This repo will help you collect Netflow (version 1,5,6,7,9 and IPFIX) from network devices. It stores all the required information needed for further analysis in InfluxDB and visualize them using Grafna.
Currently we are using InfluxDB v2+ for stroring data. If You need older version, you can see this repository.
- Supports almost all Netflow versions: In order to decode Netflow we are using tehmaze go module. this module supports netflow version 1,5,6,7,9 & IPFIX.
- Container ready: Just run a simple shell script to prepare your environment & run the containerized netflow collector
- IP Reputation check: Check source & destination IPs for the reputation & potential threats.
- Currently we are using IPSum from this repo
- OpenIntelligence24.com will be available soon. this will be a community based intelligence for checking IP, domains, ... reputatition.
- Machine Learning models & techniques to find threats like DDoS attacks through packet meta data
- Get Geo Locations using IP2Location free lite database (IPv4 & IPv6)
- Fetch AS Numebr & Name if possible from IP
- Fetch Domain Name from IP if Possible (using PTR record)
- Define multiple data exporter:
- InfluxDB
- Splunk (CEF)
- Zabbix
