# 使用 Homebrew, apk, Nix, apt, zypper 安装 ndpi

查看 ndpi 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:ndpi
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install ndpi
```

  证据: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add ndpi
```

  证据: Alpine Linux edge package indexes: ndpi from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#ndpi
```

  证据: nixpkgs package indexes: pkgs/by-name/nd/ndpi/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- Debian apt (92%):

```sh
sudo apt install libndpi-bin
```

  证据: Debian stable package indexes: libndpi-bin from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- zypper (92%):

```sh
sudo zypper install libndpi-devel
```

  证据: openSUSE Tumbleweed package metadata: libndpi-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:ndpi
- **软件包管理器:** Homebrew
- **版本:** 5.0
- **来源摘要:** Deep Packet Inspection (DPI) library
- **主页:** <https://www.ntop.org/products/deep-packet-inspection/ndpi/>
- **仓库:** <https://github.com/ntop/nDPI>
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- ndpiReader (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 5.0
## 项目历史与用法

nDPI is ntop's open source deep packet inspection library for classifying application-layer traffic, extracting selected metadata, analyzing encrypted traffic, and exposing APIs for traffic analysis.

### 项目历史

ntop describes nDPI as a maintained DPI toolkit released under LGPL, created to extend the original OpenDPI library with protocols that were otherwise available only in the paid OpenDPI version. The project was also modified for traffic-monitoring workloads by disabling features that slowed down the DPI engine without helping monitoring use cases.

The nDPI README cites the 2014 IWCMC paper `nDPI: Open-source high-speed deep packet inspection`, anchoring the project in academic and operational network-monitoring history. The GitHub API reports the ntop/nDPI repository was created on April 19, 2015.

### 采用历史

nDPI has the strongest adoption signal in this batch. ntop says it is used in ntop tools and third-party applications, including ntopng and nProbe Cento, to detect application protocols independently of ports. The official product page lists enterprise and ISP use cases such as traffic classification, content filtering, anomaly detection, QoS, bandwidth management, and IDS/IPS enrichment.

The repository had about 4.5k GitHub stars and 993 forks on July 1, 2026. Homebrew Formulae listed stable 5.0, 739 installs, and 142 installs-on-request in its 365-day analytics window on the same date.

### 使用方式

Developers embed the C library into probes, firewalls, monitoring agents, or security tools, then feed it packets or flows to classify protocols, risks, and metadata. The README also documents `ndpiReader`, build steps, test scripts, and the process for adding a new protocol dissector.

Operational users tend to encounter nDPI indirectly through ntopng, nProbe, nProbe Cento, Wireshark-related packaging, or distro packages such as Debian's libndpi-bin/libndpi-dev.

### 为什么软件包爱好者会关心

nDPI is package-significant because it is both a library and a CLI/tooling package. It sits at the boundary between observability, security, packet capture, and policy enforcement, and its protocol database needs continuing updates as applications move ports, encrypt traffic, or change signatures.

### 时间线

- {'date': '2014', 'event': 'The nDPI README cites the IWCMC paper on open-source high-speed deep packet inspection.'}
- {'date': '2015-04-19', 'event': 'ntop/nDPI repository creation date reported by the GitHub API.'}
- {'date': '2025-11-17', 'event': 'GitHub release listing showed nDPI 5.0 Stable as the latest release.'}
- {'date': '2026-07-01', 'event': 'Homebrew Formulae listed stable 5.0 and 739 installs in the 365-day analytics window.'}

### Related projects

- OpenDPI
- ntopng
- nProbe
- nProbe Cento
- PF_RING
- nfstream
- nDPId
- Wireshark

### 来源

- <https://api.github.com/repos/ntop/nDPI>
- <https://formulae.brew.sh/formula/ndpi>
- <https://github.com/ntop/nDPI>
- <https://packages.debian.org/unstable/libndpi-bin>
- <https://www.ntop.org/guides/nDPI/what_is_ndpi.html>
- <https://www.ntop.org/products/deep-packet-inspection/ndpi/>


## 安全说明

library-like package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- library-like package without higher-risk signals

## 其他软件包管理器记录

- Debian apt - libndpi-bin - 4.2-2.1+b3: normalized package name match | Debian stable package indexes: libndpi-bin from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | extensible deep packet inspection library - ndpiReader | http://www.ntop.org/products/ndpi/
- Debian apt - libndpi-dev - 4.2-2.1+b3: normalized package name match | Debian stable package indexes: libndpi-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | extensible deep packet inspection library - development files | http://www.ntop.org/products/ndpi/
- Debian apt - libndpi-wireshark - 4.2-2.1+b3: normalized package name match | Debian stable package indexes: libndpi-wireshark from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | extensible deep packet inspection library - wireshark dissector | http://www.ntop.org/products/ndpi/
- Debian apt - libndpi4.2t64 - 4.2-2.1+b3: normalized package name match | Debian stable package indexes: libndpi4.2t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | extensible deep packet inspection library - shared library | http://www.ntop.org/products/ndpi/
- Nix - ndpi: normalized package name match | nixpkgs package indexes: pkgs/by-name/nd/ndpi/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libndpi-bin - 4.2-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libndpi-bin from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | extensible deep packet inspection library - ndpiReader | http://www.ntop.org/products/ndpi/
- Ubuntu apt - libndpi-dev - 4.2-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libndpi-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | extensible deep packet inspection library - development files | http://www.ntop.org/products/ndpi/
- Ubuntu apt - libndpi-wireshark - 4.2-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libndpi-wireshark from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | extensible deep packet inspection library - wireshark dissector | http://www.ntop.org/products/ndpi/
- Ubuntu apt - libndpi4.2t64 - 4.2-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libndpi4.2t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | extensible deep packet inspection library - shared library | http://www.ntop.org/products/ndpi/
- apk - ndpi - 4.10-r0: normalized package name match | Alpine Linux edge package indexes: ndpi from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Open Source Deep Packet Inspection Software Toolkit | https://github.com/ntop/nDPI
- apk - ndpi-dev - 4.10-r0: normalized package name match | Alpine Linux edge package indexes: ndpi-dev from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Open Source Deep Packet Inspection Software Toolkit (development files) | https://github.com/ntop/nDPI
- zypper - libndpi-devel - 4.12-1.6: normalized package name match | openSUSE Tumbleweed package metadata: libndpi-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Development headers for nNDPI | https://github.com/ntop/nDPI
- zypper - libndpi4 - 4.12-1.6: normalized package name match | openSUSE Tumbleweed package metadata: libndpi4 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Extensible deep packet inspection library | https://github.com/ntop/nDPI
- zypper - ndpi-common - 4.12-1.6: normalized package name match | openSUSE Tumbleweed package metadata: ndpi-common from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Common files used by nDPI | https://github.com/ntop/nDPI
- zypper - ndpi-tools - 4.12-1.6: normalized package name match | openSUSE Tumbleweed package metadata: ndpi-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Tools for nNDPI | https://github.com/ntop/nDPI


## Combined YAML source

View the package source record on GitHub. [combined/ndpi.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ndpi.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph