Hi there people,
Happy New Year 2020. We have a great new Trisul release for you.
Release Highlight: High Availability and BGP analytics
This release is focused on scale and availability for helping our large enterprise deployments. The ISP specific analysis is designed to help ISP and IX operators. Everyone will find our new PCAP tools like trisul_flowcap (prune older PCAPs) and trisul_reencrypt (rekey trisul PCAPs) very useful.
RELEASE NOTES
TRISUL PROBE 6.5.2982
- FEATURE: High Availability (HA) 1 Probe can be dual homed to 2 Hubs
- FEATURE: High Availability (HA) Primary and Backup Trisul Domain Router in certificate
- FEATURE: Disaster Recovery (DR) support for enterprise deployment
- FEATURE: Pervasive BGP and Routing support, prefix analysis, path, path change,
- Netflow: Paloalto userid and appid support added
- Netflow: Paloalto use postNAT ip addresses
- BUGFIX: Egress Netflow-v9 in_bytes and out_bytes are they reversed
- Netflow: trisul_udpsink : PID file user etc (see man trisul_udpsink)
- BGP: Show BGP peer status in Web Admin (TRP probe support)
- CLI: trisulctl_probe CLI tool must check valid node - eg start context default@xyz
- Netflow: Periodically save template db printable in probe
- LUAAPI: Container ID fixed between runs, previously it was random
- FEATURE: PCAPS. New trisul_flowcap tool to cut flows (man trisul_flowcap)
- FEATURE: PCAPS. New trisul_reencrypt tool to change encryption passwords of PCAP files (man ..)
- BUGFIX: Removing feeds did not clean up directory
TRISUL-HUB: 6.5.2962
- FEATURE: High Availability (HA) Primary and Backup domain IPs
- FEATURE: Disaster Recovery (DR) Incremental Replication
- FEATURE: Trisul nodes switch to backup domain IP on PRI failure
- CLI: trisulctl_hub hello and list nodes shows HA details
- CLI: trisulctl_hub hello shows hostname
- CLI: trisulctl_hub HA manual switchover supported (ha switch command)
- TRP: UpdateKey added remove_all_attributes in TRP proto
- TRP: CounterGroupTopper does not return UserDescription, fixed
- HA: HA and DR systemd scripts packaged with trisul-hub
- BUG: trisul_cp_config VERY SLOW to start when large timewindow
- BUG: Rotate router and config logs reloc directory
- CLI: trisulctl_hub help for notify feed
WEBTRISUL : 6.5.2209
- FEATURE: Import a CSV file to assign labels to any counter group, export to CSV
- BUG: Retro dashboard schedule report accept selected probe parameter
- HA: HA show status in admin page
- FEATURE: Search by flow tag added to topper
- BUG: Malformed utf-8 invalid byte sequence error fixed on bad flowtag
- NETFLOW: Resolve router and interface name via management ip
- API: Update Key remove key attributes and refresh
- NETFLOW: Bugfix with SNMPv3 authNoPriv mode
- NETFLOW: Togger interface name/ alias button
- FEATURE: Show 95th Percentile on all charts
- FEATURE: Show Feed Data Update status on Admin page
- BUG: Session leak on login page (eg when load balancer keeps loading page)
- FEAT: Show BGP Peer status and few routes (IPv4 and IPv6)
- CHARTS: Chart anything module added help icon to explain expression(0104628)
- FEATURE: Import dashboard from JSON URL - easy to share dashboards
- CHARTS: SNMP LIVE chart router and interfaces v3 support added
- FLOWS: Export all IPv6 flows option
PLUGINS
- BUG: Badfellas segfault on IPv6 Netflow (ignore v6 netflow for geoip)
- FEAT: BGP systemd startup services to GEO
- GEO: Maxmind geolite2 update URL changed, now needs an API key from customer
- BADFELLA: New dumpbldb tool to export the badfellas THREAT INTEL database
- ALL: Feed update support sub feed with different update interval
Just head over to Trisul Download Page to get your latest packages
https://trisul.org
--
Team Trisul