NetMon Freemium provides the same functionality as a full NetMon license, but with limits on processing, packet storage, and data forwarding. All other features and functionality are enabled and usable, including unstructured search, Deep Packet Analytics, packet capture, and more. In addition, NetMon Freemium is not a trial and does not expire after a set period.

FeatureNetMon Freemium LicenseNetMon Full License
Unstructured search across all network data
Deep Packet Analytics
Full packet capture & SmartCapture™
True application identification for 3,000+ applications
Continuous Search-Based Alerting
Data forwarding via SysLogDiagnostics and alarms
Data processing rateUp to 1 GbpsUp to 10 Gbps
Packet capture storage license1 GBUnlimited
Metadata indexing retentionUp to 3 daysUp to 30 days
SupportOnline only, via NetMon CommunityEnterprise-grade phone and chat support

NetMon Freemium Hardware Requirements

Production Installation

For best results, we recommend a dedicated system that meets the following requirements. Also, if you plan to convert to a fully licensed version of NetMon on this same system, it will need to meet these requirements.

System RequirementMinimum Production Installation
Free Disk SpaceOS Volume: 2 x 300-GB 10K RPM 6-Gbps SAS disks, RAID 1
Data Volume: 6 x 600-GB 10K RPM 6-Gbps SAS disks, RAID 10
MemoryRecommended: 64 GB RAM

Recommended: 2.4 GHz 10 Core Intel 2470 processor

Minimum: 2 GHz Dual-Core Intel Xeon-equivalent processor

Network Interface Controllers (NICs)

Recommended: 2 1-Gbps NICs + 2 10-Gbps NICs

Minimum: 4 1-Gbps NICs

Two NICs are used for NetMon’s management and recovery interfaces. The other two are used for TAP data. The data rate for your NICs will depend on your licensed capture rate.

(Optional) Direct Attached Storage (DAS) Configuration

Storage: 24 x 1.2-TB 10K RPM 6-Gbps SAS disks in RAID 5

Host controller: PERC H810 hardware RAID controller with 1 GB non-volatile cache

NetMon does not support SAN storage or using DM-multipath to extend storage volumes.

Evaluation Installation

NetMon Freemium can be configured to run on a smaller footprint by changing some configuration and performance settings, as described in the installation guide. The minimum platform we have tested is:

System RequirementMinimum Evaluation Installation
Free Disk Space60 GB

Recommended: 12 GB RAM

Minimum: 8 GB RAM


Recommended: 4 cores

Minimum: 2 cores

Network Interface Controllers (NICs)

Recommended: 2 1-Gbps NICs

Minimum: 1 1-Gbps NICs

Analyzing TAP data from an external source requires two NICs; with one NIC, you can only monitor network usage from your computer.

If you use a small footprint deployment, you will limit your data storage capacity. You will likely also impact uptime, as core services will need to be restarted when resource limits are reached. For more information, see Install NetMon Software.

Frequently Asked Questions

Where can I download NetMon Freemium?

NetMon Freemium is available for download on the NetMon Community. You will need to provide a valid email address, as the download link is sent via email.

How do I install NetMon Freemium?

You can install NetMon Freemium two ways: download the Freemium .zip file and extract the installer (.iso file) to mount on a VM, or download the iso.usb file and copy it to a USB stick to install on hardware.

Can I upgrade from NetMon Freemium to a licensed version?

If you have installed Freemium on a standard deployment platform, then upgrading to a full NetMon license is as simple as updating the license file. To get a license file, contact your LogRhythm sales person or email

How do I get support for NetMon Freemium?

Our Freemium product is supported through our NetMon Community discussion board at LogRhythm support staff and development engineers monitor the forums and respond on a best-effort basis. You will need to register to submit questions and read responses. For online self-help, view the NetMon section of the LogRhythm Documentation.

What if I need additional support?

Only our full NetMon license comes with additional support. If you need support for a Freemium installation above and beyond what can be obtained through the Community forum, please contact us at to discuss licensing.

Can I make suggestions to improve NetMon Freemium?

Suggestions are always welcome. Our NetMon Community discussion board ( is the place for feature requests, bug reports, and enhancement suggestions. The NetMon product team monitors this area and folds product ideas into our product planning.

Can I link NetMon Freemium to my existing LogRhythm SIEM environment?

Limited SIEM integration is available with Freemium. NetMon Freemium will send out alarms and diagnostic information to a configured Syslog receiver, such as the SIEM. You will need a commercial license for NetMon to send SmartFlow, NetMon’s rich-extracted Layer 7 metadata of all application sessions.

How often is Freemium updated?

All NetMon releases are posted simultaneously. For updates, check the NetMon resources section of the LogRhythm Community.