[netsa-tools-discuss] New tool releases: YAF 2.8.0 and super_mediator 1.2.0
Emily Sarneso
ecoff at cert.org
Wed Dec 23 08:27:27 EST 2015
Happy Holidays!
There are new releases of YAF and super_mediator available. The highlights are:
super_mediator 1.2.0:
* Remove support for fixbuf releases prior to libfixbuf-1.7.0
* Collect and export sslServerName
* Collect, decode, and export full X.509 Certificates
* MD5 hashing of X.509 Certificates with OpenSSL support
* SHA1 hashing of X.509 Certificates with OpenSSL support
* Collect and export list of DHCP options
* Bug Fixes
YAF 2.8.0
* Remove support for fixbuf releases prior to libfixbuf-1.7.0
* PF_RING support
* PF_RING ZC (Zero Copy) support
* Add support for gzip'd PCAP files
* Add support for decoding MPTCP headers and exporting MPTCP information
* Add LUA configuration file for yaf startup
* New SSL Server Name field export from TLS/SSL Client Hello
* New option for exporting entire X.509 Certificate
* Add Fragment flag to flowAttributes to signify that a flow contained fragmented packets
* DHCP fingerprinting plugin now exports basic list of options by default
* ipfixDump prints number of records for each template
* Bug Fix for labeling DNS over TCP
* Bug Fix for reverseFlowDeltaMilliseconds field
* Bug Fix for collecting X.509 Certificates through a proxy
* More detailed information about ignored packets on termination/SIGUSR1
You can get updates about all NetSA tool releases by subscribing to the RSS feed on the http://tools.netsa.cert.org website:
http://tools.netsa.cert.org/releases.rss.
Cheers,
Emily
--------------------
Emily Sarneso
CMU/SEI/CERT
ecoff at cert.org
More information about the netsa-tools-discuss
mailing list