New Release 6.0.2733 Nov 9 2016 : more stability , AF_PACKET, and more

Hello Trisul Users,

This release addresses various stability issues our users have been facing with the prior releases.

RELEASE NOTES

New - AF_PACKET with FANOUT and TPACKET_V3 support, use mode = online_afpacket
New Default FTS is off for DNS
tpacket3 when number of packets in block is greatr then GrainSize dont drop entire block
RX_RING: TPACKET_V2 error - when packet are > Frame Len earlier releases would drop entire pkt
RX_RING: Some kernel are not TP_STATUS_COPY , check snaplen dont depend on TP_STATUS_COPY
Tweak to dynamic loading of SO plugins and LUA when running in offline mode, sometimes they prematurely unload
Suppress LOgging flood that can happen from TCP Reassembly Engine when out of order window is exceeded
MAC Counter group : Some keys were marked incorrectly leading to blank charts
Crash: Fixes in IP Reassembly due to fuzzer

FTS (Full Text Search) is now disabled by default.
FTS (if enabled) time budget slashed to 5 seconds
updated to SQLITE3 3.15.1 provides, some ops are much faster due to larger page size default
refactored various query paths that lock or block inserts stream
superior WEB UI experience due to fewer locks
added af-fanout group id to capture profiles
Migrations applied to all CONFIG DB on domain start
If there is some contention, stream will not stop but continue with WRITEs
layout creating an empty slice directory on startup
new fswmigrate handles errors and prevents locks

Please update the release and send all your questions to this new forum.

Thanks,

Trisul Team

UPDATE:

There is a minor update today as well that fixes the following problem.

CRASH - HTTP Host field overflow in some cases in Trisul Badfellas plugin can cause Trisul to segfault.

Impacted :

1. trisul-probe
2. trisul-badfellas

The new build tightens the entire plugin interface against this. If you are seeing unexplained or infrequent crashes please update to the new build

Trisul Team.