The latest pre-releases of Super Mediator 2.x are listed below.

See also the latest Super Mediator 1.x (stable) releases and all Super Mediator releases.

Super Mediator Binary Package

To install Super Mediator via a pre-built RPM, see Install Super Mediator from the CERT Linux Forensics Tools Repository on the Super Mediator installation and dependencies page.

super_mediator Release 2.0.0.alpha3, 2023-Dec-21

Downloads

(SHA256=911f67490bef5bb6e49c89f675158b5efaa8d5eae955809ef830391429df348e)

Changelog

  • Added a new template for export of de-duplicated DNS AAAA records to resolve an issue where a binary IPv6 address was being stored in an IPFIX string.
  • Changed JSON output to print Unicode when an IPFIX string includes valid UTF-8 encoded Unicode and changed how invalid UTF-8 data is printed.

super_mediator Release 2.0.0.alpha2, 2023-Feb-9

Downloads

(SHA256=a7096311e8bca40b2c3fc906e1b2b685b840995f806f020e6c8766d531b6d91b)

Changelog

  • Re-enabled the ability to filter using an IPSet which was left unimplemented in 2.0.0.alpha1.
  • Fixed a crash in the SSL_DEDUP code introduced in 2.0.0.alpha1.
  • Fixed bug by ensuring that PRESERVE_OBDOMAIN is handled individually for each template.
  • Ensured that JSON output uses a unique key for each entry in an object.
  • Changed text output of firstEightNonEmptyPacketDirections to display in base-2.
  • Improved compatibility with very old versions of YAF.

super_mediator Release 2.0.0.alpha1, 2022-Feb-24

Downloads

(SHA256=c460effe17b044847bd4e40934cb74d12fabc0aba1e455d195d33c2d6393b3da)

Changelog

  • Increased the flexibility of super_mediator by eliminating most internal template definitions and having it use the incoming template definitions instead.
  • Changed the syntax of the configuration file; previous versions of the files need to be updated.
  • Made changes to the command line parsing and eliminated several options. The configuration file is the preferred way to configure super_mediator.
  • Enhanced statistics for types of records read from a collector and written to an exporter.
  • Temporarily disabled SiLK IPset and MySQL support.
  • Note: Exporting as delimited TEXT is lightly tested and contains bugs.
  • Updated the fixbuf requirement to libfixbuf-3.0.0.