All Versions
27
Latest Version
Avg Release Cycle
53 days
Latest Release
1440 days ago

Changelog History
Page 2

  • v3.3.0 Changes

    September 16, 2018

    πŸš€ v3.3.0 is a minor release. No migration of data from v3.0.x or later to v3.3.0 is required.

    πŸš€ This release includes the following changes:

    πŸ†• New Features

    • Sample interval can be manually set if not sent by the device.
    • DNS resolution of IP addresses can be enabled for only exporters, endpoints or both.
    • πŸ“„ Split docs into README.md and INSTALL.md.
    • βœ‚ Removed sflow.size_header.

    ⚑️ Updates

    • ⚑️ Updated GeoLite2-City and GeoLite2-ASN DBs
    • ⚑️ Updated IP Reputation dictionary
    • βž• Added field 99 to netflow.yml definitions
  • v3.2.3 Changes

    September 01, 2018

    πŸš€ v3.2.3 is a maintenance release. No migration of data from v3.0.x or later to v3.2.3 is required.

    πŸš€ This release includes the following changes:

    πŸ†• New Features

    • πŸ‘Œ Support for Kibana 6.4.
    • πŸ‘Œ Support for additional sFlow fields, including TCP Flags.
    • βž• Added an IP reputation whitelist dictionary.
    • βž• Added a CHANGELOG.md which documents all changes since v1.0.0.

    πŸ›  Fixes

    • Minor dashboard tweaks.
    • πŸ›  Fixed document/index name version inconsistency.

    ⚑️ Updates

    • ⚑️ Updated GeoLite2-ASN DB
    • ⚑️ Updated service name dictionary.
    • ⚑️ Updated IP Reputation dictionary.
  • v3.2.2 Changes

    August 22, 2018

    πŸš€ v3.2.2 is a maintenance release. No migration of data from v3.0.x or later to v3.2.2 is required.

    πŸš€ This release includes the following changes:

    πŸ›  Fixes

    Minor changes to README.md.

    ⚑️ Updates

    βž• Added additional Riverbed fields to netflow.yml.
    ⚑️ Updated GeoLite2-ASN DB
    ⚑️ Updated GeoLite2-City DB
    ⚑️ Updated IP Reputation Dictionary

  • v3.2.1 Changes

    July 26, 2018

    πŸš€ v3.2.1 is a minor release. No migration of data from v3.0.x or later to v3.2.1 is required.

    πŸ›  Fixes

    • Well v3.2.0 was short lived! Found a bug related to the enrichment of Riverbed port numbers that I wanted to fix quickly.

  • v3.2.0 Changes

    July 26, 2018

    πŸš€ v3.2.0 is a minor release. No migration of data from v3.0.x or v3.1.0 to v3.2.0 is required.

    πŸ†• New Features

    • βž• Add a multi-server output option.
    • βž• Add support for RiverBed WAN Optimizers using a custom Netflow field definitions file.
    • Consider SYN-only TCP Flags when determining client/server.
    • Provide the option to lookup interface names from a YAML dictionary.
    • βž• Add the ability to set the UDP receive buffer via an environment variable.

    ⚑️ Updates

    • Cleanup of NBAR2 application IDs.
    • ⚑️ Update GeoIP DBs.
    • ⚑️ Update ASN DB.

  • v3.1.0 Changes

    πŸš€ v3.1.0 is a minor release. No migration of data from v3.0.x to v3.1.0 is required.

    πŸ†• New Features

    • βž• Added country_code related fields.
    • Normalized IPFIX NAT-related fields.
    • βž• Added a configurable default value of App ID source type.
    • βž• Added option for SSL connection to Elasticsearch.
    • βž• Added support for App IDs from v4.x of the Netflow codec. Compatibility with v3.x is maintained.
    • ⚑️ Dashboards optimized for Kibana 6.3. (separate import file for 6.2 is also available)

  • v3.0.3 Changes

    πŸš€ v3.0.3 is a maintenance release. No migration of data from v3.0.x to v3.0.3 is required.

    πŸ†• New Features

    • βž• Added support for nDPI detected application names sent via Netflow from nProbe. A configuration file for nProbe, which works well with ElastiFlowβ„’, is available HERE.

  • v3.0.2 Changes

    πŸš€ v3.0.2 is a maintenance release. No migration of data from v3.0.0/v3.0.1 to v3.0.2 is required.

    ⚑️ Updates

    • ⚑️ Updated IP Reputation Dictionary

  • v3.0.1 Changes

    πŸš€ v3.0.1 is a maintenance release. No migration of data from v3.0.0 to v3.0.1 is required.

    πŸ†• New Features

    πŸ›  Fixes

    • πŸ›  Fixed a few errors in README.md.
    • Ignore application_id of 0:0.

    ⚑️ Updates

    • ⚑️ Updated GeoLite2-ASN DB
    • ⚑️ Updated IP Reputation Dictionary

  • v3.0.0 Changes

    πŸ†• New Features

    • πŸš€ Dashboards have been rebuilt to leverage features added since the release of Kibana 6.x. This includes the addition of experimental dashboards which leverage the new Vega visualization.
    • πŸ”¨ The schema was refactored to minimize the volume of data stored and increase the efficiency of processing. The result is a reduction of storage requirements by 20-30%, and better throughput.
    • IP reputation tagging has been added to assist in the identification of suspect network traffic.
    • πŸ‘Œ Improved support for application identification data has been added for Cisco NBAR2 and Fortinet.
    • βž• Added support for simultaneous collection over IPv4 and IPv6 on separate interfaces.
    • πŸ”– Versioning has been added for indices and index templates. This will make it possible in the future to create reindexing methods for the migration of historical data to newer versions.
    • GeoIP and ASN lookups can now be enabled/disabled using an environment variable. Users who don't need these capabilities will be able to disable them, saving disk space and increasing processing efficiency.
    • Index mappings were modified to more gracefully handle various vendor-specific flow field implementations.

    πŸ›  Fixes

    • πŸ›  Fixed a regression related to the field type of various IPFIX date fields.