FastNetMon
FastNetMon is a very fast DDoS analyzer with sflow/netflow/mirror support.
FEATURES OPEN SOURCE Completely open and transparent development process.
FAST DETECTION Detects DDoS attack in 2 seconds
BGP SUPPORT Complete support for BGP v4 and BGP flow spec (RFC 5575). Tested compatibility with Cisco, Juniper, A10 Networks, Extreme, Brocade, Mikrotik. ANY PROTOCOL – NetFlow v5, v9 – IPFIX – sFLOW v4, v5 – Port mirror/SPAN