All Versions
Latest Version
Avg Release Cycle
262 days
Latest Release
840 days ago

Changelog History

  • v1.1.8 Changes

    December 06, 2020

    ๐Ÿ”„ Changes:

    • ๐Ÿ‘ Complete IPv6 support for mirror, Netflow and IPFIX modes
    • ๐Ÿ‘Œ Support for BGP communities for announces over GoBGP (recommended BGP daemon)
    • โฌ†๏ธ Mikrotik plug-in upgrade to support latest RouterOS auth methods
    • Switched to using own version of OpenSSL
    • โž• Added cap'n'p dependency for new traffic streaming logic
    • Switch to custom compiler (GCC 9.3) for all platforms
    • Switch to C++ 14
    • Switched to custom version of MongoC
    • โž• Added command line flag documentation for build / install scripts
    • ๐Ÿ”จ Significant code refactoring and modularisation
    • โž• Added logic to track return code from notify script calls
    • ๐Ÿ—„ Preparation to CentOS 6 support deprecation (EOL since November 30th, 2020)

    โฌ†๏ธ Installation / upgrade guide:

  • v1.1.7 Changes

    September 12, 2020

    ๐Ÿ”„ Changes:

    • ๐ŸŽ Completely new Netflow and IPFIX plugin which significantly improves performance, compatibility and security of protocol support
    • โž• Added support for sampled Netflow v9
    • ๐ŸŽ Completely new sFlow v5 plugin which significantly improves performance, compatibility and security of protocol support
    • ๐Ÿ“œ Completely new packet parser
    • ๐Ÿ—„ Deprecated sFlow v4
    • Switched to C++ 11 on all platforms
    • ๐Ÿ”ง Made option to read list of networks from OpenVZ configurable and disabled it by default

    โฌ†๏ธ Installation / upgrade guide:

  • v1.1.6 Changes

    June 24, 2020

    ๐Ÿ”„ Changes:

    • ๐Ÿ‘ Native GoBGP support for BGP v4 Unicast
    • ๐Ÿ‘ gRPC based API support
    • Command line client (fastnetmon_api_client) with options to block, unblock and list blocked hosts
    • 0๏ธโƒฃ Enabled flow counters by default due to popularity
    • ๐Ÿ‘ CentOS 8 / RHEL 8 support
    • ๐Ÿ‘ Ubuntu 20.04 support
    • โž• Added CircleCI support and automatic night builds for binary packages
    • ๐Ÿ‘ท Extracted build system from install script into
    • ๐Ÿง Binary packages (include GoBGP) for all leading Linux distributions
    • โž• Added support for artificial sampling rate in AF_PACKET mode
    • โž• Added option to control fanout mode in AF_PACKET
    • Implemented dynamic feature detection for atomics and AF_PACKET
    • Migration to C++ 11 capable compilers for all platform (CentOS 6 uses custom gcc 9.x compiler)
  • v1.1.5 Changes

    May 23, 2020

    ๐Ÿ”„ Changes:

    • โšก๏ธ Updated json-c library to support modern compilers
    • 0๏ธโƒฃ Disabled PF_RING by default, we suggest using AF_PACKET for mirror capture
    • ๐Ÿ‘ Disabled LUA Jit support due to very low demand
    • โž• Added support for multiple interfaces in AF_PACKET mode
    • ๐Ÿ›  Disabled fixed CPU allocation for AF_PACKET to improve scalability
    • ๐Ÿ›  Fixed bytes per second to mbits conversion to correct formula
    • โšก๏ธ Updated Netmap API headers from version 11 to 14
  • v1.1.4 Changes

    March 31, 2019

    ๐Ÿ”„ Changes:

    • ๐Ÿ‘Œ Improved compatibility with new version of nDPI
    • ๐Ÿ‘Œ Improved integration with A-10 Networks with plugin
    • ๐ŸŒฒ Suppressed excessive logging about missing IPFIX options
    • ๐Ÿ‘Œ Improved configuration file parser
    • โž• Added option to specify custom file path to log file
    • โž• Added txt extension for attack dumps
    • Switched Mikrotik integration code to well known Blackhole community number according to RFC7999
    • โž• Added support for Ubuntu 18.04
    • ๐Ÿ‘Œ Improved systemd unit to restart FastNetMon in case of crash
    • โž• Added notification about attacks in Mikrotik's global log file
    • ๐Ÿ›  Fixed bug for IPv6 traffic direction detection code
    • โž• Added Debian 9 support
    • โž• Added Ubuntu 16.04 support
    • โœ… Introduced option --use-modern-pf-ring to install latest PF_RING
    • โœ‚ Removed code which uses x86 only features to improve portability
    • FastNetMon will not not export empty metrics to Graphite
    • ๐Ÿ”Œ Introduced cmake option to disable Netmap plugin completely
    • โž• Added ifconfig to dependencies for CentOS 7
    • โž• Added support for Memory Model Aware Atomic Operations to improve portability
    • โž• Added support for OpenBSD
    • Disabled non-protable CPU affinity code for non-GNU libc platforms
    • โž• Added Juniper integration plugin
    • ๐Ÿ›  Fixed insecure permissions for /tmp/fastnetmon.dat
    • ๐Ÿ›  Fixed build process for json-c on systems with fresh gcc
  • v1.1.3 Changes

    July 04, 2016

    Hello, Dear customers!

    ๐Ÿš€ I'm happy to announce new stable FastNetMon release!

    We have a lot of changes here:

    • ๐Ÿ‘ Host groups support, custom thresholds for certain hosts: ca6112b
    • ๐Ÿ‘ AF_PACKET support: 96510ab
    • ๐Ÿ›  Fix descriptor leak in Graphite integration code: 1c79f81
    • โž• Add support for cropped packets produced by Juniper in cropped mirror mode: 8ec3fe8
    • Per protocol DDoS attack thresholds: 72e65b6
    • โž• Add support for multiple instances of FNM on same server: 3538ca9
    • โž• Add Redis support by default
    • โž• Add Sflow v4 support for old devices
    • ๐Ÿ‘ MongoDB support: ed13605
  • v1.1.2 Changes

    June 02, 2015

    ๐ŸŽ Performance optimization. Add debug tools for netflow and pcap. Fix compatibility issues with FreeBSD and Mac OS X. Add subnet which attacked IP belongs to.

    We have spent about 10 months for development of FastNetMon and could
    present huge feature list now! :)

    Stop! What is FastNetMon?

    It's really very fast toolkit which could find attacked host in your
    network and block it (or redirect to filtering appliance)

    This solution could save your network and your sleep :)

    ๐Ÿ‘€ Our site located here:

    ๐Ÿ‘ We support following engines for traffic capture:

    • Netflow (v5, v9 and IPFIX)
    • sFLOW v5
    • ๐Ÿ‘ port mirror/SPAN (PF_RING and netmap supported)

    Also we have deep integration with ExaBGP (huge thanks to Thomas
    Mangin) for triggering blackhole on the Core Router or upstream.

    ๐Ÿ‘ Since 1.0 version we have added support for following features:

    • Ability to detect most popular attack types: syn_flood, icmp_flood,
      udp_flood, ip_fragmentation_flood
    • โž• Add support for Netmap for Linux (we have prepared special driver
      ๐Ÿง for ixgbe users:
      and FreeBSD.
    • โž• Add support for PF_RING ZC (very fast but need license from ntop folks)
    • โž• Add ability to collect netflow v9/IPFIX data from multiple devices
      with different templates set
    • ๐Ÿ‘ Basic support for IPv6 (we could receive netflow data over IPv6)
    • โž• Add plugin support for capture engines
    • โž• Add support of L2TP decapsulation (important for DDoS attack
      detection inside tunnel)
    • โž• Add ability to store attack details in Redis
    • โž• Add Graphite/Grafana integration for traffic visualization
    • โž• Add systemd unit file
    • โž• Add ability to unblock host after some timeout
    • ๐Ÿ‘ Introduce support of moving average for all counters
    • โž• Add ExaBGP integration. We could announce attacked host with BGP to
      border router or uplink
    • โž• Add so much details in attack report
    • โž• Add ability to store attack fingerprint in file

    ๐Ÿ‘ We have complete support for following platforms:

    • Fedora 21
    • Debian 6, 7, 8
    • CentOS 6, 7
    • FreeBSD 9, 10, 11
    • DragonflyBSD 4
    • ๐ŸŽ MacOS X 10.10

    โœ… From network equipment side we have tested solution with:

    • Cisco ASR
    • Juniper MX
    • Extreme Summit
    • ๐Ÿง ipt_NETFLOW Linux

    ๐Ÿ“ฆ We have binary packages for this operation systems:

    For any other operation systems we recommend automatic installer
    ๐Ÿ‘€ script:

    Please join to our mail list or ask about anything here!forum/fastnetmon

    Known bugs:

  • v1.1.1 Changes

    March 23, 2015

    ๐Ÿง Stable Netmap, PF_RING, sFLOW, NetFlow and IPFIX support. Support for Linux, FreeBSD and Mac OS X.

  • v1.1.0 Changes

    March 23, 2015

    ๐Ÿ‘ Stable Netmap, PF_RING, sFLOW, NetFlow and IPFIX support.

  • v1.0.0 Changes

    June 21, 2014

    ๐Ÿš€ I recommends this release for production use