There are 2 repositories under ddos-monitor topic.
FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot
Distributed Denial of Service (DDoS) Monitor