DNS

BGP Flow Spec support / RFC 5575 have arrived to FastNetMon!

Hello, folks! We have added second killer feature! Since now we could block only attacker’s traffic to certain hosts in your subnet with awesome BGP Flow Spec. Yes! We do not block whole host! We only block attackers! We have full support for mitigation of most popular attack types: – DNS amplification (we drop all Read more about BGP Flow Spec support / RFC 5575 have arrived to FastNetMon![…]

DNS

DPI support have arrived for FastNetMon!

Hello, folks! We spend whole month for this feature and I would like to offer it here! Since now we could do Deep Packet Inspection for attack fingerprints! 🙂 Very big thanks to nDPI folks which could do nice platform for this task! So, instead of very less informative logs like: 2015-07-29 22:31:34.081626 188.40.35.183:80 > Read more about DPI support have arrived for FastNetMon![…]

host groups

New function in FastNetMon – per subnet thresholds!

Hello, my Lovely Community! Today I want to offer new awesome feature! Since now you could add any number of subnet groups and specify custom thresholds for they. Actually! We did it! Please add host groups to your configuration file /etc/fastnetmon.conf: # We could create group of hosts with non standard thresholds # You should Read more about New function in FastNetMon – per subnet thresholds![…]