Version 1.11.1 (2025-01-23)
===========================

Fixed memory leaks in the periodic file-globbing (directory polling) code.
Added a log message giving the signal that caused super_mediator to exit.

Version 1.11.0 (2024-08-29)
===========================

Added support for reading and writing the micro- and nanosecond time fields produced by YAF-2.16.
Introduced a TIME_UNITS command in the configuration file and a --time-units command-line option to control what time unit(s) are used in TEXT and JSON Exporters.
Modified JSON output of IPv6 records to include source- and destinationIPv6Address keys in addition to source- and destinationIPv4Address keys. Previously only the IPv4Address keys were used.
Fixed a bug in JSON output of TLS records (introduced in v1.8.0) where sslCertVersion was not printed when its value was 0.
Added support for running super_mediator as a systemd service.
Updated the RPM spec file: enhanced RHEL9 compatibility, made openssl a requirement, and enabled type-export.
Modified configure to use pkg-config when searching for OpenSSL.
Fixed a compilation error when building with Spread Toolkit support.

Version 1.10.1 (2024-03-28)
===========================

Fixed a crash when exporting TEXT or JSON forms of de-duplicated DNS AAAA records.
Ensured incoming de-duplicated DNS AAAA records are exported in the 1.10.0 layout.
Fixed a bug where the DNS_RR FULL setting produced shorted DNS_RR records.
Fixed a minor bug in the payload hexdump output written by TEXT exporters.

Version 1.10.0 (2023-12-21)
===========================

Added support for updated TLS and SSH templates generated by YAF 2.15 containing the JA3- and HASSH-related elements.
Added a new template for export of de-duplicated DNS AAAA records to resolve an issue where a binary IPv6 address was being stored in an IPFIX string.
In the JSON output of TLS certificates, replaced some sslObjectIdXX labels with meaningful names.
Fixed a bug where an IPv4 address of 0.0.0.0 was printed as the IPv6 address ::.
Fixed a bug in the JSON output of an SMTP subrecord when it was followed by an additional subrecord.
Fixed a compilation error when including SiLK support and SiLK was built without IPv6 support.

Version 2.0.0.alpha3 (2023-12-21)
=================================

Added a new template for export of de-duplicated DNS AAAA records to resolve an issue where a binary IPv6 address was being stored in an IPFIX string.
Changed JSON output to print Unicode when an IPFIX string includes valid UTF-8 encoded Unicode and changed how invalid UTF-8 data is printed.

Version 2.0.0.alpha2 (2023-02-09)
=================================

Re-enabled the ability to filter using an IPSet which was left unimplemented in 2.0.0.alpha1.
Fixed a crash in the SSL_DEDUP code introduced in 2.0.0.alpha1.
Fixed bug by ensuring that PRESERVE_OBDOMAIN is handled individually for each template.
Ensured that JSON output uses a unique key for each entry in an object.
Changed text output of firstEightNonEmptyPacketDirections to display in base-2.
Improved compatibility with very old versions of YAF.

Version 1.9.1 (2023-02-09)
==========================

Made the configure test for OpenSSL more robust to support newer releases.
Fixed a compilation error on some systems due to a misplaced #include.

Version 1.9.0 (2022-06-08)
==========================

Added support for labeling records based on data from a SiLK IPSet or a SiLK Prefix Map.
Added support for labeling records with a sensor and flowtype similar to SiLK's rwflowpack tool.
Added support for OpenSSL 3.0.1.
Changed JSON output of SSL records for unknown sslObjectType values: For unknown value X, key sslCertObjectIDX is replaced by sslCertIssuerObjectIdX or sslCertSubObjectIdX.  When X is 1, EmailAddress is used (e.g., sslCertIssuerEmailAddress) and when X is 25 DomainComponent is used.
Changed the super_mediator.spec file to configure the build using --with FEATURE options to rpmbuild.
Fixed a small bug in JSON output of rewritten SSL certificates.
Fixed bugs in TEXT export of very old YAF SSL data.
Changed the template scopes for the YAF stats template and Tombstone template to match those used by YAF.
Fixed a bug in MAC address printing where a trailing ":" appeared.

Version 2.0.0.alpha1 (2022-02-24)
=================================

Increased the flexibility of super_mediator by eliminating most internal template definitions and having it use the incoming template definitions instead.
Changed the syntax of the configuration file; previous versions of the files need to be updated.
Made changes to the command line parsing and eliminated several options.  The configuration file is the preferred way to configure super_mediator.
Enhanced statistics for types of records read from a collector and written to an exporter.
Temporarily disabled SiLK IPset and MySQL support.
Note: Exporting as delimited TEXT is lightly tested and contains bugs.
Updated the fixbuf requirement to libfixbuf-3.0.0.

Version 1.8.0 (2020-12-22)
==========================

Added a new switch, --rewrite-ssl-certs, which restructures the template used for TLS/SSL certificates for IPFIX exporters.  The template uses specific IEs for some fields in an SSL certificate.  The --rewrite-ssl-certs switch also allows a super_mediator to read the new SSL template from an upstream super_mediator.  Deduplication of the rewritten certificates is not supported.
Added the ability to read the new SMTP DPI records exported by YAF 2.12.0.
Added the observation domain ID to JSON output.

Version 1.7.1 (2019-10-24)
==========================

Added ability to preserve observation domain of incoming records.
Changed scope of Tombstone records to 3 for consistency with YAF.
Fixed a crash when TCP collector and CLI --input are used concurrently.

Version 1.7.0 (2019-03-18)
==========================

Support for FixBuf 2.3.0 added, and is now required.
New YAF stats messages supported.
New Tombstone format supported.
Race condition addressed when exporter configured to GZIP and MOVE files.
Dynamically generated dedup template names added.
Option record bug fixes.

Version 1.6.0 (2018-04-30)
==========================

Support for FixBuf 2.0.0 added, and is now required.
Derive information elements from included XML files.
Support for tombstone records added.
Fixed flow output bugs where information elements were transposed.
Support for cmake build removed.

Version 1.5.3.1 (2018-10-29)
==========================

Maintenance release for 1.5.3
Fix race condition resulting from using GZIP_FILES and MOVE

Version 1.5.3 (2017-10-19)
==========================

Added template metadata (name and description) record output (libfixbuf 1.8.0 or greater required).


Version 1.5.2 (2017-03-08)
==========================

Fix compile error introduced in version 1.5.1

Version 1.5.1 (2017-03-06)
==========================

Add --become-user and --become-group command line options

Bug Fix for compiling on Alpine Linux

Version 1.5.0 (2017-01-05)
==========================

Add support for adding VLAN/Observation IDs to deduplication keys

Changed format of DEDUP Exporters (added flow start time associated with flow key hash)

Add ability to insert EXPORTER name in deduplication output records

Add ability to read gzip'd IPFIX files

Other Bug Fixes

Version 1.4.0 (2016-10-04)
===========================

Add support for multiple protocol deduplication for IPFIX/JSON exporters

Add post move file option for exporters 

Add PAYLOAD, RPAYLOAD export options to custom field lists

Empty files are now removed by default

Bug Fix for uploading MULTI_FILES files to a MySQL database

Other Bug Fixes

Version 1.3.0 (2016-03-08)
===========================

Add file compression support for EXPORTERS

Add Base64 Encode support for full certificate export

Changed default file extension for JSON files to .json

Bug Fix for ESCAPE_CHARS keyword for DNS_DEDUP Exporters

Fix bug when command line arguments and config file are present

Other Bug Fixes

Version 1.2.2 (2016-01-07)
==========================

Bug Fixes for JSON exporters

Version 1.2.1 (2015-12-29)
==========================

Add JSON output option to --output-mode switch

Bug Fix for JSON exporters (DNS output)

Version 1.2.0 (2015-12-22)
===========================

Remove support for fixbuf releases prior to libfixbuf-1.7.0

Collect and export sslServerName

Collect, decode, and export full X.509 Certificates

MD5 hashing of X.509 Certificates with OpenSSL support

SHA1 hashing of X.509 Certificates with OpenSSL support

Collect and export list of DHCP options

Bug Fixes

Version 1.1.3 (2015-12-07)
==========================

Bug Fix for logging to syslog

DNS Deduplication JSON export bug fix

Update RPM spec file

Version 1.1.2 (2015-10-28)
==========================

Bug Fix for TCP/UDP collector(s) that receive minimal data

Version 1.1.1 (2015-07-01)
============================

Bug Fix for Custom Field List Text Exporters

Bug Fix for configuring SSL De-duplication MAX_HIT_COUNT and FLUSH_TIME

super_table_creator will now create de-duplication tables

Documentation updates

Version 1.1.0 (2015-06-26)
==========================

Requires libfixbuf 1.4.0 or greater

SSL Certificate De-duplication

Advanced SSL field export configuration

Configurable De-duplication of any DPI Fields

JSON file export

Export of unnested DNS Resource Records

New option to only export DNS Responses

Add the ability to rotate and compress logs given a valid file directory

New option to de-duplicate on only particular DNS resource record types

MULTI_FILES CSV format change

MySQL schema change for MULTI_FILES

Bug Fix for Spread Collectors when daemon terminates

Bug Fixes

Version 1.0.2 (2014-10-15)
==========================

Bug Fix for Collectors

Version 1.0.1 (2014-08-12)
===========================

Add support for escaping control characters and the delimiter character in DPI strings

Bug Fix for DNP 3.0 text export

Other Minor Bug Fixes.

Version 1.0.0 (2014-06-13)
===========================

Add support for multiple collectors

Add support for naming collectors and exporters

Collector name included in default flow text export

Add SSL Record Version

Exporters can now filter on Collector name

New log message format 

Bug Fix for printing DPI Only in custom field lists

Other Bug Fixes

Version 0.4.0 (2014-03-04)
==========================

Added SCADA protocol and RTP DPI collection

Added MySQL automatic reconnection capability

Syslog logging capability

Added ability to collect, print, and export MPLS labels

Added ability to collect, print, and export Type of Service fields

Incoming IPFIX records that use Delta counters will export the same fields

Bug Fix for variable redeclaration on some operating systems

Bug Fix for DNS deduplication timeout

Other Bug Fixes

Version 0.3.0 (2013-05-03)
==========================

Added the ability to define new information elements for collection

New filter fields: INGRESS and EGRESS

Added the ability to "AND" filters

Added New YAF 2.4.0 information elements

Bug Fixes

Version 0.2.2 (2013-02-26)
==========================

Bug Fix for GLib version 2.32 or greater

Added statistics timeout option for logging super_mediator stats

Bug Fixes

Version 0.2.1 (2013-02-08)
==========================

Added Custom DPI Field List for Text Exporters

Added --fields switch to command line arguments

Bug Fix for Time output on some platforms

Bug Fix for SSL/TLS Text Export

Version 0.2.0 (2013-01-16)
==========================

Retry exporter connections when lost

Keep export statistics per exporter

Bug Fix for polling directory for IPFIX files

Bug Fix for moving collector files

Version 0.1.9 (2012-12-06)
==========================

Added Custom Field Lists for Text Exporters

Bug Fix for reading from stdin

Other Bug Fixes

Version 0.1.8 (2012-10-26)
==========================
	
Bug Fixes.

Version 0.1.7 (2012-10-09)
==========================

Added ability to filter by IP in IPset (requires SiLK IPset library)

DNS IPFIX export bug fix.

Add Max TTL Field to DNS Deduplicated IPFIX output

Version 0.1.6 (2012-09-10)
==========================

Added Automatic import into MySQL database

Bug Fixes

Version 0.1.5 (2012-07-31)
==========================

Added DNSSEC awareness.

Added New SSL Information Elements.

Added flow stats elements from YAF 2.3.0.

Added DHCP Fingerprinting Elements.

Enhancements for uploading CSV files to a database.

Bug Fixes.

Version 0.1.4 (2012-06-12)
==========================

Added option to timestamp rolling DPI CSV files.

Added option to print flow "index" with DPI data.

Bug Fixes.

Version 0.1.3 (2012-05-07)
==========================

Enhanced DPI to CSV export.

Bug Fixes.

Version 0.1.2 (2012-04-03)
==========================

Bug Fix for multiple exporters. 

Bug Fix for 64 bit OS for text exporters.

Version 0.1.1 (2012-03-28)
==========================

Option to remove empty output files

Improved Logging

Bug Fix for de-duplication of DNS NXDomain Records

Other Bug Fixes.

Version 0.1.0 (2012-03-01)
===========================

Initial Release
