Option to ignore traffic from some interfaces | Feature requests

Option to ignore traffic from some interfaces

complete

FastNetMon

In some configurations we may see same traffic more than once. We need some way to explicitly ignore traffic received from some ports / interfaces on switches.

September 5, 2020

FastNetMon

marked this post as

complete

FastNetMon

Hello!

We've added fields input_interfaces and output_interfaces for BGP Flow Spec filters https://fastnetmon.com/docs-fnm-advanced/fastnetmon-bgp-flow-spec-rfc-5575-json-representation/ and you can create excluding using section "Can I whitelist arbitrary traffic from FastNetMon?" from https://fastnetmon.com/docs-fnm-advanced/advanced-cli-reference/

Michael Rhode

Hello there,

I am also very much in favor of this. Most vendors do not allow to define different flow receiver for different interfaces. To have proper visibility in the network one needs to either sample in- and egress or on the BB links. This results in fastnetmon DDoS traffic values to be off multiple times. Akvorado (flow monitoring tool) uses snmp to classify interfaces (internal vs external based o interface description). Something like this would be really helpful. Thanks!