sFlowTrend release notes

version 3.0.01

Released 09-Oct-2008

  • Added support for running sFlowTrend behind a web proxy server. If running sFlowTrend as an application,the proxy can be configured in Tools>Options>Advanced. If running sFlowTrend-Pro as a service, the proxy for the server is configured during installation of the server, and the client is configured through Tools>Options>Advanced.

version 3.0

Released 12-Aug-2008

This is a major release of sFlowTrend, introducing the option of running sFlowTrend-Pro as a service. When running sFlowTrend-Pro as a service, the server runs continually in the background and the sFlowTrend-Pro local or remote client is used as the GUI to access the collected data.

The free version of sFlowTrend can be only be run as an application.

Other new features in sFlowTrend v3.0 include:

  • User access control
  • History navigation

version 2.1

Released 25-Sep-2007

  • Introduced support for sFlow for wireless.

version 2.0.04

Released 26-Jul-2007

  • Resolved an issue where multicast or broadcast traffic discarded by a switch or router could cause sFlowTrend to stop receiving further samples.

version 2.0.02

Released 05-Jun-2007

  • Resolved an issue with determing correct link speed with higher rate links. This could have impacted enabling of sFlow through SNMP on these links, as well as reporting the speed incorrectly.

version 2.0

Released 18-May-2007

  • Release of sFlowTrend v2.0.

version 2.0-beta-1.11

Released 11-May-2007

  • Added on-line help.
  • Fixed an issue with enabling sFlow through SNMP on certain switches.

version 2.0-beta-1.10

Released 04-May-2007

  • Fixed an issue where the built-in web server did not work correctly.
  • Improved the charting for flows that are routed across a switch being monitored.
  • Resolved an issue where the 'all interfaces' view displayed no data on some manufacturer's switches.

version 2.0-beta-1.07

Released 28-Mar-2007

  • The Thresholds tab now includes automatic root cause analysis of threshold. This helps you to quickly determine the cause of unusual network traffic patterns.
  • The Chart tab includes a progress indicator when a new chart is loaded or a chart is updated. This indicator allows the loading of a chart to be cancelled.
  • Switches can now be enabled and disabled from the control bar in the Chart and tab.
  • Resolved a problem with ethertype being set incorrectly in layer 2 flows.
  • Resolved a problem with the incorrect scale factor being used for frames/s charts for interval sizes > 1 minute.

version 2.0-beta-1.06

Released 22-Jan-2007

  • Charts tab now included custom filtering for top N charts. The filter can be any JavaScript boolean expression. JavaScript properties available for filtering can be found in the Filter bar by clicking on Edit.
  • Legend items in top n charts are now clickable, allowing drilldown on selected addresses and ports etc.

version 2.0-beta-1.05

Released 09-Jan-2007

  • The legend in the Counters chart is now selectable. Clicking on a legend entry causes only that statistic to be displayed.
  • Drill-down from the dashboard and thresholds now selects the appropriate statistics in the Counters chart.
  • IP addresses for sources and destinations shown in charts can be optionally resolved back to hostnames. If this causes excessive delay in creating a chart, the feature can be turned off using Tools > Options > Advanced: "Resolve IP addresses to hostnames in charts".
  • The currently selected time in all charts is now retained when creating a new chart.
  • Corrected an issue where the first switch to be added would not be enabled correctly through SNMP.

version 2.0-beta-1.03

Released 29-Nov-2006

This is a major new release of sFlowTrend, incorporating several new features:

  • A new dashboard, which allow you to find quickly to top contributors to network traffic or errors, and drill down to the relevant chart.
  • Configurable thresholds, which help you find network problems quickly by specifying custom bounds for network performance per interface. The top-level threshold status is also shown on the dashboard.
  • A threshold tab, which allows you to view and configure the thresholds for any interface.
  • Also incldued are many internal enhancements, particularly for performance and memory utilization.
  • An integration interface is offered, to allow custom integration between sFlowTrend and other applications, such as switch device managers. sFlowTrend can be controlled by a web interface, available at http://localhost:8087. Please see Integrating sFlowTrend-Pro with other applications for more details.

version 1.2

Released 15-June-2006

  • Additional charts are now available:
    • Top source VLANs.
    • Top destination VLANs.
    • Top inter-VLAN pairs.
  • Improved startup performance.
  • Resolved a minor problem with IPv6 protocol decodes.

version 1.1

Released 30-May-2006

  • Several new charts are now available, including three which are security oriented. The new charts are:
    • Top source-destination pairs (top communicating source address/destination address pairs).
    • Top connections (similar to top source-destination flows, but includes both directions of a connection).
    • Top servers.
    • Top clients.
    • Top protocols.
    • Most connected sources (top sources by the number of destinations connected to. This is a security oriented chart, also refered to as 'fan-out', and can be used to find hosts exhibiting scanning behaviour).
    • Most connected destinations (top destinations by the number of sources that have connected. This is a security oriented chart, also refered to as 'fan-in', and can be used to find hosts that might be victims of distributed denial-of-service attacks).
    • Most popular protocols (top destination protocols by number of source-destination pairs. This is a security oriented chart, which can be used to find quickly protocols that are suspected of being used in scanning behaviour).
  • Charts can now be generated for all the interfaces on a switch, as well as specific interfaces. Select 'all' in the interface list for this.
  • Activity 'LED', which shows incoming sFlow samples by flashing. This quickly indicates if sFlow is being received by sFlowTrend. If the LED is not flashing, then a firewall might be blocking the sFlow port (UDP:6343).
  • Hovering the mouse over the activity LED shows the current incoming sample rate.
  • Improved handling of multicast traffic.
  • Improved accuracy of charts.

version 1.0.1

Released 17-Apr-2006

  • Resolved an issue where IPv6 addresses were not processed correctly.
  • Performance and memory usage enhancements.

version 1.0

  • Initial release

sFlow enabled