Skip to content
SPECIFICTION
Get listed

bwmon vs ntopng

bwmon

github.com

ntopng

ntop.org

Side by side

Figurebwmonntopng
Price fromFreeFree
Free planYesYes
Free trial——
Open source—Yes
WebYesYes
Windows—Yes
macOS—Yes
LinuxYesYes
APIYesYes
Self-hostedYesYes
Plans published17
Spec score · Bandwidth Monitoring Software8.5 (#5)8.9 (#2)
AlertsA banner appears when the rolling five-minute average reaches 40 Mbps, and cleared alerts remain in the history table.ntopng generates alerts for flows, hosts and interfaces and can notify through email, Discord, Telegram, webhooks, Slack, syslog or shell scripts.
InstallationInstallation uses a one-command shell script that sets up the collector, systemd service, cron jobs, and nginx server block.Binary packages are provided for Linux and Windows, with additional installation guidance for macOS, FreeBSD, OPNsense, pfSense and containers.
SecurityThe bundled nginx server block is open; the README recommends putting internet-exposed installs behind an authenticated reverse proxy or adding basic authentication.ntop says its packages are digitally signed with a PGP key and that users can verify package integrity with it.

Plans

bwmon

  • bwmonFree

bwmon pricing →

ntopng

  • CommunityFree
  • Community (Open Source)Free
  • Pro€299, paid once
  • Pro€299.95, paid once
  • Enterprise M€699.95, paid once
  • Enterprise L€899.95, paid once
  • Enterprise XL€1,499.95, paid once

ntopng pricing →

In their own words

bwmon

bwmon is a free, self-hosted bandwidth monitor for one Linux host and one network interface. Its dashboard updates receive and transmit rates every second, charts recent traffic, and lists top processes. When traffic passes five times its rolling two-minute average, bwmon records process attribution, all-interface rates, and leading conntrack flows for spike investigation. It retains five-minute samples for six months, with views from one hour to all time, a time-of-week heatmap, and a rate histogram. A banner appears when the rolling five-minute average reaches 40 Mbps; cleared alerts remain in the history table. Installation uses a shell script that sets up the collector, systemd service, cron jobs, and nginx server block; the dashboard defaults to port 8080. It requires Linux kernel 4.0 or later and root access. Debian and Ubuntu use the apt-based installer, while other distributions need manual dependency setup. The project recommends authentication for internet-exposed installations.

Visit github.com

ntopng

ntopng monitors network traffic gathered from traffic mirrors, NetFlow exporters, SNMP devices, firewall logs and intrusion detection systems. Its encrypted web interface supports real-time and historical traffic exploration. Protocol detection powered by nDPI covers more than 450 Layer-7 application protocols, while metrics include application latency, round-trip time, throughput, TCP retransmission, packet loss, and VoIP jitter and MOS. It captures packets with libpcap or PF_RING and collects flows from nProbe, NetFlow and sFlow exporters. An HTTP-based RESTful API and Lua scripting are listed. Platforms include Linux, FreeBSD, Windows x64, macOS and RaspbianOS; pfSense and OPNsense are also named among supported Unix platforms. The free Community edition suggests limits of 256 live local hosts, 128K live flows and eight monitored interfaces. Paid perpetual licenses include one year of maintenance: Pro is €299, paid once, Enterprise M is €699.95, paid once, Enterprise L is €899.95, paid once, and Enterprise XL is €1,499.95, paid once.

Visit ntop.org