alert_store_db_endpoint | Community |
| Broadcas Domain Too Large | Detects ARP traffic between two MACS addresses beloging to different broadcast domains | /usr/share/ntopng/scripts/plugins/alerts/network/broadcast_domain_too_large | Community |
| Discords Alert Endpoint | Provides alerts notifications to discord | /usr/share/ntopng/scripts/plugins/endpoints/discord_alert_endpoint | Community |
| Dropped Alerts | Triggers an alert on the system when any interface has dropped alerts | /usr/share/ntopng/scripts/plugins/alerts/internals/alerts_drops | Community |
| Email Alert Endpoint | Provides alerts notifications via emails | /usr/share/ntopng/scripts/plugins/endpoints/email_alert_endpoint | Community |
| Flow Flood detector | Detects flow flood attacks and triggers alerts | /usr/share/ntopng/scripts/plugins/alerts/security/flow_flood | Community |
| Ghost Networks | Detects ghost networks and trigger alerts | /usr/share/ntopng/scripts/plugins/alerts/security/ghost_networks | Community |
| Host Log Collector | Collects syslog events from hosts | /usr/share/ntopng/scripts/plugins/collectors/host_log_collector | Community |
| Interface activity check | Detects if there is activity on a network interface, if not calls and triggers an alert | /usr/share/ntopng/scripts/plugins/alerts/internals/no_if_activity | Community |
| Intrusion Detection and Prevention Log | Logs intrusion detection and prevention events, such as when an host has been added to (or removed from) the jailed hosts pool | /usr/share/ntopng/scripts/plugins/alerts/security/ids_ips_log | Community |
| LLDP Topology Monitor | Detects changes in the SNMP network topology and triggers alerts | /usr/share/ntopng/scripts/plugins/alerts/network/snmp_topology_change | Community |
| Network Discovery check | Detects if there is a Network Discovery running in a Network Interface | /usr/share/ntopng/scripts/plugins/alerts/network/network_discovery | Community |
| Periodic Activities | Checks the state and functioning of periodic activities | /usr/share/ntopng/scripts/plugins/alerts/internals/periodic_activities | Community |
| Remote Connection | Detects if an host is taking part to one or more flows with a remote access protocol (e.g. TeamViewer) | /usr/share/ntopng/scripts/plugins/alerts/network/remote_connection | Community |
| SYN Scan detector | Detects SYN scan attacks on hosts and networks and triggers alerts | /usr/share/ntopng/scripts/plugins/alerts/security/syn_scan_alert | Community |
| Score Anomaly | Detects anomalies in host score | /usr/share/ntopng/scripts/plugins/alerts/security/score_anomaly | Community |
| Shell Script Alert Endpoint | Provides shell script execution in case an alerts is triggered | /usr/share/ntopng/scripts/plugins/endpoints/shell_alert_endpoint | Community |
| Slack Alert Endpoint | Provides alerts notifications to Slack | /usr/share/ntopng/scripts/plugins/endpoints/slack_alert_endpoint | Community |
| Slow Purge | Detects problems in hash tables purging | /usr/share/ntopng/scripts/plugins/alerts/internals/slow_purge | Community |
| Suricata Collector | Collects events and alerts from suricata | /usr/share/ntopng/scripts/plugins/collectors/suricata_collector | Community |
| Syslog Alert Endpoint | Provides alerts notifications to Syslog | /usr/share/ntopng/scripts/plugins/endpoints/syslog_alert_endpoint | Community |
| TCP SYN Flood detector | Detects TCP SYN flood attacks on hosts and triggers alerts | /usr/share/ntopng/scripts/plugins/alerts/security/syn_flood | Community |
| Telegram Alert Endpoint | Provides alerts notifications to telegram | /usr/share/ntopng/scripts/plugins/endpoints/telegram_alert_endpoint | Community |
| Threshold Cross | Multiple threshold cross alerts | /usr/share/ntopng/scripts/plugins/alerts/network/threshold_cross | Community |
| Too Many Drops | Detects excessive packet drops in network interfaces | /usr/share/ntopng/scripts/plugins/alerts/system/too_many_drops | Community |
| Unexpected Device Connected | Trigger an alert when an unexpected device connects to the network. | /usr/share/ntopng/scripts/plugins/alerts/security/unexpected_new_device | Community |
| Webhook Alert Endpoint | Provides alerts notifications via webhooks | /usr/share/ntopng/scripts/plugins/endpoints/webhook_alert_endpoint | Community |