sFlowTrend release notes
version 7.4.2
Released 23-Apr-2024
- Fixed a bug which prevented data from being displayed in Hosts>Statistics tab. This only effects users who use host sFlow.
- Introduced a new format of help.
version 7.4.1
Released 12-Feb-2024
- Resolved a problem when using https to connect to sFlowTrend from a remote host.
version 7.4.0
Released 23-Jan-2024
- Java version 11.0 or later is now required. If you are using an older version, you will need to upgrade to Java version 11.0 before installing sFlowTrend version 7.4.0.
- Added decodes for MPLS. Key fields mplsLabelStackIn, mplsLabelStackOut, and isMPLS are now available in the database flows table. These fields can be used in filters, custom Top N charts, and advanced and scripted query settings in reports. These fields are described in the help.
- Added Allow nulls in keys option to custom Top N and advanced and scripted query settings in reports. This allows you to specify whether a top N entry can include flows with keys whose values are null. This option is described in the help.
- Added database metadata fields isOther and noData. These fields are described in the help.
- Improved formatting of BGP communities.
- Updated GeoIP database.
version 7.3.3
Released 06-Jun-2023
This release resolves a build issue with v7.3.2, which caused a hatched background in tables.
- Resolved an issue causing a hatched background in tables.
version 7.3.2
Released 05-Jun-2023
This release only updates the installers for Windows, to accomodate a new certificate. There is no need to update if you currently have sFlowTrend v7.3.1 installed, as the certificate is only used during installation.
- Updated Windows installers to use new certificate.
version 7.3.1
Released 11-Jul-2022
There is only one change in this release. If you have not experienced the problem described below, there is no need to upgrade to this version.
- Fixed an incompatibility problem when sFlowTrend was run with older JREs (< Java version 11).
This problem caused sFlowTrend to report an error:
java.lang.NoSuchMethodError: java.nio.ByteBuffer.position(I)Ljava/nio/ByteBuffer;
when data was accessed.
version 7.3
Released 24-Jun-2022
- Added a JavaScript filter function, inIPRange, which tests whether an IP address is in an IP address range. This function is described in the help
- A bar in a Top N chart can now be selected using control/command click. This can be used if you are having difficulty selecting a specific bar (eg if a mouse drag is detected and therefore a range is selected).
- Fixed a bug in the Reports tab when editing basic or advanced query settings: changes to the time period selection are now registered.
- Various minor bug fixes.
version 7.2
Released 6-Oct-2021
- Added an option to force web clients to connect to the sFlowTrend web server via https. If this option is enabled, any http request is redirected to https and all responses via https include the HSTS header. This option, sever.webserver.forceHttps, is described in the help
- Updated Japanese localisation.
- Updated GeoIP database.
- Various minor bug fixes
version 7.1
Released 14-Dec-2020
- Added the ability to configure actions on events from scheduled report status changes.
- Improved web client performance when there are multiple connections from a single browser.
- Improved PDF versions of Help.
version 7.0.1
Released 30-Jan-2020
- Fixed a bug which prevented full initialization of the web UI in browsers with some locales.
- Fixed a problem when upgrading sFlowTrend and sFlowTrend-Pro when the software was installed with RPM.
- Other minor bug fixes.
version 7.0
Released 07-Jan-2020
- Added the ability to schedule reports to be run automatically. This feature is described in the help.
- Following the deprecation of the Java client in version 6.3, the Java client has now been removed. The user interface can be accessed using a web browser using the URL http://<hostname>:8087 or https://<hostname>:8087.
- Following the release of MacOS 10.15 (Catalina) and the additional requirements that it places on applications, the MacOS build has been discontinued. To run on a Mac, we recommend using a Linux VM under Virtual Box, Parallels or VMWare Fusion, or under Docker (a prebuilt Docker image is available).
- Various bug fixes.
version 6.8
Released 06-Jun-2018
- Java version 8.0 or later is now required. If you were using Java version 7.0 previously, you will need to upgrade to Java version 8.0 before installing sFlowTrend version 6.8.
- Added the ability to use key functions when creating a custom top n chart in Network > Top N tab.
- Resolved a web server security issue when running on Windows.
- Improved scrolling and resizing of tables.
- Updated styling of web GUI.
version 6.7
Released 10-Jan-2018
- Improved the rendering of charts in reports for on-line viewing and in PDF documents.
- Improved caching so that a web browser will load the latest web client after upgrade of sFlowTrend.
- Fixed bug on start up in headless environment.
- Fixed bugs with the system configuration dialog.
- Fixed bug which prevented charts showing in report PDF documents when a proxy was configured.
- Changes to support Java 9.
version 6.6
Released 05-Sep-2017
- Improved the performance of the display of tabular data.
- Removed insecure SSL protocols and ciper suites.
- Allowed SSL protocols and ciper suites to be customised.
- Fixed a bug when setting the function label of the following query functions: countryCode, countryName, locate, mac, macVendor.
- Fixed bugs with the agent configuration dialog.
version 6.5.04
Released 25-Apr-2017
- When sFlowTrend is deployed behind a NAT device, added the ability to manually specify the public sFlow receiver address and port to use when configuring sFlow via SNMP.
- Allow the selection of IPv6 addresses for the sFlow receiver address when configuring sFlow via SNMP.
- Provided a Docker image for sFlowTrend. sflowtrend:latest will be updated when new releases are available.
- Further enhancements to the usability of the reports tab.
version 6.5.03
Released 30-Mar-2017
- Fixed a bug with SNMPv3 caused by a regression introduced in v6.5.01.
- Fixed a bug when configuring SNMP v3 in the web GUI.
version 6.5.02
Released 28-Mar-2017
- Fixed a bug which could cause a crash when certain types of Geneve tunnelled traffic were received.
- Improved usability of the reports tab in the web interface when used with certain browsers.
- Improved integration with systemd Linux installations.
version 6.5
Released 22-Feb-2017
The main focus of this release is to provide visibility into tunneled traffic by adding support for the decode and analysis of encapsulated packets.- Added decode and analysis of IEEE 802.1ah (PBB/MAC-in-MAC) traffic. For example you can create a Report using Advanced settings or a Network > Top N custom chart by selecting IEEE 802.1ah related key fields listed in the help. The sFlowTrend tips and tricks blog gives an example of PBB analysis.
- Added decode and analysis of L3/4 tunneled traffic (Geneve, GRE, NVGRE, VXLAN). This includes analysis of the fields in encapsulated packets. For example you can create a Report using Advanced settings or a Network > Top N custom chart by selecting layer 3/4 encapsulations related key fields listed in the help. The sFlowTrend tips and tricks blog gives an example of VXLAN analysis.
- Added additional IEEE 802.1ad (Q-in-Q) VLAN fields (vlanstack, cVLAN, sVLAN, cPriority, sPriority).
- Improved responsiveness of web client when removing agents.
- Increased the default memory for Linux, MacOS, and Windows 64 bit installations. Decreased the default memory for Windows 32 bit installations.
version 6.4.01
Released 26-Oct-2016
- Corrected a problem with the Linux packages, which could cause a crash when installing.
version 6.4
Released 21-Oct-2016
- Network > Circles tab
- When clustering by switch, switches are labelled using the switch naming policy configured in user preferences.
- Added background shading to clusters (web client).
- Added an option to allow a user to remain logged in when the connection to the sFlowTrend server is lost or when the browser is closed and restarted.
- Converted XML configuration files to JSON format.
version 6.3.01
Released 20-Jun-2016
- Updated Japanese localisation.
- The installer will not allow you to choose the same directory for the sFlowTrend home directory and the installation directory. If you have previously used the same directory for the home directory and the installation directory, you will need to change one of the directories when you upgrade to this version.
version 6.3
Released 29-Apr-2016
- Official release of the sFlowTrend web client. The web client is now the recommended client and the Java client is deprecated.
- The following changes were made to the web client:
- Added context sensitive, local help.
- Added the ability to import and export report definitions.
- Changes to allow the web client to work properly via a reverse proxy.
- Improved web client behaviour after client system sleep.
- Improved reporting of low memory conditions.
- Various bug fixes.
version 6.2
Released 27-Oct-2015
- Added Reports tab in the web client. This tab provides the same reporting functionality as the Java client.
- Improved the Root cause analysis in the web client. This includes the ability to drilldown to break out top contributors in more detail.
- Added Don't tell me again option to new releases notification dialog.
- Apple Mac installer is now signed with an official Apple certificate.
- Various other bug fixes.
version 6.1.01
Released 22-Sep-2015
- Corrected a potential corruption of a database file used to store data for switch interfaces, including configured thresholds. The effect of this problem is loss of configured thresholds.
version 6.1
Released 21-Sep-2015
- Added a Root cause analysis tab under the Network tab in the web client. This tab identifies the major contributors (source and destination subnets, addresses, and ports) to the network traffic.
- Removed sFlowTrend server system default proxy configuration for Linux (some Linux installations do not have a system default proxy, which causes JVM stability problems). If a proxy is required, use the manual configuration option.
- sFlowTrend is now installed using a traditional installer (installation using Java Web Start has been discontinued).
version 6.0
Released 13-Jul-2015
- Java 7.0 or later is now required.
- Added web client (see Introducing sFlowTrend-Pro v6.0 web client).
- Added support for client/server communication over SSL.
- Fixed bug with decode of IPv6 packets with nextHeader=59 (no next header).
- The Java Web Start client is now deprecated and will be removed in the next release.
- With the introduction of the web client, the Java Web Start installation of sFlowTrend (free) will be deprecated and replaced with a traditional installer in the next release.
- Removed the client webserver.
version 5.1.08
Released 21-Jan-2015
- Updated the GeoIP country database, and added IPv6 address to country resolution.
- Corrected a problem where actions on threshold events of severity level Severe would fire, even if the event was not Severe.
- Improved the robustness of determining the local hostname for situations where the host is not available in DNS
- Improved the robustness of the sFlow decoder, to allow additional sFlow fields at the end of a record.
version 5.1.07
Released 23-Apr-2014
- Corrected a bug which could cause a crash if a switch has a vertical bar character in the ifName or ifAlias of an interface.
version 5.1.06
Released 30-Jan-2014
- Further updates for the latest version of Java Web Start.
version 5.1.05
Released 17-Jan-2014
- Minor updates to allow operation with latest version of Java Web Start.
version 5.1.04
Released 23-Apr-2013
- Fixed a problem with installing the license in a new installation of sFlowTrend-Pro.
- Improved the performance of the Thresholds tab.
- Added the ability to view traffic flows by BGP attributes (for example top BGP AS paths) by including decode and analysis of the sFlow extended gateway structure exported by some sFlow enabled BGP routers.
version 5.1.03
Released 1-Mar-2013
- Fixed a problem, introduced in v5.1.02, which prevented actions on events from working.
version 5.1.02
Released 27-Feb-2013
- Removed delay when connecting from sFlowTrend-Pro client to sFlowTrend-Pro server.
- Various minor bug fixes.
version 5.1.01
Released 14-Feb-2013
- Added ifName and ifAlias to actions on threshold events. For example, emailed interface threshold events now show the interface using the ifIndex, ifName and ifAlias.
- Reduced the number of events warning of low memory on large memory systems.
- Improved handling of situations where access to configuration files (eg bookmarks, custom top n) is denied.
- Improved accuracy of scaling of sFlow data in corner case conditions.
- Various bug fixes.
version 5.1
Released 05-Dec-2012
This release of sFlowTrend includes the following features:- A new custom top-n view, which works like the standard top-n (eg top sources), but allows you to customise the fields that are included in the query. This is useful if you have specific needs for finding traffic, or need to select fields that are not included in the standard views.
- Added support for extended tunnel information, which will work with sFlow sources that support it - for example, the sFlow extension for Microsoft Windows 2012 Hyper-V.
- Added Japanese localisation for features added in v5.0.
- Improved robustness of license management
- Various bug fixes and minor enhancements.
version 5.0
Released 05-Oct-2012
This is a major new release of sFlowTrend which includes the following features:- Support for sFlow for HTTP. The new Services tab displays HTTP performance data providing visibility into the behaviour and usage of web servers including top virtual hosts, URIs, user agents. The Reports tab has also been enhanced to allow reporting on HTTP performance.
- Restructured user interface:
- Rearranged the tabs so that network related data are now accessed from sub-tabs under the new Network tab. The Charts tab has been divided into two new sub-tabs: Counters and Top N. The Wireless charts are now included in the Counters and Top N sub-tabs.
- sFlowTrend now uses the native system look and feel by default.
- The database functions wifiCiperSuiteFormatted, wifiCipherSuiteName, and wifiVersionName have been removed. Any reports using these functions should be edited to use the new database key fields for flows: wifiCipherFormatted, wifiCipherName, wifiVersion respecitively. See the sFlowTrend Help. With this change, it is now possible to filter on these attributes.
- Various bug fixes and minor enhancements.
- Provided Mac OS X installer for sFlowTrend-Pro service and client
version 4.4.03
Released 05-Jun-2012
- Corrected an issue introduced in version 4.4.02, where very large and erroneous traffic spikes could occasionally be seen with certain sFlow implementations.
- Fixed several minor bugs with SNMP introduced in the previous release.
version 4.4.02
Released 27-Apr-2012
- Updated certificates used for signing sFlowTrend code, to avoid a certificate expiry issue.
- Changes to the SNMP library to improve robustness. Also added support for AES encryption for SNMPv3 privacy.
- For a virtual switch, added the ability to label an interface with the name of an attached virtual machine.
version 4.4
Released 21-Jul-2011
- Added event features. sFlowTrend now raises events when traffic levels cross defined thresholds and when various conditions in the operation of sFlowTrend are detected. Events are displayed in the Events Tab. In addition it is possible to configure notification of events via Email or syslog. For more details, see the sFlowTrend Help
version 4.3.03
Released 11-Apr-2011
- Fixed bug that caused sFlowTrend to stop receiving sFlow from switches that were configured using SNMP, to send sFlow.
version 4.3.02
Released 4-Apr-2011
- Corrected bug associated with including "/" in a subnet name.
- Fixed bugs with SNMP v3 which affected configuration of sFlow via SNMP.
- Fixed bug where charts and queries would fail when using Custom time periods of a month or more.
- Fixed bug when changing Options, if the user did not have admin permission.
- Fixed problem with filter generated when clicking on legend items in Top wireless versions, Top SSIDs, and Top channels charts
- Corrected problem with deleting agents.
- Updated the host look up RADB URL.
- Updated Japanese localisation bundle.
version 4.3.01
Released 24-Feb-2011
- Corrected an issue where the history back and forward menu items may not have worked correctly.
- Corrected a problem with reports, where it was possible to construct a query with inconsistent settings, which would then cause the query to fail.
- Several other minor bugs fixed, most of which would not be visible to users.
version 4.3
Released 20-Jan-2011
- Added the ability to bookmark favourite tabs and their settings so that you can easily return to the same tab, configured with settings, at a later time.
- Added support for importing and exporting reports.
- Defining reports using Javascript is now supported.
- Improved the formatting and presentation of reports.
- Various bug fixes and minor enhancements
version 4.2.01
Released 26-Oct-2010
- Added Japanese localisation.
version 4.2
Released 08-Oct-2010
- Added support for Host sFlow, including a new Host statistics tab. The Host statistics tab displays host performance metrics in tabular format and charts which trend performance metrics for hosts.
- sFlowTrend (free) now allows data collection from a maximum of 5 switch or host sFlow agents.
- Improved the host information lookup to display the end host location using the switch and interface naming conventions configured in Options.
- Improved the behaviour of the time selector, including fixing a bug so that the end time cannot be before the start time.
- Improved the function editor in Reports.
- Provided additional downloads for sFlowTrend-Pro (client/server):
- Installer for 64-bit Windows with 64-bit JREs (for 64-bit Windows with 32-bit JREs, use the regular Windows installer)
- RPM package
- .deb file (for Debian-based distributions)
version 4.1
Released 29-Apr-2010
This release of sFlowTrend includes the following enhancements:- Host location (switch port connecting the host to the network).
- Host information (MAC, MAC vendor, IP, country location).
- New clustering options for the Circles charts (country and switch).
version 4.0.1
Released 13-Jan-2010
- Added Japanese localisation.
- Fixed problem with downloading CSV data from tables in reports.
version 4.0
Released 05-Dec-2009
This is a major new release of sFlowTrend, which includes these enhancements:- A reporting package. Reports can be created, run, and results viewed in sFlowTrend, and via a browser, or as a PDF. The raw data from a report is accessible.
- A new Circles chart, which helps visualize flow of traffic between subnets.
- Many other bug fixes, and performance and feature enhancements.
version 3.1.04
Released 4-Nov-2009
- Fixed problems that prevented non-global SNMP settings to be configured for switches which had initially been conconfigured to use global SNMP settings.
version 3.1.03
Released 17-Jul-2009
- Fixed bug in decoding of exported 802.11 packet headers.
- Fixed bug with interpreting strings in sFlow extended fields.
version 3.1.02
Released 31-Mar-2009
- Corrected a problem in handling multi-byte characters when communicating between the client and server.
- Fixed a defect where a chart would not be updated at the end of the day, when viewing data for "today".
version 3.1.01
Released 07-Jan-2009
- Corrected an issue where, if the default duration of data retained is increased beyond a certain amount, then no data beyond the current hour would be retained.
- Corrected a problem which meant that if the sFlow port to use was changed, the service or application would need to be restarted to resume data collection.
version 3.1
Released 28-Nov-2008
- Added the ability to show traffic trend charts for all switches, or all wireless access points. This applies to sFlowTrend-Pro only.
- Global SNMP settings can be defined. If the global SNMP settings are changed, the new settings will be changed for all switches that use the global settings.
- Added support for SNMPv3.
- SNMP data from the ifTable and sFlow MIB is automatically refreshed periodically.
- Released sFlowTrend-Pro service for Linux.
version 3.0.01
Released 09-Oct-2008
- Added support for running sFlowTrend behind a web proxy server. If running sFlowTrend as an application,the proxy can be configured in Tools>Options>Advanced. If running sFlowTrend-Pro as a service, the proxy for the server is configured during installation of the server, and the client is configured through Tools>Options>Advanced.
version 3.0
Released 12-Aug-2008
This is a major release of sFlowTrend, introducing the option of running sFlowTrend-Pro as a service. When running sFlowTrend-Pro as a service, the server runs continually in the background and the sFlowTrend-Pro local or remote client is used as the GUI to access the collected data.
The free version of sFlowTrend can be only be run as an application.
Other new features in sFlowTrend v3.0 include:
- User access control.
- History navigator that allows you to move backwards and forwards through recently viewed screens, in a similar way to a browser's history navigator.
version 2.1
Released 25-Sep-2007
- Introduced support for sFlow for wireless.
version 2.0.04
Released 26-Jul-2007
- Resolved an issue where multicast or broadcast traffic discarded by a switch or router could cause sFlowTrend to stop receiving further samples.
version 2.0.02
Released 05-Jun-2007
- Resolved an issue with determing correct link speed with higher rate links. This could have impacted enabling of sFlow through SNMP on these links, as well as reporting the speed incorrectly.
version 2.0
Released 18-May-2007
- Release of sFlowTrend v2.0.
version 2.0-beta-1.11
Released 11-May-2007
- Added on-line help.
- Fixed an issue with enabling sFlow through SNMP on certain switches.
version 2.0-beta-1.10
Released 04-May-2007
- Fixed an issue where the built-in web server did not work correctly.
- Improved the charting for flows that are routed across a switch being monitored.
- Resolved an issue where the 'all interfaces' view displayed no data on some manufacturer's switches.
version 2.0-beta-1.07
Released 28-Mar-2007
- The Thresholds tab now includes automatic root cause analysis of threshold. This helps you to quickly determine the cause of unusual network traffic patterns.
- The Chart tab includes a progress indicator when a new chart is loaded or a chart is updated. This indicator allows the loading of a chart to be cancelled.
- Switches can now be enabled and disabled from the control bar in the Chart and tab.
- Resolved a problem with ethertype being set incorrectly in layer 2 flows.
- Resolved a problem with the incorrect scale factor being used for frames/s charts for interval sizes > 1 minute.
version 2.0-beta-1.06
Released 22-Jan-2007
- Charts tab now included custom filtering for top N charts. The filter can be any JavaScript boolean expression. JavaScript properties available for filtering can be found in the Filter bar by clicking on Edit.
- Legend items in top n charts are now clickable, allowing drilldown on selected addresses and ports etc.
version 2.0-beta-1.05
Released 09-Jan-2007
- The legend in the Counters chart is now selectable. Clicking on a legend entry causes only that statistic to be displayed.
- Drill-down from the dashboard and thresholds now selects the appropriate statistics in the Counters chart.
- IP addresses for sources and destinations shown in charts can be optionally resolved back to hostnames. If this causes excessive delay in creating a chart, the feature can be turned off using Tools > Options > Advanced: "Resolve IP addresses to hostnames in charts".
- The currently selected time in all charts is now retained when creating a new chart.
- Corrected an issue where the first switch to be added would not be enabled correctly through SNMP.
version 2.0-beta-1.03
Released 29-Nov-2006
This is a major new release of sFlowTrend, incorporating several new features:
- A new dashboard, which allow you to find quickly to top contributors to network traffic or errors, and drill down to the relevant chart.
- Configurable thresholds, which help you find network problems quickly by specifying custom bounds for network performance per interface. The top-level threshold status is also shown on the dashboard.
- A threshold tab, which allows you to view and configure the thresholds for any interface.
- Also incldued are many internal enhancements, particularly for performance and memory utilization.
- An integration interface is offered, to allow custom integration between sFlowTrend and other applications, such as switch device managers. sFlowTrend can be controlled by a web interface, available at http://localhost:8087.
version 1.2
Released 15-June-2006
- Additional charts are now available:
- Top source VLANs.
- Top destination VLANs.
- Top inter-VLAN pairs.
- Improved startup performance.
- Resolved a minor problem with IPv6 protocol decodes.
version 1.1
Released 30-May-2006
- Several new charts are now available, including three which are security
oriented. The new charts are:
- Top source-destination pairs (top communicating source address/destination address pairs).
- Top connections (similar to top source-destination flows, but includes both directions of a connection).
- Top servers.
- Top clients.
- Top protocols.
- Most connected sources (top sources by the number of destinations connected to. This is a security oriented chart, also refered to as 'fan-out', and can be used to find hosts exhibiting scanning behaviour).
- Most connected destinations (top destinations by the number of sources that have connected. This is a security oriented chart, also refered to as 'fan-in', and can be used to find hosts that might be victims of distributed denial-of-service attacks).
- Most popular protocols (top destination protocols by number of source-destination pairs. This is a security oriented chart, which can be used to find quickly protocols that are suspected of being used in scanning behaviour).
- Charts can now be generated for all the interfaces on a switch, as well as specific interfaces. Select 'all' in the interface list for this.
- Activity 'LED', which shows incoming sFlow samples by flashing. This quickly indicates if sFlow is being received by sFlowTrend. If the LED is not flashing, then a firewall might be blocking the sFlow port (UDP:6343).
- Hovering the mouse over the activity LED shows the current incoming sample rate.
- Improved handling of multicast traffic.
- Improved accuracy of charts.
version 1.0.1
Released 17-Apr-2006
- Resolved an issue where IPv6 addresses were not processed correctly.
- Performance and memory usage enhancements.
version 1.0
- Initial release
