Monitoring for Large-Scale Networks

super_mediator

Latest Downloads

Downloads

The latest releases of Super Mediator 1.x are listed below.

You can also find RPMs of Super Mediator releases starting from 1.11.2 in our Yum repository.

(SHA256=30caa7b6939de1950ab0778ca691859b6e2fe80a07bb352650bf786997225747)

Fixed a crash when the "sslCertificate" element was present and the certificate contained bad lengths.

(SHA256=938531040aefd1c619e38a8a31c094e6b514d07fa27d0d0383f755678f46212f)

Fixed potential bugs in the JSON output when the "sslCertificate" element was present in the incoming IFPIX. The bugs manifested as two "sslCertList" keys paired with differing values (objects) or an "sslCertList" key paired with no value.

(SHA256=9975e8e656f07c47bdc38765cf0aa05d9e933ef897032b797987f293070c3cc2)

When present in the incoming IPFIX (YAF 2.20), include the ja4 element in TLS records.
Changed ICMPv6 TEXT and JSON export to match ICMPv4 by putting icmpTypeIPv6 and icmpCodeIPv6 info the sourceTransportPort and destinationTransportPort fields, respectively.
Added the dnsQueryResponse element to the JSON output for DNS records.
Added the reverseVlanId element as an optional output field (RVLAN and RVLANINT).
Added the ability to filter on the reverseVlanId.
Added the yafLayer2SegmentId element as an optional output field (L2SEGMENT).
Fixed an issue in the JSON output of MySQL DPI: The mysqlCommandText fields are now exported as an array instead of as multiple objects with the same key.
Improved the parsing of TLS certificates to accept more certificates, to verify data, and to report problems.
Changed "make install" to write reference copies of the sample super_mediator.conf file and start-up files (for systemd and SysV init.d) under $prefix/share/super_mediator.
Changed "make install" so the sample super_mediator.conf file is no longer installed in /etc or $prefix/etc.
Updated super_mediator.spec to reflect the changes to "make install".