Giter Site home page Giter Site logo

fwu313 / fastnetmon Goto Github PK

View Code? Open in Web Editor NEW

This project forked from pavel-odintsov/fastnetmon

0.0 0.0 0.0 31.21 MB

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Home Page: https://fastnetmon.com

License: GNU General Public License v2.0

Shell 0.45% Ruby 0.11% C++ 91.11% Python 0.91% Perl 4.51% PHP 1.05% Makefile 0.06% Cap'n Proto 0.05% CMake 1.68% Dockerfile 0.02% Roff 0.06%

fastnetmon's Introduction

logo

Community Edition

FastNetMon - A high performance DDoS detector / sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror).

What do we do?

We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event. These configurable actions include notifying you, calling script or making BGP announces.

Flow is one or more ICMP, UDP, or TCP packets which can be identified via their unique src IP, dst IP, src port, dst port, and protocol fields.

CircleCI

Project

๐ŸŒ๏ธ Official site
โญ๏ธ FastNetMon Advanced, Commercial Edition
๐ŸŒŸ๏ธ FastNetMon Advanced, free one month trial
๐Ÿ“œ๏ธ FastNetMon Advanced and Community difference table
๐Ÿ“˜๏ธ Detailed reference
๐Ÿ”๏ธ Privacy policy

Supported packet capture engines

  • NetFlow v5, v9, v9 Lite
  • IPFIX
  • sFlow v5
  • PCAP
  • AF_PACKET (recommended)
  • AF_XDP (XDP based capture)
  • Netmap (deprecated, stil supported only for FreeBSD)
  • PF_RING / PF_RING ZC (deprecated, available only for CentOS 6 in 1.2.0)

You can check out the comparison table for all available packet capture engines.

Official support groups:

Follow us at social media:

Complete integration with the following vendors

Features

  • Detects DoS/DDoS in as little as 1-2 seconds
  • Scales up to terabits on single server (sFlow, Netflow, IPFIX) or to 40G + in mirror mode
  • Trigger block/notify script if an IP exceeds defined thresholds for packets/bytes/flows per second
  • Complete support for most popular attack types
  • Thresholds can be configured per-subnet basis with the hostgroups feature
  • Email notifications about detected attack
  • Complete IPv6 support
  • Announce blocked IPs via BGP to routers with ExaBGP or GoBGP (recommended)
  • Full integration with InfluxDB and Graphite
  • API
  • Redis integration
  • MongoDB integration
  • VLAN untagging in mirror and sFlow modes
  • Capture attack fingerprints in PCAP format

Running FastNetMon

Hardware requirements

  • At least 1 GB of RAM

Installation

Router integration instructions

Screenshots

Main screen image

Example deployment scheme

Network diagramm

Upstream versions in different distributions

FastNetMon upstream distro packaging status

fastnetmon's People

Contributors

adzhurinskij avatar amdmi3 avatar amit177 avatar anito23 avatar bdrung avatar bolt1777 avatar chenrui333 avatar damiankam avatar dmayan avatar dotie avatar elmaxid avatar ericchou1 avatar henry-spanka avatar jasperla avatar kaniini avatar lukego avatar markhprice avatar nbryansky avatar nerosketch avatar nrshrivatsan avatar pavel-odintsov avatar richgroves avatar robertoberto avatar rolexcolocat avatar tbaschak avatar trodery avatar tvberlin avatar yshow avatar zenvdeluca avatar zerxxxes avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.