diff --git a/pkgs/tools/networking/ntop/default.nix b/pkgs/tools/networking/ntop/default.nix
new file mode 100644
index 000000000000..945effabcfbd
--- /dev/null
+++ b/pkgs/tools/networking/ntop/default.nix
@@ -0,0 +1,29 @@
+{ stdenv, fetchurl, autoconf, automake, libtool, wget, libpcap, gdbm, zlib, openssl, rrdtool
+, python, geoip }:
+
+stdenv.mkDerivation rec {
+  name = "ntop-4.1.0";
+
+  src = fetchurl {
+    url = "mirror://sourceforge/ntop/${name}.tar.gz";
+    sha256 = "19440gnswnqwvkbzpay9hzmnfnhbyc2ifpl2jri8dhcyhxima7n7";
+  };
+
+  preConfigure = ''
+    ./autogen.sh
+    cp ${libtool}/share/aclocal/libtool.m4 libtool.m4.in
+  '';
+
+  buildNativeInputs = [ autoconf automake libtool wget libpcap gdbm zlib openssl rrdtool
+    python geoip ];
+
+  meta = {
+    description = "Traffic analysis with NetFlow and sFlow support";
+
+    license = "GLPv3+";
+
+    homepage = http://www.ntop.org/products/ntop/;
+
+    platforms = stdenv.lib.platforms.linux;
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 54988e0f90ca..1d77961c7864 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1109,6 +1109,8 @@ let
   # ntfsprogs are merged into ntfs-3g
   ntfsprogs = pkgs.ntfs3g;
 
+  ntop = callPackage ../tools/networking/ntop { };
+
   ntp = callPackage ../tools/networking/ntp { };
 
   nssmdns = callPackage ../tools/networking/nss-mdns { };