Monitoring for Large-Scale Networks

super_mediator

Latest Downloads

Downloads

The latest releases of Super Mediator 1.x are listed below.

You can also find RPMs of Super Mediator releases starting from 1.11.2 in our Yum repository.

(SHA256=88a7e4fd1b078ef977fb0c8e42e7c5f74a0bd8b6308c27ef4971b0f3ed1b2be4)

NOTE: The names of JSON and TEXT output files have changed when ROTATE is used.
Added support for filtering a record based on its forward or reverse TCP flag fields, packet count fields, and byte count fields.
Added the ability for an Exporter to delay output-file rotation if the file's size is below a threshold and to advance rotation if the size exceeds a threshold.
Modified collectors that poll for files to process the files by modification time instead of by name, handling the oldest modification time first.
Changed the names of JSON and TEXT files to include a five decimal digit serial number when file rotation is active, e.g., "prefix.20251030112233-01234.json".
Updated systemd unit files to use more proper startup and shutdown methods.
Removed unnecessary spaces from JSON output.
Modified the configuration file parser to support hexadecimal numbers.
Fixed bugs where the comparison operator was ignored for filters using IPv6 addresses or the IP version.
Fixed bugs when filter statements appeared in both COLLECTOR blocks and a FILTER block.
Fixed a bug where the FILTER block ignored the AND_FILTER statement.
Changed the FILTER block to ignore filters using the COLLECTOR field as described in the documentation.
Improved the validation of the configuration file; the new super_mediator may error for configuration files that older versions accepted.
Changed the release number in the super_mediator.spec file to 1.
Deprecated the STATS token. Use STATS_ONLY instead.

(SHA256=a86b9d6be912d57a02f391b678674b21fae3ad34e5c1df772d072eddffb6df0d)

Added support for reading the mid-encryption records produced by YAF 2.17.
Changed how the --fields and --groups options are handled when the option is repeated. The new behavior uses the final occurrence of the option instead of the first.
Changed the --watch option to require either --move or the newly added --delete option.
Added a --test-config option that causes super_mediator to exit after parsing the configuration file.
Added support for "EXPORTER JSON" in the configuration file.
Changed --output-mode to accept FILE and FILEHANDLER for writing IPFIX files.
Improved the option handling to make it more strict and to catch issues earlier.
Added a "make check" target.
Fixed bugs in the JSON output of summarization (SSL_DEDUP, DEDUP) records.