Today I would like to introduce you all to a very useful package that you can install on pfSense: ntopng. Formally known as ntop, ntopng allows you to Analyze the different traffic on each interface on your pfSense box.
This can be extremely valuable from a security perspective because not only can you see what is happening on your network. You can quite easily get an idea of what exactly your systems are doing. As well as get a sense of scale into how much traffic is being used for each service. With this I’ve discovered a few interesting things about some of the applications that I’m running (NTP requests the time far more often then I had originally thought.)
Installation of this package is simple enough as installing any other package on pfSense. Once it has finished, you can access the ntopng interface from the “Diagnostics” tab in pfSense. If you are interested in collecting network statistics from another network device, there are ntopng packages available for both Windows and Linux clients.