mirror of
https://github.com/pavel-odintsov/fastnetmon
synced 2024-11-26 13:14:31 +01:00
91 lines
4.3 KiB
HTML
91 lines
4.3 KiB
HTML
<!doctype html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta http-equiv="X-UA-Compatible" content="chrome=1">
|
|
<meta http-equiv="refresh" content="0;url=https://fastnetmon.com/" />
|
|
|
|
<title>FastNetMon DDoS detection tool</title>
|
|
|
|
<link rel="stylesheet" href="stylesheets/styles.css">
|
|
<link rel="stylesheet" href="stylesheets/pygment_trac.css">
|
|
<script src="javascripts/scale.fix.js"></script>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no">
|
|
|
|
<!--[if lt IE 9]>
|
|
<script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script>
|
|
<![endif]-->
|
|
</head>
|
|
<body>
|
|
<div class="wrapper">
|
|
<header>
|
|
<h1>Fastnetmon</h1>
|
|
<p>FastNetMon - very fast DDoS analyzer with sflow/netflow/mirror support</p>
|
|
<p class="view"><a href="https://github.com/pavel-odintsov/fastnetmon">View the Project on GitHub <small>pavel-odintsov/fastnetmon</small></a></p>
|
|
<ul>
|
|
<li><a href="https://github.com/pavel-odintsov/fastnetmon/zipball/master">Download <strong>ZIP File</strong></a></li>
|
|
<li><a href="https://github.com/pavel-odintsov/fastnetmon/tarball/master">Download <strong>TAR Ball</strong></a></li>
|
|
<li><a href="https://github.com/pavel-odintsov/fastnetmon">View On <strong>GitHub</strong></a></li>
|
|
</ul>
|
|
</header>
|
|
<section>
|
|
<h3>
|
|
<a id="welcome-to-fastnetmon-home-page" class="anchor" href="#welcome-to-fastnetmon-home-page" aria-hidden="true"><span class="octicon octicon-link"></span></a>Welcome to FastNetMon home page.</h3>
|
|
|
|
<p>FastNetMon - A high performance DoS/DDoS load analyzer built on top of multiple packet capture engines (NetFlow, IPFIX, sFLOW, netmap, PF_RING, PCAP).</p>
|
|
|
|
<h3>
|
|
<a id="simple-install" class="anchor" href="#simple-install" aria-hidden="true"><span class="octicon octicon-link"></span></a>Simple install</h3>
|
|
|
|
<p>For Debian 6, 7, 8 and CentOS 6 and 7 you should use the automatic installer:</p>
|
|
|
|
<div class="highlight highlight-bash"><pre>wget https://raw.githubusercontent.com/pavel-odintsov/fastnetmon/master/src/fastnetmon_install.pl -Ofastnetmon_install.pl
|
|
sudo perl fastnetmon_install.pl</pre></div>
|
|
|
|
<h3>
|
|
<a id="supported-packet-capture-engines" class="anchor" href="#supported-packet-capture-engines" aria-hidden="true"><span class="octicon octicon-link"></span></a>Supported packet capture engines:</h3>
|
|
|
|
<ul>
|
|
<li>NetFlow v5, v9</li>
|
|
<li>IPFIX</li>
|
|
<li>sFLOW v5</li>
|
|
<li>Port mirror/SPAN capture with PF_RING (with ZC/DNA mode support <a href="http://www.ntop.org/products/pf_ring/">need license</a>), NETMAP and PCAP</li>
|
|
</ul>
|
|
|
|
<h3>
|
|
<a id="features" class="anchor" href="#features" aria-hidden="true"><span class="octicon octicon-link"></span></a>Features</h3>
|
|
|
|
<ul>
|
|
<li>Can process incoming and outgoing traffic</li>
|
|
<li>Can trigger block script if certain IP loads network with a large amount of packets/bytes/flows per second</li>
|
|
<li>Could announce blocked IPs to BGP router with <a href="https://github.com/Exa-Networks/exabgp">ExaBGP</a>
|
|
</li>
|
|
<li>netmap support (open source; wire speed processing; only Intel hardware NICs or any hypervisor VM type)</li>
|
|
<li>Supports L2TP decapsulation, VLAN untagging and MPLS processing in mirror mode </li>
|
|
<li>Can work on server/soft-router</li>
|
|
<li>Can detect DoS/DDoS in 1-2 seconds</li>
|
|
<li>Tested up to 10GE with 5-6 Mpps on Intel i7 2600 with Intel Nic 82599</li>
|
|
<li>Complete plugin support</li>
|
|
<li>Have complete support for most popular attack types</li>
|
|
</ul>
|
|
</section>
|
|
</div>
|
|
<footer>
|
|
<p>Project maintained by <a href="https://github.com/pavel-odintsov">Pavel Odintsov</a></p>
|
|
<p>Hosted on GitHub Pages — Theme by <a href="https://github.com/orderedlist">orderedlist</a></p>
|
|
</footer>
|
|
<!--[if !IE]><script>fixScale(document);</script><![endif]-->
|
|
<script type="text/javascript">
|
|
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
|
|
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
|
|
</script>
|
|
<script type="text/javascript">
|
|
try {
|
|
var pageTracker = _gat._getTracker("UA-2844992-6");
|
|
pageTracker._trackPageview();
|
|
} catch(err) {}
|
|
</script>
|
|
|
|
</body>
|
|
</html>
|