Ross ROSS = Recommend OSS · open-source software intelligence for agents

ntop/nDPI

Some data may be outdated — see provenance labels.

Open Source Deep Packet Inspection Software Toolkit observed · 2026-09-23

github.com/ntop/nDPI · homepage · C · LGPL-3.0 (copyleft) observed · 2026-09-23

Health v2 · maintenance only

84/100

  • Activity 96
  • Release rhythm 60
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 203
  • age_days: 4202
  • days_rel: 53
  • days_push: 28
  • n_releases_24m: 4

Full methodology

Adoption not part of the score

4613 stars · 1011 forks observed · 2026-09-23

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

nDPI is an open source LGPLv3 C library for deep packet inspection that detects 450+ layer-7 application protocols from network traffic. It is part of the ntop suite and powers tools like ntopng and nProbe for traffic monitoring and threat detection.

Use cases

  • identify application protocols in pcap files or live traffic
  • build network monitoring or IDS/IPS tools with layer-7 visibility
  • detect DGA domains and encrypted traffic patterns
  • classify traffic by application instead of port numbers
  • analyze network flows for security and threat detection
  • embed protocol detection into firewalls or routers

When to choose

  • you need a fast, embeddable C library for protocol classification
  • you want broad layer-7 protocol coverage with active maintenance
  • you're building network monitoring, security, or traffic analysis tooling

When to avoid

  • you need a ready-made GUI monitoring console rather than a library (use ntopng)
  • you only need simple port-based traffic stats
  • your project cannot accept LGPL-3.0 or dual-license terms for some dissectors

Facets

library · maturity stable

parser security monitoring networking analytics networking security developer-tools windows bsd cross-platform c deep-packet-inspection dpi traffic-analysis protocol-detection libpcap ids c-library linux macos

10 sources

Member repositories

RepositoryRoleHealth v2
ntop/nDPImain84

For agents

markdown · JSON · MCP: product_card(name="ntop/nDPI")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem