NTOPNG based Traffic Monitoring and Modelling

Firewall deployment is a case-based approach, which is sensitive to the network environment and traffic patterns. Improper setup and configuration on firewall will cause the degradation of network performance. Therefore, the performance testing of a firewall product under realistic traffic environment is crucial. This paper evaluates the traffic monitoring and capturing tool, ntopng, under 1 Gps and 10 Gps link speeds respectively. The ntopng functions are tested in order to retrieve the required traffic features. A traffic modelling method is proposed based on the extraction of historical data. The ntopng performance in terms of packet loss is examined with using different packet capture technologies.