Feature requests

For many customers it's very challenging to maintain up to date list of prefixes in their networks. We can add SNMP crawler logic which is based on interface names to detect which direction is incoming and which one is outgoing.

Unfortunately due to issue in IPv6 address representation by function print_ipv6_address and very likely "Compress IPv6 address" logic we have crash: 2025-04-03 13:12:14,822 [DEBUG] Loading IPv6 network 0000::1/128 2025-04-03 13:12:14,822 [DEBUG] Parsed IPv6 network as: :0001/128 Certainly it should be "::0001/128".

According to customer's feedback current version of GoBGP has multiple missing features which are available in upstream version. In addition to this issue there is an information that some vulnerabilities in dependence were fixed.

We have option to ignore traffic for some specific interfaces https://features.fastnetmon.com/feature-requests/p/option-to-ignore-traffic-from-some-interfaces but for some cases is more reasonable to use inverted list. I.e. to allow only interfaces provided in list.

IPv6 support for BGP Flow spec mode

For example host 1.2.3.4 has reached threshold for blackhole and stays above for 5 minutes and only after that period of time / duration FastNetMon will declare it as an attack. It will help to reduce number of false positives caused by legitimate traffic.

Add custom flow spec actions and rate limit values per protocol type

We do not have logic to export per hostgroup attacks as we export per host attacks: https://fastnetmon.com/docs-fnm-advanced/fastnetmon-advanced-json-notify-script-in-python/