Full IPFIX support, the ability to natively dump flows in FastBit format, the ability to collect sFlow flows and turn them into flows (v5/v9/IPFIX), collection of Cisco ASA flows and conversion to 'standard' flows, support for tunneled (including GRE, PPP, and GTP) traffic and the ability to export inner/outer envelope/packet information to flows, HTTP and MySQL protocol analysis with the ability to generate logs of Web and MySQL activities in addition to flow export, and a BGP plugin for establishing a BGP session with a router and generating flows with AS and AS path information.
A new nProbe architecture for better performance with respect to previous versions. Major bugfixes. Enhanced IPFIX support. The ability to natively save flows into MySQL and SQLite, as well as text and binary. Native PF_RING support for high speed flow generation. Support for acceleration cards such as Endace, Mutina Technology, and Tilera. The ability to act as a flow collector and proxy. Support for detect protocols via DPI and report protocol name in flows. The ability to forge NetFlow interfaceIds based on MAC/IP addresses. Support for both flow and packet sampling.
This release adds support for NetFlow v9 and nFlow, improves overall speed thanks to full multithreading, and adds flexible flow logging. It is compatible with ntop 3.0. Many bugs have been fixed.
Major performance enhancements for tuning the probe for large and fast (e.g. Gigabit) networks. Support for multiple NetFlow collectors, support for exporting flows in reflector mode or round robin when multiple collectors are defined, and the ability to control an LCD display where the probe can report traffic statistics.
