There's a nice site with a
table of equivalents for win to lin that mentions the following alternatives together with ntop (under the heading "protocols analysing, sniffing"):
Ethereal
tcpdump
Etherape
ipxdump. (+ipxparse for parsing)
Snort.
There's an even longer list for "network monitoring tools".