Hello Trisul users,
We just uploaded a new build of Trisul Network Analytics on http://trisul.org/download
This release addresses some performance issues faced by some of our users on heavily loaded networks. It also features some great UI updates like the ability to select a recent time window for all modules in a dashboard.
RELEASE NOTES
Trisul Probe
- Add Packet Drop Perf Stats to all input filters show on Trisul Perf Dashboard (AF_PACKET, PF_RING,LIBPCAP)
- HTTP File Extraction fix error with POST <body> and RESP <body>, lua was not filtering on POST <body>
- trisulctl_probe reports Huge time window in ring because it treats 0 as valid timestamp, fixed
- add /bin/df instead of just df
- Mem leak fix in HTTP File Reconstruction
Trisul Hub
- PERF: Rearchicted the ZMQ ROUTER/DEALER backend query dispatcher to use ROUTER/ROUTER load balancing
- Backend TRP query does not do Round Robin but selects the first free service thread
- Bugs - extra col in CAPTURE PROFILES for AF_PACKET FANOUT caused an error
- Over verbose Logging in QFlow suppressed
- PreDBF bug, if some DB leaf locked, Trisul-Hub was creating a new slice
- BIG Change !! TRP now load balances only to non-busy servers
- Trisul Archiver, if slice not ready to be archived then do not update META info
Web Trisul
- NGINX proxy change , use least_conn ; load balance with 4/5 server max_conn =1
- Update to latest version 1.11.6 of nginx
- NEW: Dashboard time selector. For any live dashboard you can now select a recent time interval
- NEW: When showing flows , alerts, resources, a PCAP Available flag is shown
- NEW: License info shown in Context > DB Status
- PERF: Alert Notification panel will update at max once per minute not on every page reload
Please update your builds to this version.
Thanks,
Trisul Team