Hi!
Have just setup FastNetMon (CE edition) and it seems to work.
FastNetMon 1.1.9 master git-bd0ca5bce1b3b886033779b9fd3ed49265962787 Try Advanced edition:
https://fastnetmon.comIPs ordered by: packets
Incoming traffic 108767 pps 70 mbps 78 flows
XXX.XXX.XXX.38 28758 pps 18 mbps 17 flows *banned*
XXX.XXX.XXX.36 28452 pps 18 mbps 14 flows *banned*
XXX.XXX.XXX.35 16944 pps 11 mbps 9 flows *banned*
XXX.XXX.XXX.41 12055 pps 7 mbps 5 flows
XXX.XXX.XXX.37 6688 pps 4 mbps 2 flows
XXX.XXX.XXX.40 4105 pps 2 mbps 1 flows
XXX.XXX.XXX.42 3374 pps 2 mbps 1 flows
Outgoing traffic 61205 pps 36 mbps 52 flows
XXX.XXX.XXX.38 16666 pps 9 mbps 10 flows *banned*
XXX.XXX.XXX.36 15535 pps 9 mbps 8 flows *banned*
XXX.XXX.XXX.35 9291 pps 5 mbps 4 flows *banned*
XXX.XXX.XXX.41 6668 pps 4 mbps 3 flows
XXX.XXX.XXX.37 4321 pps 2 mbps 0 flows
XXX.XXX.XXX.42 2643 pps 1 mbps 0 flows
XXX.XXX.XXX.40 2459 pps 1 mbps 0 flows
Internal traffic 0 pps 0 mbps
Other traffic 0 pps 0 mbps
Screen updated in: 0 sec 393 microseconds
Traffic calculated in: 0 sec 301 microseconds
Not processed packets: 0 pps
Ban list:
XXX.XXX.XXX.35/20365 pps incoming at 20_12_20_19:52:32
XXX.XXX.XXX.36/31575 pps incoming at 20_12_20_19:50:34
XXX.XXX.XXX.38/31492 pps incoming at 20_12_20_19:50:26
Except that bandwidth showing is not correct. All the IP-addresses shown are our CGNAT public IP-addresses.
Incoming traffic at 70 mbps corresponds to our upstream bandwidth usage
Outgoing traffic at 36 mbps does not correspond to anything. If its our downstream traffic, it should be 1300 mbps.
It looks to me like I have to adjust some thresholds, since some of the IP-addresses shows up as banned ?
I have configured sflow on our BGP edgerouter, the interface connected to our upstream providers router.
Any help is appreciated :-)
THX
Jens