Akvorado vs ntopng
Akvorado
akvorado.net
ntopng
ntop.orgSide by side
| Figure | Akvorado | ntopng |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 7 |
| Spec score · Network Traffic Analysis Software | 8.1 (#4) | 8.9 (#1) |
| Spec score · Bandwidth Monitoring Software | 8.1 (#9) | 8.9 (#2) |
| Authentication | The console expects an authenticating proxy to supply user headers and lists options including Authelia, Authentik, Keycloak, and OAuth2 Proxy. | Documented authentication options include local accounts, MFA, passkeys, OpenID Connect, LDAP, RADIUS, HTTP authentication and token-based authentication. |
| Support | The project directs users to its documentation and GitHub Discussions for help, and asks them to read troubleshooting guidance before opening a discussion. | ntop offers paid consultancy, commercial-grade support by phone, email, or on-site, professional training, and customization; community support is described as best-efforts. |
Plans
ntopng
- CommunityFree
- Community (Open Source)Free
- Pro€299, paid once
- Pro€299.95, paid once
- Enterprise M€699.95, paid once
- Enterprise L€899.95, paid once
- Enterprise XL€1,499.95, paid once
In their own words
Akvorado
Akvorado is free network-flow software that receives NetFlow, IPFIX, and sFlow records, enriches them, and exposes the results through a web interface. Its inlet forwards incoming flows to Kafka. The outlet parses and augments them before sending data to ClickHouse. SNMP can supply exporter and interface details, while IPinfo or MaxMind can add geographic information. Optional BGP routes received through BMP contribute AS numbers, AS paths, and communities. A Grafana plugin is available, and the inlet, outlet, orchestrator, and console expose HTTP metrics. Written in Go, Akvorado is delivered as a single binary or Docker image, but deployment requires Kafka and ClickHouse. Recommended resources are 8 vCPUs, 100 GB disk, and 16 GB RAM, with AMD64 or ARM64 listed. The console expects an authenticating proxy to provide user headers. Relational data can use SQLite, MySQL, or PostgreSQL; without one, data remains in memory and disappears on restart. Downgrades are unsupported. The license is AGPLv3.
ntopng
ntopng monitors network traffic gathered from traffic mirrors, NetFlow exporters, SNMP devices, firewall logs and intrusion detection systems. Its encrypted web interface supports real-time and historical traffic exploration. Protocol detection powered by nDPI covers more than 450 Layer-7 application protocols, while metrics include application latency, round-trip time, throughput, TCP retransmission, packet loss, and VoIP jitter and MOS. It captures packets with libpcap or PF_RING and collects flows from nProbe, NetFlow and sFlow exporters. An HTTP-based RESTful API and Lua scripting are listed. Platforms include Linux, FreeBSD, Windows x64, macOS and RaspbianOS; pfSense and OPNsense are also named among supported Unix platforms. The free Community edition suggests limits of 256 live local hosts, 128K live flows and eight monitored interfaces. Paid perpetual licenses include one year of maintenance: Pro is €299, paid once, Enterprise M is €699.95, paid once, Enterprise L is €899.95, paid once, and Enterprise XL is €1,499.95, paid once.