2018-04-24 19:45:39 +00:00
![logo ](https://fastnetmon.com/wp-content/uploads/2018/01/cropped-new_logo_3var-e1515443553507-1-300x146.png )
Community Edition
2013-11-14 08:23:10 +00:00
===========
2022-11-17 12:29:25 +00:00
FastNetMon - A high performance DDoS detector / sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror).
2015-03-10 22:38:10 +00:00
2018-03-01 19:33:13 +00:00
What do we do?
--------------
2022-11-17 12:29:25 +00:00
We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and
perform a configurable action to handle that event. These configurable actions include notifying you, calling script or making BGP announces.
2015-06-15 09:59:12 +00:00
2015-10-06 15:37:27 +00:00
Project
-------
2022-12-01 10:41:53 +00:00
🌏️ [Official site ](https://fastnetmon.com )
2022-12-01 10:53:01 +00:00
⭐️ [FastNetMon Advanced, Commercial Edition ](https://fastnetmon.com/product-overview/ )
2022-12-01 10:41:53 +00:00
🌟️ [FastNetMon Advanced, free one month trial ](https://fastnetmon.com/trial/ )
📜️ [FastNetMon Advanced and Community difference table ](https://fastnetmon.com/compare-community-and-advanced/ )
📘️ [Detailed reference ](https://translate.google.com/translate?sl=auto&tl=en&u=https%3A%2F%2Ffastnetmon.com%2Fwp-content%2Fuploads%2F2017%2F07%2FFastNetMon_Reference_Russian.pdf )
🔏️ [Privacy policy ](https://fastnetmon.com/privacy-policy/ )
2018-10-06 12:18:42 +00:00
2023-04-11 20:52:06 +00:00
### Installation
- Linux (Debian, CentOS, RHEL, Ubuntu), [install instructions ](https://fastnetmon.com/install/ )
- [VyOS ](https://fastnetmon.com/fastnetmon-community-on-vyos-rolling-1-3/ )
- FreeBSD: [official port ](https://www.freshports.org/net-mgmt/fastnetmon/ ).
2015-10-06 15:37:27 +00:00
Supported packet capture engines
--------------------------------
2022-10-02 20:41:13 +00:00
- NetFlow v5, v9, v9 Lite
2015-03-23 10:39:08 +00:00
- IPFIX
2022-02-26 20:12:06 +00:00
- ![sFlow ](http://sflow.org/images/sflowlogo.gif ) v5
2019-07-11 20:00:33 +00:00
- PCAP
2022-04-19 11:14:21 +00:00
- AF_PACKET (recommended)
2022-12-01 10:53:01 +00:00
- AF_XDP (XDP based capture)
2022-11-17 12:29:25 +00:00
- Netmap (deprecated, stil supported only for FreeBSD)
2022-04-23 14:01:26 +00:00
- PF_RING / PF_RING ZC (deprecated, available only for CentOS 6 in 1.2.0)
2015-03-23 10:37:29 +00:00
2017-12-03 12:21:04 +00:00
You can check out the [comparison table ](https://fastnetmon.com/docs/capture_backends/ ) for all available packet capture engines.
2015-04-28 19:39:08 +00:00
2022-02-10 13:38:13 +00:00
Official support groups:
-------
2022-10-20 14:39:17 +00:00
- [Mailing list ](https://groups.google.com/g/fastnetmon )
2022-10-20 14:38:11 +00:00
- [Slack ](https://slack.fastnetmon.com )
2022-04-27 13:34:23 +00:00
- IRC: #fastnetmon at irc.libera.chat:6697 (TLS) [web client ](https://web.libera.chat/?channels=#fastnetmon )
2022-02-10 13:38:13 +00:00
- Telegram: [fastnetmon ](https://t.me/fastnetmon )
2022-10-20 14:38:11 +00:00
- Discord: [fastnetmon ](https://discord.fastnetmon.com )
2022-02-10 13:38:13 +00:00
Follow us at social media:
-------
- [Twitter ](https://twitter.com/fastnetmon )
- [LinkedIn ](https://www.linkedin.com/company/fastnetmon/ )
- [Facebook ](https://www.facebook.com/fastnetmon/ )
2015-10-06 15:37:27 +00:00
Features
--------
2022-02-10 13:38:13 +00:00
- Detects DoS/DDoS in as little as 1-2 seconds
- Scales up to terabits on single server (sFlow, Netflow, IPFIX) or to 40G + in mirror mode
2016-05-25 14:46:50 +00:00
- Trigger block/notify script if an IP exceeds defined thresholds for packets/bytes/flows per second
2022-02-10 13:38:13 +00:00
- [Complete support ](https://fastnetmon.com/docs/detected_attack_types/ ) for most popular attack types
- Thresholds can be configured per-subnet basis with the hostgroups feature
2022-02-10 13:38:13 +00:00
- [Email notifications ](https://fastnetmon.com/docs/attack_report_example/ ) about detected attack
2022-08-08 15:43:06 +00:00
- Complete IPv6 support
2023-02-11 18:08:48 +00:00
- Prometheus support: system metrics and total traffic counters
2023-02-12 21:17:05 +00:00
- Flow and packet export to Kafka in JSON and Protobuf format
2022-08-08 15:43:06 +00:00
- Announce blocked IPs via BGP to routers with [ExaBGP ](https://fastnetmon.com/docs/exabgp_integration/ ) or [GoBGP ](https://fastnetmon.com/docs/gobgp-integration/ ) (recommended)
2022-11-17 12:29:25 +00:00
- Full integration with [InfluxDB ](https://fastnetmon.com/docs/influxdb_integration/ ) and [Graphite ](https://fastnetmon.com/docs/graphite_integration/ )
2022-02-10 13:38:13 +00:00
- [API ](https://fastnetmon.com/docs/fastnetmon-community-api/ )
2017-12-03 13:08:51 +00:00
- [Redis ](https://fastnetmon.com/docs/redis/ ) integration
2023-03-27 17:54:20 +00:00
- MongoDB protocol support compatible with native [MongoDB ](https://fastnetmon.com/docs/mongodb/ ) and [FerretDB ](https://github.com/FerretDB/FerretDB )
2022-11-17 12:29:25 +00:00
- VLAN untagging in mirror and sFlow modes
2018-03-01 19:33:13 +00:00
- Capture attack fingerprints in PCAP format
2014-11-22 13:17:26 +00:00
2015-10-06 15:37:27 +00:00
### Router integration instructions
2017-12-03 13:11:26 +00:00
- [Juniper MX Routers ](https://fastnetmon.com/docs/junos_integration/ )
2015-07-22 20:07:33 +00:00
2023-04-11 20:52:06 +00:00
Complete integration with the following vendors
--------------------------------
- [Juniper integration ](src/juniper_plugin )
- [A10 Networks Thunder TPS Appliance integration ](src/a10_plugin )
- [MikroTik RouterOS ](src/mikrotik_plugin )
2015-10-06 15:37:27 +00:00
2018-03-01 19:33:13 +00:00
Screenshots
2015-10-06 15:37:27 +00:00
------------
2023-03-11 11:57:58 +00:00
Command line interface
2015-03-22 10:45:52 +00:00
![Main screen image ](docs/images/fastnetmon_screen.png )
2014-06-08 10:29:37 +00:00
2023-03-11 11:57:58 +00:00
------------
Standard Grafana dashboard
![Grafana total traffic ](docs/images/grafana_total.png )
2022-02-10 13:38:13 +00:00
Example deployment scheme
2022-02-10 13:38:13 +00:00
--------------
2014-12-02 13:42:40 +00:00
2022-02-10 13:38:13 +00:00
![Network diagramm ](docs/images/deploy.png )
2022-11-26 12:45:35 +00:00
2023-04-11 20:53:19 +00:00
Legal
--------------
FastNetMon is a product of FastNetMon LTD, UK. FastNetMon ® is a registered trademark in the UK and EU.
CI build status
--------------
[![CircleCI ](https://circleci.com/gh/pavel-odintsov/fastnetmon/tree/master.svg?style=svg )](https://circleci.com/gh/pavel-odintsov/fastnetmon/tree/master)
2022-11-26 12:45:35 +00:00
Upstream versions in different distributions
--------------
[![FastNetMon upstream distro packaging status ](https://repology.org/badge/vertical-allrepos/fastnetmon.svg )](https://repology.org/project/fastnetmon/versions)