Hi everyone,
Happy New Year 2021.
Its been a while since our last release but we are pleased to release a new version of Trisul Network Analytics. It includes a vast number of changes over these months.
Release HIghlights
- Major enhancements to Netflow screens and workflows
- High Availability mode enhancements
- New features for ISP applications AS, Prefix, Path analytics
- New flow compressor for compliance applications, IPv4 flow in only 11 bytes
Existing users of Trisul are encouraged to update to the latest version. Please sign up and go to the download page https://www.trisul.org/get-started/
We are no longer providing fresh packages for Ubuntu 16.04 LTS versions. Ubuntu users please update to Ubuntu 18.04. Due to the situation with the CentOS project we are continuing to stay on CentOS 7. We plan to provide packages for Ubuntu 20.04 shortly.
Full release notes below.
Trisul Probe 6.5.3020
Feature Highlights
- Major enhancements to Netflow to support ISP applications
- New High Availability features to allow probe to recover automatically from temporary network failures
- Hundreds of bugs and enhancements
Changelog
- Netflow Filter Interfaces Include / Exclude can be in human readable format
- PROBE: Filesystem type error in RING PCAP when running inside LXC
- HAMode: Replay messages during hubs downtime to provide fault tolerance of the network link
- HAMode: Test connection to primary node first and then start in PRI or HA Mode
- NETFLOW: Separate Upstream and Downstream FLOW_AS
- FILTERED Backend flow counters like number of connections can now support derived counters
- NETFLOW: Prefixes and AS split Upstream and Downstream based on AS list
- NETFLOW: Cross keys counter group description support
- PROBE : in offline mode squeeze any pending messages on lastflush
- LUA API : T. method to query domain config and get TRP endpoints
- PROBE: Active Connections and New Connections per Host not available for derived Counter Groups (internal hosts)
- PROBE: HomeAS in ISP environments customer can set a single AS (HomeAS) and also list of downstream AS instead of individual prefixes
- NETFLOW: TerminateFlow disabled when MergeHTTP/HTTPS/DNS are enabled because various short lived connections are merged
- LUAPI: new LUA API method to add sessionupdate + tag in single TMS
- LUAPI: onbegintopperflush .. return false to prevent calling into LUA for each individual topper item flush
- NETFLOW: Add Ethernet header bytes adjustment
- NETFLOW: default sampling rate 0.0.0.0, allows you to manually set a sampling rate for all devices (override)
- IPFIX: options template support problem
- PROBE: TCA Alert Report message unable to handle > 32Gbps threshold (32bit error)
- NETFLOW: add netflow.sampling_rate key attrib for router ; user can see samplingrate per router via key dashboard
- NETFLOW: IgnoreAllEgress option added , ignores all v9 Egress even if customer has enabled.
- NETFLOW: Auto reload configfile changes every 10 minutes without restarting the probe
- CROSSKEY: when you try to cross same counter group eg (interface x interface) P x P , then instead of four we need to see only two
- NETFLOW: Tag flows with direction
- FEAT: Keyset option to only count keysehts. not the full keyspace
- FILTER: Portrange error for filtered counter group not working in certain condition , when used with single ports
- PLATFORM: restore_mode add_feed should not replace .. and remove r
- NETFLOW: for ISP applications (for paid licenses only) Trisul can integrate with an online feed which automatically configures downstream AS numbers and AS Paths
- NETFLOW: read homeas from file downloaded by geo
- PKG: Add all analysis and sync scripts to hub and probe
- Many more changes
------------------------------------------------------------------------
Trisul-Hub 6.5.2902
Feature Highlights
- New flow compressor for high volume storage for compliance applications
- New command line tool for streaming flow queries
- Database analysis scripts for tuning
Changelog
- Use RE2 regex filter for counter group key/ inverse_key
- Real time stabber from hub3
- Check HA DOM before attach on start , otherwise it wont start in HA mode will hang
- PID of current program can prevent startup of router after reboot
- HA Switch : dont switch config0 node
- New tool to uncombine timeseries metrics into per-minute chunks
- New configuration backup tool to periodically backup using FTP, SFTP, copy
- Special database options to control individual indexes for flow storage
- Streaming query interface for flows
- NEW Compressor for FLOW lz4-ipv4-call-log-with-nat
- new index to query by interface ifindex_any , previously only if_in and if_out
- Man pages for all tools
- set key attribute in flushd now supported
- use key directly even when sending as label $
- KEY - leading $ sign in key and label importance
- Aggregate Flows support for router interfaces
- Keyset option to only count keysets. not the full keyspace
- If key to label mapping in persist database is corrupt, repair and handle
- DB analyzer tools show usage per-day and per-counter-group
WebTrisul 6.5.2275
Feature Highlights
- Completely reworked Netflow screens
- Export to PDF, XLSX, CSV added to most screens
- Major new BGP Peering, AS, and Path Analytics for ISP applications
- Filter topper items with a pattern
Changelog
- In Retro counters you can now type a string which is used as a filter to retrieve toppers
- Webtrisul : show description in popover for keys
- Autocomplete for comma separated list while entering list of keys etc
- Remove LDAP authentication check box from login page, it is now automatic
- Default SNMP settings added. This will be used when per-router SNMP is not specified
- Easy way to add a customer logo
- SNMP automatic resolver process added to cron, will run every night by default
- A new type of subscriber user created who can only export flows, used for compliance and LI
- Automatic login via a Token used can now integrate Web Trisul with an external SIEM or system
- Fixed many PDF reports in readymade reports
- Completely reworked interface drilldown page
- Added $ symbol to string if it is a key. If you add a $ sign to a key item in any chart it is not taken as a label
- Add a time selector that allows you to show any arbitrary time frame on live dashboards
- Aggregate flows enhancements
- Metrics can be combined into expressions on any chart to show +,-,/,%
- Hundreds of other UI fixes and enhancements
Trisul Apps
These are extensions you can install to enhance the capabilities of the Trisul platform.
- APP PEERING - use interface description.
- APP PEERINGDRILL: sankey and table
- APP SVG resolution , prefix report ISP, etc
PLUGINS
Geo 6.5.774
Feature Highlights
- Major new features for ISPs
- AS Path, Prefix, AS, metrics support
Changelog
- BGP and GEO query command line tool can lookup prefixes in bulk from a file
- BGP Summary - group number of routes by Peer-AS (trisul_bgpquery tool)
- Fix a trisul-geo crash due to LONG AS Path
- DIrectionalMOde option to support Transit ISP applications
- For transit ISP add automatic update from Trisul site for downstream AS and Paths
- New XML option to load downstream as rib paths
- SUpport for customer to integrate MaxMind license, disabled by default
- man pages for geo and bgpquery
- RPM/DEB updates keeps custom rules file it was previously overwritten
Badfellas 6.5.716
Changelog
- Remove obsolute QUANTCAST 1m badfellas
- RPM/DEB updates keeps custom rules file it was previously overwritten