[pmacct-discussion] pmacct 0.11.5 released !

[Paolo Lucente]

VERSION.
0.11.5


DESCRIPTION.
pmacct is a small set of passive network monitoring tools to
measure, account, classify, aggregate and export IPv4 and IPv6
traffic; a pluggable and flexible architecture allows to store
collected network data into memory tables or SQL (MySQL, SQLite,
PostgreSQL) databases and export them through NetFlow or sFlow
protocols to remote collectors. pmacct supports fully customizable
historical data breakdown, flow sampling, filtering and tagging,
recovery actions, and triggers. Libpcap, sFlow v2/v4/v5 and
NetFlow v1/v5/v7/v8/v9 are supported, both unicast and multicast.
Also, a client program makes it easy to export data to tools like
RRDtool, GNUPlot, Net-SNMP, MRTG, and Cacti.


HOMEPAGE.
http://www.pmacct.net/


DOWNLOAD.
http://www.pmacct.net/pmacct-0.11.5.tar.gz


CHANGELOG.
+ SQL UPDATE queries code has been rewritten for increased
  flexibility. The SET statement is now a vector and part of
  it has been shifted into the sql_compose_static_set() routine
  in the common SQL layer.
+ A new sql_locking_style directive is now supported in the
  MySQL plugin. To exploit it, an underlying InnoDB table is
  mandatory. Thanks to Matt Gillespie for his tests.
+ Support for Endace DAG cards is now available; this has been
  tested against libDAG 3.0.0. Many thanks to Robert Blechinger
  for his extensive support.
+ pmacctd, the Linux Cooked device (DLT_LINUX_SLL) handler has
  been enhanced by supporting 'src_mac' and 'vlan' aggregation
  primitives.
! fix, xflow_status.c: NetFlow/sFlow collector's IP address is
  being rewritten as 0.0.0.0 when NULL. Was causing SEGVs on
  Solaris/sparc.
! fix, server.c: WANT_RESET is copied in order to avoid losing
  it when handling long queries and need to fragment the reply.
  Thanks very much to Ruben Laban for his support.
! fix, MySQL plugin: the table name is now escaped in order to
  not conflict with reserved words, if one of those is selected.
  Thanks to Marcel Hecko for reporting the bug.
! An extra security check is being introduced in sfacctd as an
  unsupported extension sent over by a Foundry Bigiron 4000 kit
  was causing SEGV issues. Many Thanks to Michael Hoffrath for
  the strong support provided.
! fix, 'nfprobe' plugin: AS numbers were not correctly exported
  to the collector when pmacctd was in use. Patch is courtesy of
  Emerson Pinter.
! fix, 'nfprobe' plugin: MACs were not properly encapsulated
  resulting in wrong addresses being exported through NetFlow
  v9. The patch is courtesy of Alexander Bergolth.
! fix, buffers holding MAC address strings throughout the code
  had not enough space to store the trailing zero. The patch is
  courtesy of Alexander Bergolth.
! fix, logfile FD was not correctly passed onto active plugins.
  The patch is courtesy of Denis Cavrois.
! Missing field type 60 in NetFlow v9 IPv6 flows, was leading
  nfacctd to incorrect flow type selection (IPv4). An additional
  check on the source IP address has now been included to infer
  IPv6 flows. RFC3954 mandates such field type to be present for
  IPv6 flows. The issue has been verified against a Cisco 7600
  w/ RSP720. Many thanks to Robert Blechinger for his extensive
  support.


Cheers,
Paolo

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists