Release Notes: nfacctd, the pmacct NetFlow collector, has been enhanced to support NAT L3/L4 fields (IPFIX field types 225, 226, 227, 228, 281, and 282), Cisco ASA NetFlow v9 NSEL (field types 40001, 40002, 40003, 40004 152, 153, and 323) and application classification (aligning to Cisco NBAR-NetFlow v9 integration). The NetFlow probe plugin, nfprobe, introduces egress IPv4/IPv6 NetFlow v9 templates. The BGP thread now supports IPv6 transport and mapping to sFlow/NetFlow agents; BGP peer information is linked into the status table for caching purposes, which results in good CPU savings on bigger deployments.
Release Notes: Custom-defined aggregation primitives for NetFlow v9/IPFIX protocols are introduced. Pervasive JSON output and a new RabbitMQ plugin have also been added. Support for Cisco ASA NSEL was re-introduced. The set of MPLS aggregation primitives was broadened to better support L3 MPLS VPNs to include mpls_label_top, mpls_label_bottom, mpls_stack_depth, and mpls_vpn_rd. The Print plugin, which writes traffic stats to flat files, now supports creation of intermediate directory levels and appending. Support for MongoDB was improved with indexing and authentication. This release also includes a number of bugfixes.
Release Notes: The pmacct tee plugin now features a tee_receivers configuration directive to allow multiple receivers to be defined. Receivers can be grouped for load-balancing and filtering purposes, and the set of receivers can be reloaded at runtime. A new set of primitives have been introduced to support CGN (Carrier Grade NAT) scenarios via Cisco NEL (NetFlow Event Logging). The BGP daemon now supports IPv6 NLRI and IPv6 BGP next-hop elements for rfc4364 BGP/MPLS Virtual Private Networks. MongoDB plugin scalability has improved. Several bugfixes are also included in this release.
Release Notes: This release integrates an IS-IS daemon that is being run as a parallel thread within the collector core process; the project opens to MongoDB, a leading noSQL document-oriented database, via a new 'mongodb' plugin. Support for GeoIP lookups is being introduced: geoip_ipv4 and geoip_ipv6 config directives now allow loading Maxmind IPv4/IPv6 GeoIP database files. New sampling_rate and etype traffic aggregation primitives are added to the set. Support for samples generated on ACL matches in Brocade is also introduced. Several bugfixes are also included in this release.
Release Notes: This release integrates an IS-IS daemon, which is being run as a parallel thread within the collector core process. It implements a single L2 P2P neighborship, i.e. over a GRE tunnel, P2P Hello, CSNP, and PSNP, and does not send any LSP information out. A new aggregation primitive 'etype' is introduced in order to support accounting against the EtherType field of Ethernet frames. Support for samples generated on ACL matches in Brocade (sFlow sample type: Enterprise: #1991, Format: #1) is now also introduced. Several bugfixes are also included in this release.
Release Notes: The BGP daemon now features an implementation of BGP/MPLS VPNs (rfc4364): it correlates <router IP, input/output interfaces ifIndex)> couples to Route Distinguisher (RD) values. The print plugin can now write network traffic data to flat-files (print_output_file) featuring formatted or CSV output, dynamic filenames, historical breakdown, and triggers. pmacctd now supports the DLT_LOOP link-type (i.e. OpenBSD tunnel interfaces). Several enhancements to the uacctd daemon and other minor new features and miscellaneous fixes are included.