This port's a bit unpolished yet (no rc script and could do with some README docs), but I thought I'd send it in case anyone would like to play.
"fastnetmon is a high-performance DoS/DDoS load analyzer with support for multiple packet capture engines (NetFlow, IPFIX, sFLOW, SnabbSwitch, netmap, PF_RING, PCAP). If it detects unusually high levels of pps, bps or flows-per-second to/from certain hosts, it can call an external script to notify you, disable a server or blackhole the client." Depends on log4cpp that was committed a couple of hours ago.
fastnetmon.tgz
Description: application/tar-gz
