nDPI - Deep Network Traffic Inspection

nDPI is an open source LGPLv3 library for deep-packet inspection. Based on OpenDPI it includes ntop extensions.

nDPI is a ntop-maintained superset of the popular OpenDPI library. Released under the LGPL license, its goal is to extend the original library by adding new protocols that are otherwise available only on the paid version of OpenDPI. In addition to Unix platforms, we also support Windows, in order to provide you a cross-platform DPI experience. Furthermore, we have modified nDPI to be more suitable for traffic monitoring applications, by disabling specific features that slow down the DPI engine while being them un-necessary for network traffic monitoring.

Getting started with nDPI

You can read about how nDPI is used from one of the resources below:


Use the GitHub nDPI project page to download nDPI source code and start playing with it.

You may also be interested in one of the following topics:

nDPI Community and Bug Reporting

To report bugs you can use the official GitHub nDPI issues page. To say in touch with the community and the developers, you can join public ntop discussions or the FOSDEM21 chatroom.