Version History
Colasoft nChronos
Complete changelog of all nChronos versions with new features, improvements, and bug fixes.
May, 2024-Colasoft nChronos v6.4.0
New Features
- •Support extraction and push of protocol metadata.
- •Enable calling third-party shared object (so) libraries during transaction decoding.
- •Support transaction parsing for Mongo and PostgreSQL databases.
- •SMTP configuration supports Oauth2.0 authentication.
- •Enable import and export of virtual interface configurations.
- •Add a status column in the interface configuration list to indicate the status of each interface.
- •Support specifying the direction of the physical address when creating a physical address virtual interface.
- •Add two new transmission medium types, Raw IP and Linux cooked capture, in interface configuration.
- •Add DSCP statistics table in MAC sub-link analysis.
- •Add "IP version" field in the statistics tables for service ports, IP sessions, TCP sessions, and UDP sessions.
- •Add RTT and delay metrics in the DSCP statistics table.
- •Support the identification and parsing of MSRDP_OVER_SSL, ISIS, and GMTLS protocols.
Improvements
- •Optimize the triggering conditions for physical loops and routing loops.
- •Allow configuration of virtual interfaces with the same VLAN with different MAC addresses.
- •Enhance SDL transaction configuration capability, with support for wildcard paths in XML and JSON value retrieval.
Bugs Fixed
- •Correct the problem of incorrect identification of multi-layer protocols.
Nov, 2022-Colasoft nChronos v6.3.1
New Features
- •Support RedHat 8.6 operating system environment.
- •Support for selecting custom protocols in IP access exception alerts.
- •Support custom field storage in the nChronos statistics table [Phase I].
- •Support custom field storage in the nChronos statistics table [Phase II].
- •Support custom field storage in the nChronos statistics table [Phase III].
- •Add RTT-related indicators in the general link link and all sub-link links.
- •Black box function to collect some system information of the equipment under abnormal conditions [Phase I].
- •Port the login verification information to authManager.
- •Provide custom protocol update interface.
- •Support log level setting and some memory debugging tools.
- •Authorization process is separate and license is proposed first.
- •DNS field resolution statistics requirements.
- •When the traceback is newly installed or upgraded, the csxfs version and the data storage space writing overload should be checked and prompted.
- •Solve the problem of data failure of API call data faliure from nChronos.
- •Add the option of unknown network segment to the configuration endpoint of network segment and inter-segment alert.
- •Add TCP segment loss rate and TCP segment loss packet fields to the service port table.
- •Support statistics on Oracle database login access behavior.
- •Support UPM to send kerberos authentication file for kafka configuration in nChronos.
- •When analyzing the backtracking of virtual network statistics, the virtual network identifier is not used as a filtering condition when analyzing the backtracking object.
- •Support transaction resolution of cache database.
- •Interface sub-link does not support interface statistics alerts.
- •Support high concurrent data forwarding for transaction parsing data.
- •Support the identification and analysis of fragmented packets.
- •Support user + terminal IP to restrict login.
- •Timed reconnection mechanism should be available even after the failure of authentication of the nChronos connection upm.
- •Console packet download permission control.
- •Add arp, broadcast, multicast packet count and other fields in the virtual network statistics table.
- •Add fields for displaying virtual network type in the service access table.
- •The admin page of the web configuration interface of the traceback server needs to be Englishized.
- •Support field trimming in nChronos to improve the performance of comprehensive analysis, processing and query of products.
- •Support ARP log parsing and pushing.
- •Default statistics for multiple virtual network types in nChronos.
- •Enhance feature alert function, support multiple feature logic combination and context detection.
- •Support custom protocol and protocol identification.
Improvements
- •Optimize the algorithm of IPID and SEQ in TCP sessions.
- •Internal optimization - the application layer ensures that the memory submitted by the bottom layer for storing packets is not modified as much as possible.
- •Optimization of DNS transaction success rate algorithm.
- •Optimization of VLAN sub-link session count algorithm.
- •Kafka data push optimization to solve the problem of broken flow.
- •Optimize the number of backtracking active sessions, the total number of sessions, and the algorithm for building link-related metrics.
Bugs Fixed
- •dpifilter causes crassd process crashes (occurs once).
- •csrassd process crashes (occurs once).
- •tcpapp process crash (occurred once).
- •Memory consumption is high with more than 50 links.
- •The number of alarms in the report generated by netflow segment sub-link alarms does not match the number of alarms shown in the statistics table.
- •Decode process crashes, due to failure to create thread pool.
- •The server kernel CPU usage is high when the transaction plug-in is turned on.
- •The syscpu of the query core is occasionally higher when the blocking function is turned on.
- •Multi-process-apitest sends XML configuration to non-corresponding types, and some types return successful operation.
- •Packet loss of the capture card occurs after stopping and starting the link.
- •Multiple links specify the same storage partition, stopping one link will cause the other links to lose data - historical version extension bug.
- •Using memory detection tools to start query process, query process crashes (3 times).
Aug, 2022-Colasoft nChronos v6.3.0
New Features
- •Support Oracle, DB2, mysql (sqlcode) decode and calculate analysis.
- •Support jflow analysis.
- •Support IP session table, point 1 shows the intranet address, point 2 shows external address.
- •Support message body 2 layers decode in VoIP analysis.
- •Support the QUIC to realize the eigenvalue signiture analysis of such protocols.
- •Support geneve decode, and create the link by the virtual link of geneve type.
- •Support to map the "reply code" of DNS transaction.
- •Support UPM offline suddenly and UPM close the autoSendConfig, nChronos would save the configuration UPM issued.
- •Support virtual link interface identification and expand the insert length to 20.
- •Support the console user password is locally encrypted and stored using a secure algorithm.
- •Support the user login security policy.
- •Supports the session timeout policy, which can be configured on the interface.
- •Support to add a communication address list when MAC address decode to IP calculate list.
- •Support network segment statistics table and summary statistics table Add the peak inbound and outbound network utilization.
- •Metadata supports data link layer protocol push.
- •Support millisecond-level analysis of sub-links.
- •Support to add proxy IP address to nChronos communication protocol.
- •Support Linux platform secure compilation options control.
- •Prohibit processes that provide services externally and can be remotely accessed from running as root (or equivalent) authority.
- •Support to add the TTL minimum times field to the permission IP session table.
- •Support to extract the return code of DB2 database.
- •The password must be changed upon the first login to the console and server web configuration pages.
Improvements
- •Returns the total number of items retrieved when retrieve.
- •Multiple processes are implemented according to modules to avoid the whole service crash caused by a single module problem and improve the running stability.
- •Could decode more information for SSL service like certificate and keys.
Bugs Fixed
- •Fixed problem of VoIP, CPU core usage high, splinlock high.
- •Data loss caused by an abnormal power failure.
- •Console report select send immediately, console crash.
Feb, 2022-Colasoft nChronos v6.2.2
New Features
- •Support abnormal access activity blocking.
- •Support data statistics and analysis for 5 minutes' time bucket.
- •Support data compression function based on link.
- •Support IBM_MQ protocol transaction decoding.
- •Support application binding DNS transaction.
- •Support burst alarm for application server.
- •Support to define applications based on protocols.
- •Add valley value and valley value baseline metrics for link, segment and application.
- •Add retransmission packets, retransmission rate, segment lost packets and segment packets rate metrics for DSCP statistics table.
Improvements
- •Optimized IPv6 packets deduplication algorithm.
Bugs Fixed
- •Fixed problem of inaccurate identification statistics in virtual network statistics.
June, 2021-Colasoft nChronos v6.2
New Features
- •Support no-transaction alarm.
- •Support SSL transaction parsing.
- •Support sublink alarm.
- •Baseline alarm supports continuous trigger count configuration.
- •Transaction log supports to export data in json format.
- •Virtual interface configuration supports specified identity layer.
- •Virtual sublink supports segment statistics.
- •Segment sublink supports TCP conversation and UDP conversation statistics.
- •Add IPv4 and IPv6 traffic statistics fields.
- •Add HTTPS, POP3_SSL, SMTP_SSL packets truncating rules.
Improvements
- •Optimized burst alarm algorithm.
- •Optimized max. response time and avg. response time algorithm.
- •Metric value corresponding to each alarm time bucket is added to alarm log.
- •QType field in DNS transaction analysis is mapped to a specific type.
Bugs Fixed
- •Repair name list distribution would fail.
- •ICMP field statistics were inaccurate.
- •Identification of IP geolocation was inaccurate.
November, 2020-Colasoft nChronos v6.1
New Features
- •Support PPPoE protocol decoding.
- •Support sFlow link type.
- •Support SRv6 SRH recognition.
- •Support storing link data for each link in different disk partitions.
- •Support query based on custom signatures and alarm rules.
- •Segment sublink supports bandwidth settings.
- •Add utilization metric for MAC address statistics views.
- •Add TCP segment loss rate and TCP retransmission rate metrics for IP statistics views.
- •TCP conversation start time, end time and duration support nanosecond.
Improvements
- •Add signature formats to signature alarm rule.
- •Optimize algorithm of transaction count, response timeout proportion and ACK delay.
- •Syslog sending supports GBK encoding.
- •API interface supports mutual authentication based on SSL certificate.
- •Optimize recognition of application layer protocols under netflow links.
Bugs Fixed
- •MPLS VPN labels and IPv6 labels in name table were not recognized.
- •Connection failure count in application statistics view was inaccurate.
June, 2020-Colasoft nChronos v6.0
New Features
- •Packets can be truncated based on applications, protocols, VLAN/VPN tags.
- •Abnormal access alarm supports MAC address.
- •Console configurations can be migrated.
- •TCP long connection can be identified.
- •No-traffic alarm is added for links, network segments, applications, and IPs.
- •Add version configuration for NetFlow interface configuration.
- •Add ICMP packet loss rate for link analysis.
- •Add reset rate, response rate and no response rate for application analysis.
- •Add transactions per second peak and transactions per second peak baseline for transaction analysis.
Improvements
- •Optimize server side identification rule.
- •Optimize performance of data retrieval.
- •Optimize metric baseline algorithm.
- •Abnormal access alarm supports alarm inhibition.
- •FTP protocol identification supports FTP_CTRL and FTP_DATA types.
Bugs Fixed
- •Inaccurate ICMP packets statistics.
- •Virtual interface display error on configuration page.
August, 2019-Colasoft nChronos v5.6
New Features
- •Physical address supports virtual interface configuration.
- •KAFKA interface support.
- •Traffic alarms support setting metric key value.
- •Add burst alarm type.
- •Netflow v1, v7 and Netstream v5, v9 support.
- •Add a port statistical table.
- •Automatic configuration backup.
- •Add new metrics, including bps 95p peak, client IP quantity, slow connections and 0 window delay.
- •Custom application analysis and application alarm for Netflow traffic.
- •Add Netflow interface statistical table and name table.
- •Analyzing TCP conversations in new window is now available.
- •Add drilldown for transaction alarm.
- •Add sublinks for VLAN, VXLAN, MPLS VPN, ISL VLAN and network segment.
- •Add custom analysis in new window.
- •Add statistical fields to IP Address, IP Conversation, and Application view.
- •Add 1-minute baseline for links and applications on two metrics, total conversations and new conversations.
- •Display interface type for virtual network statistics when network link type is one-way traffic mirroring.
- •DPDK port can be allocated with an IP address.
Improvements
- •Agent supports virtual interface configuration.
- •Virtual network statistics support multi-layer ID identification.
- •Web application supports path configuration.
- •VoIP conversation adds statistics for keep-alive packets.
- •Add TOS and TOS description for DSCP statistics table.
- •Display link running status on Console.
- •Network segment statistics are available for transaction statistics drilldown.
- •Optimize VoIP flow type and encoding.
- •VoIP conversation statistics support sub-node sorting.
- •The Port statistical table is modified as Service Port statistical table.
- •The segment-segment statistical table supports analysis in new window.
- •Single VoIP conversation flow supports analysis in new window.
- •Optimize the algorithm of bps for VoIP conversation, IP conversation and UDP conversation.
- •Optimize Netflow virtual interface configuration.
- •VLAN, VXLAN and MPLS VPN merge together as virtual network.
- •System network segment can be enabled or disabled.
- •The metrics in trend charts can be hidden for analysis in new window of single object.
- •Add a utilization trend chart for analysis in new window of virtual network objects.
- •Optimize Agent threading model.
- •Optimize performance self-adaption.
- •Increase the number of objects to be analyzed in new window to 30.
- •Transaction alarm configuration supports setting trigger dimension.
- •The trigger condition of Traffic Alarm supports range entry and multiple entries.
- •nChronos Console supports 64-bit operating systems.
- •Optimize the default fields on IP Address view and IP Conversation view for Netflow links and one-way traffic mirroring links.
- •Optimize data push policy.
- •Modify agent service name as "csagent".
Bugs Fixed
- •White lists didn't work when black and white lists exist at the same time.
- •nChronos Server cannot be accessed from web when the IP address of management port is modified.
- •nChronos server may crash when UPM retrieves and downloads packets.
- •1-minute data push was delayed.