[netsa-tools-discuss] New tool releases: YAF 2.8.0 and super_mediator 1.2.0

Emily Sarneso ecoff at cert.org
Wed Dec 23 08:27:27 EST 2015


Happy Holidays!

There are new releases of YAF and super_mediator available.  The highlights are:

super_mediator 1.2.0:
	* Remove support for fixbuf releases prior to libfixbuf-1.7.0
   	* Collect and export sslServerName
   	* Collect, decode, and export full X.509 Certificates
   	* MD5 hashing of X.509 Certificates with OpenSSL support
   	* SHA1 hashing of X.509 Certificates with OpenSSL support
   	* Collect and export list of DHCP options
   	* Bug Fixes

YAF 2.8.0
	* Remove support for fixbuf releases prior to libfixbuf-1.7.0
   	* PF_RING support
   	* PF_RING ZC (Zero Copy) support
   	* Add support for gzip'd PCAP files
   	* Add support for decoding MPTCP headers and exporting MPTCP information
   	* Add LUA configuration file for yaf startup
   	* New SSL Server Name field export from TLS/SSL Client Hello
   	* New option for exporting entire X.509 Certificate
   	* Add Fragment flag to flowAttributes to signify that a flow contained fragmented packets
   	* DHCP fingerprinting plugin now exports basic list of options by default
   	* ipfixDump prints number of records for each template
   	* Bug Fix for labeling DNS over TCP
   	* Bug Fix for reverseFlowDeltaMilliseconds field
   	* Bug Fix for collecting X.509 Certificates through a proxy
   	* More detailed information about ignored packets on termination/SIGUSR1

You can get updates about all NetSA tool releases by subscribing to the RSS feed on the http://tools.netsa.cert.org website:
http://tools.netsa.cert.org/releases.rss.

Cheers,

Emily

--------------------
Emily Sarneso
CMU/SEI/CERT
ecoff at cert.org








More information about the netsa-tools-discuss mailing list