Traffic analysis
When a link fills up, the next question is “who?”. BehMon collects flows from your routers and firewalls, keeps the trend, and turns unusual behaviour into alerts.
Flows arrive on one UDP port from any exporter, with v9/IPFIX templates and IPv6 endpoints.
Four detectors run over the same flow data; each raises an ordinary alert that resolves itself when the behaviour stops.
Device logs (RFC 5424 and BSD) and SNMP traps are stored and searchable in the same platform; linkDown/linkUp traps open and close interface alerts directly.
Every alert event can go to your SIEM as CEF over syslog, and alerts can be linked to your ticketing system.
Just point your router or firewall's NetFlow v5/v9 or IPFIX export at the BehMon server. No taps or port mirroring required.
Real-time monitoring of devices, links and services with ICMP, SNMP and synthetic checks — and alerting without the noise.
Learn moreDevice inventory, racks and cabling, automatic topology, IPAM and QR labels — documentation that always matches the real network.
Learn moreAutomatic config backups, version diffs, compliance rules and four-eyes approval for every change.
Learn moreAn assistant that answers from your network's live data — and runs on your own server, with no internet.
Learn moreRuns on your own servers, with MFA, LDAP and SSO, roles and permissions, full auditing, multi-tenancy and high availability.
Learn moreA page of their own for every customer or branch: services, uptime, planned maintenance, documents and requests — under your brand.
Learn moreA documented API with a compatibility promise, two ready SDKs (Python and TypeScript), and signed webhooks for every event.
Learn moreBook an online demo, or install the 30-day trial on your own server. Our engineers will be right there with you.
