Monitoring for Large-Scale Networks

super_mediator

Latest Downloads

Downloads

The latest releases of Super Mediator 1.x are listed below.

You can also find RPMs of Super Mediator releases starting from 1.11.2 in our Yum repository.

(SHA256=9975e8e656f07c47bdc38765cf0aa05d9e933ef897032b797987f293070c3cc2)

When present in the incoming IPFIX (YAF 2.20), include the ja4 element in TLS records.
Changed ICMPv6 TEXT and JSON export to match ICMPv4 by putting icmpTypeIPv6 and icmpCodeIPv6 info the sourceTransportPort and destinationTransportPort fields, respectively.
Added the dnsQueryResponse element to the JSON output for DNS records.
Added the reverseVlanId element as an optional output field (RVLAN and RVLANINT).
Added the ability to filter on the reverseVlanId.
Added the yafLayer2SegmentId element as an optional output field (L2SEGMENT).
Fixed an issue in the JSON output of MySQL DPI: The mysqlCommandText fields are now exported as an array instead of as multiple objects with the same key.
Improved the parsing of TLS certificates to accept more certificates, to verify data, and to report problems.
Changed "make install" to write reference copies of the sample super_mediator.conf file and start-up files (for systemd and SysV init.d) under $prefix/share/super_mediator.
Changed "make install" so the sample super_mediator.conf file is no longer installed in /etc or $prefix/etc.
Updated super_mediator.spec to reflect the changes to "make install".

(SHA256=b242d09673a468baabc28acbd92f2b60ecf50e29e6e26191a1dc1baad6ca3f41)

(SHA256=534c8ec8292a4ec08192616c87b415a3987546b0c700390755ea685102fcd3d5)

Fixed bugs (extraneous octets) in the calculation of the MD5 and SHA1 hashes of complete TLS certificates.

(SHA256=571cf92be79990a4200d4c7e4403de72ee250f103787289d74f18bd9fd5f5966)

Fixed bugs where multiple threads could modify the same state and result in a lock-up or a crash.

(SHA256=03e41f74d71294059a1ac77ea514b615a405d8d4d34c4550ca93ccccbc3101ae)

Changed the maximum values for ROTATE_MIN_SIZE and ROTATE_MAX_SIZE to support files larger than 2GB.

(SHA256=88a7e4fd1b078ef977fb0c8e42e7c5f74a0bd8b6308c27ef4971b0f3ed1b2be4)

NOTE: The names of JSON and TEXT output files have changed when ROTATE is used.
Added support for filtering a record based on its forward or reverse TCP flag fields, packet count fields, and byte count fields.
Added the ability for an Exporter to delay output-file rotation if the file's size is below a threshold and to advance rotation if the size exceeds a threshold.
Modified collectors that poll for files to process the files by modification time instead of by name, handling the oldest modification time first.
Changed the names of JSON and TEXT files to include a five decimal digit serial number when file rotation is active, e.g., "prefix.20251030112233-01234.json".
Updated systemd unit files to use more proper startup and shutdown methods.
Removed unnecessary spaces from JSON output.
Modified the configuration file parser to support hexadecimal numbers.
Fixed bugs where the comparison operator was ignored for filters using IPv6 addresses or the IP version.
Fixed bugs when filter statements appeared in both COLLECTOR blocks and a FILTER block.
Fixed a bug where the FILTER block ignored the AND_FILTER statement.
Changed the FILTER block to ignore filters using the COLLECTOR field as described in the documentation.
Improved the validation of the configuration file; the new super_mediator may error for configuration files that older versions accepted.
Changed the release number in the super_mediator.spec file to 1.
Deprecated the STATS token. Use STATS_ONLY instead.

Visit Release History for older releases.