Hi All,
We released a new release of Trisul Network Analytics on Oct 31 2016.
Date:
Oct 31 2016
Version numbers :
Trisul Hub 6.0.2726
Trisul Probe 6.0.2726
Web Trisul 6.0.1934
Release Notes:
- Fixed: A crash in the IP Reassembly code
- Fixed: Too many <defunct> zombie processes created
- Fixed: Flow trackers are not displayed when accessing the UI from Retro Tools
- Fixed: Security - LUA plugins are not loaded until trisul drops root privileges
- Enh: Hub now slides to new stream slice at 00:00 instead of 00:01
- Fixed: Bug with archiver and cachebuild DB tools processing slices that were not ready
- Fixed: When EnableSSLRecordExtraction is set to TRUE, it prevents SSL certs from being extracted as Resources
- Fixed: File Extraction LUA. Handles 206 Partial Content correctly
- Fixed : DNS Resources hardening -fixed some crashes that afl-fuzz found for us
- Enh: Metronome guarantees that the backend onengineflush(..) lua triggered at 00 secs on minute
- LUA API : UpdateEngine(..) wasnt handling 64-bit counters correctly
- Misc: Many other smaller tweaks.
Big change
A completely enhanced Flow Stream DB at the backend to handle 100's of millions of flow per day. We did this enhancement for a large ISP customers of ours and have since decided to share it in the mainline Trisul builds.
- Re-structure the flow DB blobs
- Dramatically faster queries - sparse queries are about 50x faster, dense queries return 10x faster.
- The internal DB tuning parameters can now be optionally set in the config file.
- Configurable compression : lz4 - lz4-fast-5 or lz4-fast-10 using the 'acceleration factor' in the new lz4 algo
- Migration tool called tool_fswmigrate that brings all your contexts up to date
- DB Analysis and Profiling tool tool_dbprofiler (available only to Unlimted/large customers) or on request. Helps you tune the flows databases when your volume reaches about 500M-1B/day,
Please update to the latest version using the instructions in
http://trisul.org/download
Have fun.
PS : This is the new Flarum forum we are using now - please ask any questions here. You can sign in via Twiter/Google/ or create an account !