argus-clients-3.0.7.7

Carter Bullard carter at qosient.com
Mon Mar 25 12:31:39 EDT 2013


Gentle people,
There is a new set of dev client software on the server, that has a lot of
additions and many bug fixes.

   http://qosient.com/argus/dev/argus-clients-3.0.7.7.tar.gz

The biggest impact currently, is the addition of IPv6 support for GeoIP
record labeling.  You can get country codes, asn's, city, state, etc... for
IPv6 traffic.  This has been tested pretty well using data from a very
large global research network, and it looks pretty good, however, if
you have any issues, please holler.

To use this you need to configure the additional IPv6 GeoIP database,
which can be gotten from Maxmind.  Please check out the new features
in ./support/Config/ralabel.conf, to turn this support on.

Another big change is rapolicy().  David Edelman has been doing some
great work to modernize rapolicy(), so that it can deal with all the variants
of Cisco ACL's, adding a bunch of new bells and whistles and options.
This is a work in progress, so .... if you use rapolicy() for continuous monitoring
of your access control policies, do take a look at the new rapolicy().  Any
questions, of course, should be sent to the list.

There has been a lot of work done on labels, and there are a lot of fixes in
3.0.7.7, so .... if you do a lot of label work, do give this a try, especially if you've
been using IANA_ADDRESS based labeling.

Remember, 3.0.7 is a development version of the stable 3.0.6 tools.  So do
make sure that it does what you want before putting it into production.  If
you find any issues in function, distribution or documentation, please don't
hesitate to send something to the list.

Hope all is most excellent,

Carter
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2589 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130325/d6b5cf71/attachment.bin>


More information about the argus mailing list