FlowMon Probe
FlowMon Probe is a passive network monitoring device based on the COMBO6 and COMBO6X technology. It is able to collect statistics about IP flows and export them in real time to external collectors. Currently supported export formats are versions 5 and 9 of Cisco NetFlow and IPFIX. The Probe is remotly configurable using web or terminal interface.
We have developed and tested this device together with other partners in the JRA2 activity of the GN2 project.
For more information see TNC 2007 and TNC 2008 posters and presentation from GN2 Security Toolset Training.
Current status
- 04/2009 - Development of the FlowMon Probe was finished and we are working on the Flexible FlowMon Probe project.
- 04/2009 - flowmon-1.5.0 package released
- 04/2008 - flowmon-1.4.0 package released
- 12/2007 - flowmon-1.3.0 package released
- 06/2007 - Redesign of old firmware architecture just started
- 06/2007 - flowmon-1.2.0 package released
- 05/2007 - New design using XFP card tested on 10GE network
- 05/2007 - New design using SDRAM memory (256K of flowrecords)
- 11/2006 - Process two GE network interfaces at wire speed.
- 08/2006 - NetFlow phase 1 is stable and closed. Only bug fixing will be supported.
