pavel-odintsov / fastnetmon

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
https://fastnetmon.com
GNU General Public License v2.0
3.43k stars 568 forks source link

Single documentation for complete fastnetmon setup? #813

Closed operations999 closed 4 years ago

operations999 commented 4 years ago

Hello, Is there single documentation available for complete fastnetmon setup with bgp flow , influxdb and grafana? I tried but some are outdated and some using docker , different OS. Thanks

pavel-odintsov commented 4 years ago

Hello!

I'm sorry but I do not think that we have any documentation of it. FastNetMon community is like lego. You may find and plug almost any stuff into it. For BGP you may consider it https://fastnetmon.com/docs/gobgp-integration/ and for InfluxDB you may just try https://fastnetmon.com/docs/influxdb_integration/

operations999 commented 4 years ago

Would be nice if someone can make a script to install fastnetmon, influx, grafana. :)

operations999 commented 4 years ago

I was evaluating and found fastnetmon is just impossible if compare with prtg or ntop free/community edition. Gave up and moved on to Ntop.org community looks much mature. Hopeful in future if its more mature and well documentation will try again.

pavel-odintsov commented 4 years ago

Hello!

I'm really sorry about your experience. FastNetMon is not replacement / competitor for ntop and ntop is not replacement for FastNetMon. We're focused on DDoS detection and that's single task we're trying to solve.

We have many community contributed guides and you can select one which your like more https://fastnetmon.com/video/ https://fastnetmon.com/presentation/ https://fastnetmon.com/publications/

operations999 commented 4 years ago

Hello, I checked videos , documentation and tutorials on google but its really complicated. Maybe you should consider making it user friendly so it can be adopted andr integrated to existing ecosystem of the companies. If there is maintained documentation then it will make life easier. I tried one week testing on different product to see which we can adopt. It took less than 1 hour for me to configure say sflow-rt, ntopng, prtg , librenms for network monitoring and they all works just fine. With fastnetmon it is complicated. Will come back here again in few months to see :)

pavel-odintsov commented 4 years ago

Hello!

Thank you for all details!

We are working hard to improve user experience and we will consider your feedback!

Have a great day!

On Fri, 29 May 2020 at 22:16, operations999 notifications@github.com wrote:

Hello, I checked videos , documentation and tutorials on google but its really complicated. Maybe you should consider making it user friendly so it can be adopted andr integrated to existing ecosystem of the companies. If there is maintained documentation then it will make life easier. I tried one week testing on different product to see which we can adopt. It took less than 1 hour for me to configure say sflow-rt, ntopng, prtg , librenms for network monitoring and they all works just fine. With fastnetmon it is complicated. Will come back here again in few months to see :)

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/pavel-odintsov/fastnetmon/issues/813#issuecomment-636195665, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAU56ZQRTT5M3BGKN73HGH3RUAQ2LANCNFSM4NMJB4UA .

-- Sincerely yours, Pavel Odintsov

pavel-odintsov commented 4 years ago

Would you mind checking our little bit updated configuration guide, please https://fastnetmon.com/install/? We're working hard to add binary packages for all top distros and we will have them for testing soon too.

operations999 commented 4 years ago

Hello, fantastic job.. effortless setup :) name-separator = "." but in my influx its

This string joins multiple matching 'measurement' values providing more control over the final measurement name.

separator = "."

Do you know how much memory it takes on VM? I added couple of /16 and fastnetmon failed to start because of memory and VM has 6g mem. Any idea how much mem fastnetmon need for say switch ports?

Thanks

pavel-odintsov commented 4 years ago

Thank you!

You can check this document about memory use: https://fastnetmon.com/docs/memory_consumption/ Single core of Intel Xeon can handle about ~1m of hosts.

I've fixed InfluxDB guide according to your feedback! Thank you!

operations999 commented 4 years ago

In grafana I am missing one part and when I checked graphite database I do not see network when I run measurements. I only see hosts. Any pointer?

pavel-odintsov commented 4 years ago

You need to enable per network counters in configuration: enable_subnet_counters = on

operations999 commented 4 years ago

Perfect! works fine.