# Netmon

> Netmon is a self-hosted network monitoring appliance: device discovery,
> availability and SNMP monitoring, Windows-agent monitoring, NetFlow/sFlow and
> deep-packet traffic analysis, syslog and Windows event log collection, IDS
> event ingestion, packet capture, alerting, and reporting — all on one
> appliance you run on your own network, managed from a browser. Licensing is
> per-appliance with no per-device or per-sensor counting.

Netmon also exposes a Model Context Protocol (MCP) server, so AI assistants
(Claude Desktop, Claude Code, ChatGPT, Codex and any MCP-capable client) can query
your monitoring directly:
the endpoint is `https://<your-netmon>/mcp` on the appliance itself, secured by
OAuth or personal access tokens, read-scoped, with nothing relayed through any
cloud. See the MCP Server page below for a public demo server and two worked
sessions.

The documentation links below point at plain-markdown versions of each page
(smaller and cleaner to parse); each file's header carries the canonical HTML
URL for citation.

## Documentation hub

- [Netmon Documentation](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-hub-documentation.txt): The home for every Netmon 7 guide — the product manual, the REST API reference, per-vendor device configuration, and the out-of-band OS upgrade walkthrough

## Product Guide

- [Netmon 7 Product Guide](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-netmon-7-user-guide.txt): An orientation to what Netmon does, a tour of the interface, and a map to every chapter of the Netmon 7 product documentation
- [Installation & First Sign-In](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-installation.txt): Placing the Netmon appliance on your network, signing in for the first time, activating it, and working through the first-day configuration checklist
- [Core Concepts](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-core-concepts.txt): The five ideas the rest of the guide assumes — devices, monitoring methods, tags, users and permissions, and the monitoring services
- [Dashboard & Overwatch](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-dashboards.txt): The two at-a-glance surfaces in Netmon 7 — the widget-composed Dashboard you build yourself and the auto-generated Overwatch fleet wall
- [Adding & Importing Devices](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-adding-devices.txt): How devices enter Netmon 7: discovery credentials and network ranges, the pending queue, and the manual Add Device wizard
- [Device Dashboards](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-device-dashboards.txt): Reading and tuning a single device: the picker, the cards, the switch view, and per-tracker configuration for OIDs, interfaces, disks, latency, and TCP ports
- [Visual Network Explorer](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-visual-network-explorer.txt): A live map of devices and conversations where line weight is traffic volume: rewind the time window, drill into a node, or switch to the ledger table
- [Logs & Events](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-logs-and-events.txt): Search syslog, Windows event logs, IDS events and NetFlow on one time axis, filter by device, tag or severity, and hide noise with exclusion filters
- [Alerting](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-alerting.txt): How Alert Triggers, Outlets, Routes and Exceptions fit together in Alert Manager, with additive routing to email, webhook, Slack, Teams or Discord
- [Reports & URL Trackers](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-reports-and-url-trackers.txt): Package Netmon's collected history into printable Reports, and watch the web endpoints your organization depends on with URL Trackers
- [Network Tools & Packet Capture](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-network-tools-and-capture.txt): Run ping, traceroute, MTR, SNMP walk, port scan and iPerf tests from the appliance, and capture filtered traffic as .pcapng or stream it into Wireshark
- [The Windows Agent](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-windows-agent.txt): Install the Netmon Windows Agent, enroll it by check-in, pre-issued token or minted adoption key, and collect services, processes, disks and event logs
- [API & Integrations](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-api-and-integrations.txt): Personal access tokens, browser sign-in for installed clients, and the PowerShell, Wireshark and MCP clients — gated by the API / MCP Access permission
- [AI Assistants (MCP)](https://netmon.com/wp-content/uploads/2026/09/netmon-docs-product-ai-assistants.txt): The appliance is an MCP server: what a connected assistant can see, what it can never do, the three guided playbooks, and how to connect Claude Desktop or any other MCP client
- [System Settings](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-system-settings.txt): Set the appliance's interfaces and sniffer ports, HTTPS certificate, SMTP, clock, hostname, users and LDAP sign-in, services and the browser terminal
- [Data Maintenance](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-data-maintenance.txt): Set database retention windows, prune the weekly syslog and event-log partitions, create and download backups, and keep the key a full restore needs
- [Software Updates & OS Upgrade](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-updates-and-os-upgrade.txt): A licensed appliance updates itself automatically, staged Windows agent installers reach hosts through the tray, and Debian 11 to 12 is operator-driven
- [Reference: Ports, Permissions & Alert Variables](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-product-reference.txt): The firewall ports the appliance uses inbound and out, the fourteen permission areas you assign to users, and the alert classes and their variables

## API Reference

- [Netmon 7 API Reference](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-api-reference.txt): Endpoint reference for the Netmon 7 REST API: base URL, the three bearer credential types, and an index of every resource, admin and reference section
- [Authentication & OAuth](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-authentication.txt): Authenticate to the Netmon 7 API with session tokens or personal access tokens, plus the OAuth device-code and PKCE flows, mcp: scopes and introspection
- [Conventions](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-conventions.txt): Request and response rules shared by every Netmon API endpoint: JSON bodies, response envelopes, the __encrypted__ sentinel, SSE streams and rate limits
- [Errors & Status Codes](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-errors.txt): Netmon API status codes from 400 to 503, the 400 vs 422 validation shapes, Retry-After on 429, and why a user permission is not an OAuth token scope
- [Devices](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-devices.txt): Every Netmon endpoint hanging off a device id: add and edit devices, tags, SNMP credentials, dashboards, pending-device import, ARP tables and Hyper-V VMs
- [Device Trackers](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-device-trackers.txt): CRUD endpoints for the per-device monitors Netmon polls: disks, interfaces, ICMP latency, custom SNMP OIDs, Windows services, TCP ports and protocol map
- [Agents](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-agents.txt): Query Windows hosts running the Netmon agent for processes, services and disk-usage trees, delete files, and mint the tokens that enroll new agents
- [NetFlow & VNE](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-netflow-vne.txt): Query the enriched flow feed behind the Visual Network Explorer — raw and aggregated NetFlow/sFlow/IPFIX records, plus per-user flow exclusion filters
- [Logs](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-logs.txt): Search the syslog, Windows event-log, and IDS (EVE) streams, manage per-user exclusion filters, and configure event-log trackers and per-device syslog intake
- [Alerting](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-alerting.txt): Netmon alerting endpoints: alerts and class schemas, email and webhook outlets, routing rules, templates, maintenance windows and the alert-history ledger
- [Reports](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-reports.txt): Netmon report endpoints for top talkers, per-protocol traffic, up/down availability, disk and interface trackers, device dossiers, and saved reports
- [URL Monitoring](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-url-monitoring.txt): API endpoints to create, list and delete website monitors, each polled on a fixed interval for latency, HTTP status, certificate expiry and a text pattern
- [Network Tools](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-network-tools.txt): On-box diagnostics over the API — ping, MTR, traceroute, SNMP walk, port scan, Ookla and iPerf throughput tests, and WHOIS/GeoIP lookups
- [Packet Capture](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-packet-capture.txt): Start a pcapng capture on a Netmon appliance over the API with a host/port/VLAN filter, poll it in chunks while it runs, then download the finished file
- [System Settings & Terminal](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-system-settings.txt): Appliance-level API: network interfaces, hostname and DNS, SMTP, licensing, HTTPS certificate, service control, backups and the browser terminal proxy
- [Data Maintenance](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-data-maintenance.txt): Read and manage the appliance database's retention policy, log-table partitions, and per-service daemon tuning values (dvars) over the API
- [Super-Admin](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-super-admin.txt): The most privileged API surfaces — LDAP/Active Directory integration, the out-of-band OS upgrade flow, and the OAuth client-approval queue
- [Users & Access](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-users-access.txt): Manage the appliance's local user accounts, their permissions, and per-user MFA, plus the two self-service reads every authenticated client needs
- [Permissions & Scopes](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-permissions-scopes.txt): The full permission catalogue, the permission-to-scope crosswalk, and the eight canonical OAuth scopes that gate the MCP tool surface
- [Complete Endpoint Index](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-api-endpoint-index.txt): Every endpoint documented in this guide, one row apiece, grouped by resource area, with its HTTP method, path, and required permission

## Device Configuration Guide

- [Network Device Configuration Guide](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-device-configuration-guide.txt): Per-vendor CLI steps for 14 platforms — Cisco, Juniper, Arista, Aruba, Fortinet and more — for sending SPAN traffic and NetFlow, IPFIX or sFlow to Netmon
- [Cisco IOS & IOS-XE](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-cisco-ios.txt): Cisco IOS and IOS-XE CLI for SPAN monitor sessions and Flexible or Traditional NetFlow export to Netmon on UDP 9996 — Catalyst switches, ISR/ASR routers
- [Cisco Nexus (NX-OS)](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-cisco-nexus.txt): Configure local SPAN, NetFlow v9, and sFlow on Cisco Nexus 9000 data-center switches running NX-OS 10.3(x) so Netmon receives mirrored traffic and flow records
- [Juniper Junos OS](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-juniper.txt): Junos CLI for analyzer port mirroring on EX/QFX switches and inline J-Flow export, NetFlow v9 or IPFIX, to UDP 9996 from MX routers and SRX firewalls
- [Arista EOS](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-arista.txt): Configure local SPAN mirroring and sFlow or IPFIX export on Arista switches running EOS so Netmon receives mirrored traffic and flow records
- [HPE Aruba ArubaOS-CX](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-aruba-cx.txt): Configure local mirror sessions and IPFIX flow export on HPE Aruba ArubaOS-CX (AOS-CX) 10.x switches so Netmon receives mirrored traffic and flow records
- [HPE Aruba ArubaOS-Switch (ProVision)](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-aruba-provision.txt): Configure port mirroring and sFlow v5 export on HPE Aruba ProVision switches (2530/2540/2930F/2930M) so Netmon receives mirrored traffic and flow records
- [Dell PowerSwitch OS10](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-dell.txt): Dell PowerSwitch and PowerEdge MX CLI on SmartFabric OS10: local monitor sessions for port mirroring, plus sFlow export to Netmon's collector on UDP 6343
- [Extreme EXOS / Switch Engine](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-extreme.txt): How to configure Extreme Networks ExtremeXOS / Switch Engine switches to mirror traffic (SPAN) and export sFlow to a Netmon appliance
- [Fortinet FortiGate (FortiOS)](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-fortigate.txt): How to configure FortiGate firewalls on FortiOS to mirror software-switch traffic and export NetFlow/IPFIX or sFlow data to a Netmon appliance
- [Fortinet FortiSwitch](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-fortiswitch.txt): How to configure FortiSwitch units on FortiSwitchOS to mirror traffic with SPAN and export sFlow data to a Netmon appliance
- [MikroTik RouterOS](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-mikrotik.txt): How to configure MikroTik RouterOS devices to mirror traffic via switch-chip port mirroring and export NetFlow/IPFIX Traffic Flow data to a Netmon appliance
- [Huawei VRP](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-huawei.txt): How to configure Huawei VRP-based switches and AR routers to mirror traffic and export NetStream (NetFlow) or sFlow data to a Netmon appliance
- [Palo Alto PAN-OS](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-palo-alto.txt): How to export NetFlow v9 telemetry from Palo Alto PAN-OS firewalls to a Netmon appliance, and why mirroring must be configured on the upstream switch
- [Ubiquiti UniFi / EdgeRouter / EdgeSwitch](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-ubiquiti.txt): How to configure UniFi and EdgeMAX (EdgeRouter/EdgeSwitch) devices to mirror traffic and export NetFlow/IPFIX flow data to a Netmon appliance
- [Receiving the Data in Netmon](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-device-config-receiving-data-in-netmon.txt): The Netmon side: switch a NIC to Sniffer mode for a SPAN feed and enable flow collection per device. Listeners are UDP 9996 and, for sFlow, UDP 6343

## System Upgrade Guide

- [System Upgrade Guide — Debian 11 to 12](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-system-upgrade-system-upgrade-guide.txt): Step through the out-of-band assistant that moves a Netmon appliance from Debian 11 to Debian 12: one-time token, two reboots, and an admin checkpoint

## How-to

- [How to Configure SNMP on Debian](https://netmon.com/wp-content/uploads/2026/08/netmon-docs-howto-how-to-configure-snmp-on-debian.txt): Install and configure the Net-SNMP agent on a Debian host — v1/v2c community strings or a v3 authPriv user — so Netmon can poll it

## Website

- [Netmon homepage](https://netmon.com/): Netmon homepage
- [Product overview](https://netmon.com/network-monitoring/): Product overview — what Netmon monitors and how
- [MCP server](https://netmon.com/mcp-server/): MCP server — 36 tools for Claude, ChatGPT, Codex and any MCP client, a public demo server that needs no account, and two worked sessions
- [Editions and pricing](https://netmon.com/pricing/): Editions and pricing
- [Support](https://netmon.com/support/): Support
- [Contact](https://netmon.com/contact-us/): Contact