4 ms·

https://github.com/pavel-odintsov/fastnetmon#readme https://github.com/pavel-odintsov/fastnetmon#readme "What can we do? We can detect hosts in our networks se

by rmoriz 9y ago

https://github.com/pavel-odintsov/fastnetmon#readme https://github.com/pavel-odintsov/fastnetmon#readme "What can we do? We can detect hosts in our networks sending or receiving large volumes of packets/bytes/flows per second. We can call an external script to notify you, switch off a server, or blackhole the client. … Why did we write this? Because we can't find any software for solving this problem in the open source world! What is a "flow" in FastNetMon terms? It's one or multiple UDP, TCP, or ICMP connections with unique src IP, dst IP, src port, dst port, and protocol."

jsmthrowaway 9y ago
That’s a flow in general, and isn’t specific to FastNetMon.
- aexaey 9y ago
  A flow is defined as a unidirectional sequence of packets with some common properties that pass through a network device. [...] for example, flow records include details such as IP addresses, packet and byte counts, timestamps, Type of Service (ToS), application ports, input and output interfaces, etc. From here: https://tools.ietf.org/html/rfc3954 https://tools.ietf.org/html/rfc3954