FastNetMon Advanced 2.0.367
Changes:
- Added new type string for system_counters and exposed FastNetMon version
- Added logic to store unban actions to attacks collection in MongoDB
- Fixed bug that clickhouse_metrics_push_period was used in Graphite plugin instead of correct graphite_push_period
- Change in BGP Flow Spec mitigation logic: DF (don't fragment) can be combined with other fragmentations flags. Previously if we had DF flag then we set only it and ignored all other fragmentation flags
- Added export for ip_dont_fragment, ip_more_fragments, ip_fragment_offset fields for packet dump
- Added logic to remove source and destination ports when flow spec rules has is-fragment flag. We do it for Arista due to their hardware limitations. It can be enabled using flag flow_spec_strip_ports_for_fragmented_traffic
- Deprecated field attack_protocol for JSON callbacks and explicitly set it to unknown value. Please use threshold names for attack protocol detection instead
- Deprecated fields peak_attack_power and initial_attack_power for JSON callback and set them to zeroes. Please use per protocol counters instead
- Manually set field attack_type for JSON based attack notifications to unknown as this logic was broken and we're deprecating it
- We stopped populating fields: average_incoming_traffic, average_incoming_traffic_bits, average_outgoing_traffic, average_outgoing_traffic_bits, average_incoming_pps, average_outgoing_pps, average_incoming_flows, average_outgoing_flows
- Removed deprecated attack detection fields from email alerts: Attack type, Initial attack power, Peak attack power, Attack direction, Attack protocol. These fields were calculated by very flawed logic and we replaced them by new fields which precisely reflect reality of attack.
- Added configuration options gobgp_as_path_host_ipv4, gobgp_as_path_subnet_ipv4, gobgp_as_path_host_ipv6, gobgp_as_path_subnet_ipv6
- Added bgp_as_path_host_ipv4, bgp_as_path_subnet_ipv4, bgp_as_path_host_ipv6, bgp_as_path_subnet_ipv6 for all hostgroups
- Improved logic to craft IPv4 BGP attributes
- We deprecated Ubuntu 16.04, Debian 9 and 10 and removed them from releases
- Fixed bug with too high values in sudo fcli show baseline_per_host global outgoing for outgoing traffic
- Adjusted Clickhouse datasource UID for password reset logic
- Changed Clickhouse datasource to new UUID format
- Added logic to set correct owner for /var/lib/grafana/plugins
- Added fcli flag NO_DATABASE_MODE which can be set to on to suppress connection attempts to MongoDB