To install, all I had to do was follow the instructions on the ntop DarwinPort page. It did take about 40 minutes to install all the required dependancies, but once installed I was in business. To run ntop, I had to issue the command 'sudo ntop -i en1' so that it would have the required privileges and would listen on the proper interface. Once it is running, just point your browser to 127.0.0.1:xxxx, where xxxx is the port you told it to display the results through. I use the -k switch to send it to another port, so I forget the default.
From this main window, you can view a whole host of info about the traffic running through the specified interface. My favorite views are Network Load Statistics and Info About . For Network Load Statistics, go to Summary -> Network Load. This view gives you graphs of aggregate traffic in the last 10 minutes, Hour, Day, and Month. It's a great way to monitor just how much traffic you are putting out onto the network. Info About can be accessed by going to IP -> Traffic Direction -> Local to Remote, then clicking on your IP address. If you scroll down to the bottom, it will give you a list of ports in use, along with the amount of traffic on each port and the service commonly associated with it. It's a great way to monitor if any unwanted services are running on your machine. If you use ntop's ability to listen to data forwarded from a port on a network switch (google for ntop user guides and you'll find more info on this; I've not used this feature), you can monitor all outbound traffic from your internal network to the internet. So, if you're running a business and want to monitor your network for filesharing programs, or identify what applications are using up the greatest amount of your bandwidth, ntop is the tool for you.
So, this is just a brief overview of ntop. Install it. Use it. Love it. It's great fun.




