- fixed bug rejecting -X param having same value
- support output the reports to an UDP socket
- support customized output format of the event-based reports.
- fixed issue in Kafka output which cache messages in the output queue
- fixed issue when using
-Xsecurity.exclude-rules
parameter which is not intialized beforehand - fixed format of LPI output messages
- add Light-Packet-Inspection to analyse quickly packets which come from malicious actors, such as DDoS attacks, which cause high resource consumption on Deep-Packet-Inspection
- bump new version of MMT-DPI which supports HTTP2 and MMT-Security which includes 2 rules to detect HTTP2 attacks
- update mmt-security which introduces 2 rules to detect DoS attacks in 5G control plane
- auto reconnect to Kafka bus when timeout or failled
- update mmt-security to filter SCTP by port number
- fix minor typo in k8s guide
- use new security rules to detect 5G corrupted packets
- new DPI to fix the limit of 16 bit of
RAN_UE_ID
- 30 June 2022
- Reactive statistic of number of packets dropped by NIC, by MMT
- 27 June 2022
- fixed bug in dtls security rule (rule 79)
- fixed bug in error message when capturing in incomptable ethernet NIC
- 14 April 2022
- Support
query-report
:- group attribute values to calculate new values such as,
avg
(average),sum
(total),var
(variance),count
(counter) - configurable report period that independs with
stats-period
parameter - use millisecond as period unit of
query-report
- group attribute values to calculate new values such as,
- 24 Feb 2022
- Support
proto.index.att
syntax inevent-report
- Add
delta-cond
inevent-report
to issue an report only if there is a change in a set of attributes - Improve
event-report
trigger mechanisme to be called only one when the whole packet is classified - Fixed bug when
output-channel
always containtfile-output
- Fixed bug that does not dump no-session packets to pcap files
- Add all options/component when being packaged in a container
- Add
. Aborted
word when explicitly aborting the current execution
- 15 Feb 2022
- Support any protocol stack. For example when
stack-type=178
the root protocol is IP (rather than Ethernet as by default) - Add
stack-offset
to ignore some prefixed bytes when analysing packet
- 29 March 2021
- Add
rtt-base
config parameter to decide which timestamp-base to calcultate RTT
- 17 March 2021
- Fixed bug in dynamic configuration: blocking when receiving command
- Change command format: Each command is now ended by '\0' (null byte)