FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support - View it on GitHub