Compare software

Packetbeat vs ntopng: catalog facts
Packetbeatntopng
Free

Free to download; paid Elastic offerings exist for the wider stack.

Freemium

Licensed editions are sold by ntop, listed as models on the product page.

Command line Windows, macOS, Linux, Self-hosted
  • Decodes many application protocols
  • Passive capture with no latency added
  • Application detection powered by nDPI
  • Real-time and historical traffic in a web interface
  • Needs Elasticsearch or Logstash to be useful
  • Agent with no interface of its own
  • Some features need a paid licence
  • Needs a mirror port, TAP or flow exporter to see network traffic
Downloadable app Downloadable app, Self-hosted
Closed source Closed source
License not stated License not stated
No account needed Not stated if an account is needed
Not stated if it works offline Works offline

Checked October 1, 2026

Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.