Andrisoft WANGUARD is an enterprise-grade traffic monitoring and DDoS detection and protection solution that delivers the functionality NOC, IT, and security teams need to effectively monitor and protect their network through a single, integrated package. WANGUARD Sensor relies on sFlow, NetFlow, IPFIX, or Port Mirroring / SPAN.
ipt-netflow is high performance NetFlow exporting module for Linux kernel (up to 3.x). It is designed for Linux router with heavy network load. This is netfilter/iptables module adding support for NETFLOW target. It is designed to work without conntrack. It supports NetFlow protocols versions 5, 9, and IPFIX. It has accounting for IPv4, IPv6 traffic, and (NEL) NAT translation events.
FastFwD is a small daemon that allows users to set up port forwarding from a source IP address and port number to a target IP address and port number easily without the need to deal with complicated ipchains/iptables-rules. FastFwD offers a fault-proof possibility for port forwarding between two networks or IP addresses and additionally gives the possibility to password-protect this connection. FastFwD has been tested for Linux and QNX and should compile and work with all POSIX-based systems.
A fail2ban lite. IPQ BDB is a netfilter userspace daemon that can block or mark IP packets according to iptables rules that issue the corresponding -j NFQUEUE, as well as a Berkeley database of bad IPv4 addresses. A log parser and a banning utility add entries to the database. An IP has to be caught a configurable number of times before being blocked. Transitions between blocked and non-blocked are faded using probabilities. A halving period governs IP rehabilitation.