Release date: 30 March, 2026
Version: 2.0.375
FastNetMon Advanced 2.0.375 delivers improvements to traffic visibility, flow tracking, and analytics, alongside expanded protocol parsing and ClickHouse enhancements. This release introduces deeper sFlow observability with new parsing success and error counters, PPP traffic extraction support, and improved MPLS handling across NetFlow v9, IPFIX, XDP, and AF_PACKET inputs. Flow tracking has been refactored and extended to cover non-TCP/UDP/ICMP traffic, enabling better anomaly detection, while GRE parsing has been enhanced with RFC 2890 support. ClickHouse analytics gain major updates, including per-protocol schemas, top ASN reporting, UDP top talker calculations, and new export options for pre-computed metrics. Additional updates improve configuration management and API capabilities, add ongoing attack status reporting via web callbacks, modernise fcli resources, and fix multiple operational issues, resulting in better stability, visibility, and operational control.
Full list of changes
- Added counter sflow_parse_success_nested_header to track successfully parsed packets
- Added detailed errors about sFlow parser, now each error code has separate counter
- Added option sflow_extract_ppp_traffic which can parse IPv4 traffic inside of PPP encapsulation
- Added logic to calculate top talkers by UDP protocol for Clickhouse
- Added Netflow v9 encoding of Bison router which uses types 85 and 86 to encoding number of packets and packets length
- Refactored flow tracking structure for IPv4 to pass it properly to handlers
- Added flow tracking for non tcp/udp/icmp traffic to track spikes in anomalies with other traffic
- Added logic to report all ongoing attacks to web endpoint using web_callback_attack_status_updates
- Extracted total counters to external module
- Extracted connection tracking logic to separate unit
- Added icmp_type and icmp_code to simple_packet and refactored simple packet print logic
- Fixed exit code for --configuration_check
- Added MPLS parser option for all types of traffic: netflow_v9_strip_mpls_tags, ipfix_strip_mpls_tags, xdp_strip_mpls_tags, af_packet_strip_mpls_tags
- Added support of GRE unpacking when key bit is set for EX switches mirroring
- Improved GRE parser to read fields which were added in RFC 2890
- Updated resource for fcli which was heavily outdated and caused issues for fields/main, fields/hostgroup and fields/bgp endpoints - new fields were missing
- Added flag web_api_legacy_path to control when we use legacy API
- Added log message about size of generated file by keep_traffic_counters_during_restart
- Reworked logic of import_configuration to remove existing collections and create full backup of them
- Added API endpoints -X PUT export_configuration/import_configuration/create_configuration and fixed bug in backup logic for create_configuration which did not backup collections users_configuration roles_configuration
- Fully implemented clickhouse_metrics_export_top_networks
- Potentially breaking: schema for total traffic tables in Clickhouse was unconditionally moved to new format which includes per protocol counters
- Potentially breaking: schema for network tables in Clickhouse was unconditionally moved to new format which includes per protocol counters
- Added schema for TOP ASN IPv4 and IPv6 counters
- Added full implementation of TOP ASN talker function for Clickhouse
- Fixed bug in sudo fcli show baseline_per_host which caused capture of one additional network which was outside of range
- Added per flow sorter to top hosts table
- Added clickhouse_metrics_export_top_asns option to pre-calculate top ASNs
