wanderer/ fastnetmon-rewritten
1
0
Fork 0
mirror of https://github.com/pavel-odintsov/fastnetmon synced 2024-05-04 23:26:14 +02:00
Code Issues Releases Activity
mirror of the fastnetmon repo with rewritten history
3,301 Commits 2 Branches 19 Tags 50 MiB
C++ 89.3%
Perl 6.5%
CMake 1.9%
PHP 0.9%
Python 0.7%
Other 0.4%
Go to file
Pavel Odintsov d2b2eb76e5
Update SECURITY.md 		2023-03-11 12:52:49 +01:00
.circleci Added fix to address No head is defined for fastnetmon for macOS build 2023-03-07 13:15:51 +00:00
.github Improved issue template 2022-03-28 14:58:01 +01:00
docs/images Removed few documents which were moved to site long time ago 2022-08-31 12:13:06 +01:00
src Added timestamp for JSON export format 2023-03-10 22:41:18 +01:00
.gitignore Adjusted to new path for proto file 2023-03-01 12:36:56 +00:00
.gitmodules Juniper Implementation (#747) 2018-12-06 17:33:42 +00:00
LICENSE Fixed bunch of paths to old versions of FNM 2017-12-03 21:22:11 +00:00
README.md Added CI build status in dedocated section 2023-03-01 13:24:48 +00:00
SECURITY.md Update SECURITY.md 2023-03-11 12:52:49 +01:00
THANKS.md Added Rui Chen to Thanks file 2022-11-26 12:17:24 +00:00

README.md

logo

Community Edition

FastNetMon - A high performance DDoS detector / sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror).

What do we do?

We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event. These configurable actions include notifying you, calling script or making BGP announces.

Legal

FastNetMon is a product of FastNetMon LTD, UK. FastNetMon ® is a registered trademark in the UK and EU.

CI build status

CircleCI

Project

🌏️ Official site
⭐️ FastNetMon Advanced, Commercial Edition
🌟️ FastNetMon Advanced, free one month trial
📜️ FastNetMon Advanced and Community difference table
📘️ Detailed reference
🔏️ Privacy policy

Supported packet capture engines

  • NetFlow v5, v9, v9 Lite
  • IPFIX
  • sFlow v5
  • PCAP
  • AF_PACKET (recommended)
  • AF_XDP (XDP based capture)
  • Netmap (deprecated, stil supported only for FreeBSD)
  • PF_RING / PF_RING ZC (deprecated, available only for CentOS 6 in 1.2.0)

You can check out the comparison table for all available packet capture engines.

Official support groups:

Follow us at social media:

Complete integration with the following vendors

Features

  • Detects DoS/DDoS in as little as 1-2 seconds
  • Scales up to terabits on single server (sFlow, Netflow, IPFIX) or to 40G + in mirror mode
  • Trigger block/notify script if an IP exceeds defined thresholds for packets/bytes/flows per second
  • Complete support for most popular attack types
  • Thresholds can be configured per-subnet basis with the hostgroups feature
  • Email notifications about detected attack
  • Complete IPv6 support
  • Prometheus support: system metrics and total traffic counters
  • Flow and packet export to Kafka in JSON and Protobuf format
  • Announce blocked IPs via BGP to routers with ExaBGP or GoBGP (recommended)
  • Full integration with InfluxDB and Graphite
  • API
  • Redis integration
  • MongoDB integration
  • Prometheus support
  • VLAN untagging in mirror and sFlow modes
  • Capture attack fingerprints in PCAP format

Running FastNetMon

Hardware requirements

  • At least 1 GB of RAM

Installation

Router integration instructions

Screenshots

Main screen image

Example deployment scheme

Network diagramm

Upstream versions in different distributions

FastNetMon upstream distro packaging status