Martin Scheu
@martin_scheu
Followers
189
Following
919
Media
11
Statuses
263
Husband, dad. ICS Security @switchcert. Austism Warrior for my Son https://t.co/koNbqK6Xcb
Switzerland
Joined May 2013
The call for presentations for the ntop Conference 2025 (Zürich, Switzerland, May 7-8) is now open. We are looking for speakers willing to share their experience with ntop tools, network observability/monitoring, cybersecurity, and DPI. All details at https://t.co/ikxDvr7oYh
0
2
11
Finally after 10 months of work, ntopng 6.2 is out
Say Hello to ntopng 6.2: Mitre Att&ck, -60% Memory Usage, Historical Flows Replay, Revamped UI, Remediations, Cloud https://t.co/jOqTEPZu8k
0
3
15
nDPI: Internals and Frequent Questions As many people asks me questions about nDPI I have written this post that addresses popular questions. https://t.co/d12OyVGoZ8
ntop.org
All ntop tools are based on nDPI but not every use is familiar with nDPI internals. We often receive questions about it, and it’s time to answer frequent questions. Q: How nDPI implements protocol...
0
4
8
"The cybersecurity reality we live in now is teenagers are running around in organized crime gangs with digital bazooka’s. They probably have a better asset inventory of your network than you, and they don’t have to wait 4 weeks for 38 people to approve a change request for
38
484
2K
ntopng 6.0 Webinar recording and presentation slides are now available https://t.co/sqldixVhRp
ntop.org
Last week we have released ntopng 6.0 that contains many new features and a redesigned user interface. Goal of this webinar is to walk through this new release and show a demo of all the major...
0
4
9
ICYMI, a great public guide for conducting a PoC for OT Security Monitoring products. https://t.co/zqEvGmqTda
0
4
9
25 Years of Open Source: ntopConf 2023 Videos and Slides are Now Available https://t.co/BQZzcf7vNa
ntop.org
The ntop conference and training 2023 was a success: more than 100 people attended it, some of them flying to Italy from other continents. This has been a special event as we have celebrated 25 years...
0
4
10
25 years of network monitoring: a short summary what the ntop team experienced during this time. And what to focus now and in the future. Congratulations and keep up with the amazing work! #opensource #networksecurity
How to Monitor What Matters https://t.co/jgB9985Ox5
0
0
4
and it has one ICS challenge ;-)
https://t.co/1XFEwBgq7P registration code pisa. Be quick it will end this afternon
0
0
1
If you have missed our webinar today, you can watch it here https://t.co/Vjguww5IEw as well find the presentation slides
ntop.org
Those who missed our June 2023 webinar can watch the webinar recording as well glance through the presentation slides.
0
2
3
If you have a lot of traffic to analyze with ntopng/nProbe, this can help you https://t.co/ojJuduAhjd
ntop.org
As traffic rate increases, it is important to tune packet processing in order to avoid drops and thus educe visibility. This post will show you a few tricks for improving the overall performance and...
0
6
11
If you are monitoring OT networks, you can now use ntopng to analyse Modbus traffic (in addition to IEC 60870-5-104). More protocols to come... https://t.co/plE9xL5qPV
ntop.org
Modbus is an industrial protocol used to communicate with automation devices. The initial protocol version was implemented over a serial layer, whereas the current version named ModbusTCP is a...
0
2
1
Actually ntopng is a "hidden champion" for OT network security monitoring: - Open Source - Minimal resource requirements (runs on a Raspberry Pi) - All in one : Monitoring / Alerting / Threat Hunting - for highly distributed networks nTap forwards monitored traffic to ntopng
OT, ICS, Scada: IEC 60870-5-104 in ntopng
0
1
3
Interesting write up which describes what a network flow is. If you are working with flow based information in ICS networks, it is maybe worth to check out your solution what it is doing with long lived flows. (flow over 24h)
How Flow-Based Traffic Classification Works
0
0
1
Webinar zu ICS Inventar mit runZero Am 21.04, 14h-15h stellt uns @chris_kirsch runZero vor und wir diskutieren über Möglichkeiten und Risiken in der aktiven Erstellung vom Inventar in ICS-Umgebungen. Der Vortrag ist auf Deutsch. Anmeldung unter:
0
1
2