Hello Trisul Users,
We are pleased to announce the release of Trisul Network Analytics 8.0.
Trisul 8.0 is a major release. It introduces Trisul AI, MITRE ATT&CK mapping for alerts, full IPv6 support for Home Networks, a higher-performance IPDR and CGNAT pipeline, and stronger access security in WebTrisul.
Existing users are encouraged to review the upgrade notes before upgrading from 7.0
New users: Please sign up and go to the download page: https://www.trisul.org/get-started/.
Top Highlights:
Trisul AI: an AI chat in WebTrisul that answers with charts and generates dashboards, which can be installed directly from the chat.
MITRE ATT&CK support across Probe, Hub and WebTrisul, including MITRE fields on alerts and an interactive ATT&CK matrix.
Email and SMS two-factor authentication, and audit logs viewable in the UI.
Full IPv6 support for Home Networks, with dedicated IPv6 host counter groups and IPv6 ASN lookup.
Geo (geo0) now operates as a first-class domain member, which simplifies distributed deployments.
Custom Key Monitor in WebTrisul can now generate and schedule reports in PDF and XLSX formats, and displays meters as columns.
RELEASE NOTES:
Trisul-Probe 8.0.3431
0106189: MITRE: Introduced MITRE ATT&CK support in the probe.
0106221: INTERFACE: Added a Receive Ratio metric to interfaces.
0106222: PROBE: Newly added meters are now handled automatically.
0106248: HOME NETWORKS: Added IPv6 support for Home Networks, built on a reworked hybrid lookup engine.
0106250: HOSTS: Introduced new IPv6 host meters and Internal/External IPv6 counter groups.
0106252: GEO: Added IPv6 ASN lookup.
0106254: LUA API: Added new methods for IPv6 Home Networks.
0106284: LUA: Enabled a single Lua script to attach to multiple counter groups.
0106290: IPDR: Added CGNAT support for port-range records in Cisco NetFlow.
0106316: NETFLOW: Added an option to use only the manually configured sampling rate.
0106317: NETFLOW: Added eight new meters to FlowGen.
0106318: PERFSTATS: Added generic meters for monitoring CGNAT processing.
0106336: NETFLOW: Introduced the key attribute netflow.feed_type, which identifies the NetFlow version each router exports.
0106355: PROBE: Introduced the on_rxring_max batch processing mode.
0106362: IPDR: Reduced memory consumption for IPDR processing.
0106370: NETFLOW: Added a syslog meter to FlowGen.
0106378: IPDR: Introduced a high-performance IPDR processing path with a redesigned session key and reduced memory use.
0106387: NETFLOW: Included the NAT tag in the IPDR flow key, improving accuracy for NAT devices such as A10.
0106419: SFLOW: Added the customer MAC address to IPDR records from sFlow.
0106455: trisulctl_probe: Starting and stopping a domain now also manages a co-located Geo instance, and the Geo certificate is installed automatically with the probe (0106454).
Trisul-Hub 8.0.3326
0106187: MITRE: Added three MITRE ATT&CK fields to the alert object.
0106189: MITRE: Introduced MITRE ATT&CK support in the hub.
0106250: HOSTS: Added support for the new IPv6 host meters and Internal/External IPv6 counter groups.
0106333: IPDR: IPDRCONTROL messages are no longer sent to the probe during bootstrap.
0106335: PLATFORM: Added an XML configuration option for empty element tags (<a/>).
0106338: POOL: Displayed the configured number of retention days.
0106363: IPDR: Enabled users to set the naming format for router IPs and devices.
0106420: IPDR: A zero MAC address no longer replaces the device ID in IPDR records.
0106428: GEO: Re-architected Geo so that geo0 operates as a first-class domain member.
0106433: DOMAIN: The Hub distributor script now disables probe0 automatically when a distributed domain is configured.
0106439: IPDR: Added NAT IP support to IPDR Bulk Query search
0106440: PLATFORM: Updated the trisul-hub systemd service to replace the deprecated KillMode=none setting.
0106444: IPDR: CSV exports now quote fields correctly when RADIUS provides full subscriber details such as address and phone number.
0106451: IPDR: Enabled extraction of NAT IPs from full AAA customer records.
0106462: DOMAIN: Extended the add_probe script to support Geo installation.
0106464: DOMAIN: Domain registration now returns the registered IP address and DomainService.
0106476: DOMAIN: Optimized the distributed domain management scripts.
ARCHIVER: Incorporated the Ring archiver enhancements from Trisul 7.0.
PLATFORM: Added packages for EL9 (RHEL and Oracle Linux 9)
PLATFORM: Renamed the SQLite shell utility to sqlite3_hub_shell.
WebTrisul 8.0.2624
0106191: MITRE: Introduced a MITRE ATT&CK matrix with search, along with a MITRE timeline view.
0106210: TRISUL AI: Introduced Trisul AI chat with chart output, powered by the Trisul AI CLI.
0106224: TRISUL AI: Added WebTrisul settings to connect to the Trisul AI API server.
0106225: AUDIT: Audit logs can now be viewed in the UI, with session IDs (0106488) and an authentication log summary page (0106489).
0106231: IPAM: Added IPAM configuration management and integrations.
0106236: SECURITY: Added two-factor authentication over Email and SMS.
0106241: NETFLOW: Added a Top 10 interfaces traffic chart for each router.
0106243: NETFLOW: Introduced Flow Map for visualizing flows.
0106256: APPS: Trisul apps and meta apps can now create their own menus (0106272).
0106366: IPDR AI: Extended IPDR AI to support commercial and locally hosted LLMs.
0106376: API: Added REST API endpoints for toppers, counter group information and timeslices.
0106432: IPDR: IPDR Customer Search now supports searching by a single IP address.
0106423: LUA: Added an editor to the Admin UI for the Lua configuration file.
0106441: DASHBOARDS: Dashboards can now be previewed from JSON before saving.
0106503: IPDR AI: Added OCR and support for more file types in AI Query uploads.
0106607: TRISUL AI: Introduced dashboard generation in Trisul AI, with in-chat installation, context-scoped queries and derived counter groups.
0106708: LUA: Lua scripts can now be loaded selectively into specific contexts.
0106741: IPDR: Changed the default IPDR compressor to lz4-ip-call-log-with-nat-ultra-mac.
0106746: NETFLOW: Introduced NetFlow IP Tracker to monitor expected flow exporters.
0106768: UI: Introduced a redesigned login page and navigation menu, with a light theme by default and an updated dark mode.
Thank you for using Trisul. Please share any questions or feedback in the forum.