Release notes

Version 25.1.1   18th March 2025

1. Fixed an issue that prevented backups from starting.
   To prevent any data loss, we recommend you upgrade as soon as possible.

Version 25.1   10th March 2025

1. Upgraded the operating system to FreeBSD 13.4-RELEASE-p4:
   • Buffer overflow in some filesystems via NFS
   • Unprivileged access to system files
   • Multiple vulnerabilities in OpenSSH
2. Updated third-party packages.
3. TOS Discovery
   AKIPS devices can be automatically exported to Tufin Orchestration Suite (TOS) for use in SecureTrack. See Admin->General->TOS Discovery to configure.
4. Fixed the navbar loading very slowly.
5. Fixed filenames with special characters preventing backups from starting.
6. Fixed exported Availability graphs sometimes being empty.
7. Fixed Device Editor actions missing for some users.
8. Fixed profiles gaining access to extra tools when “Include All Groups” was enabled.
9. Significantly improved poller database performance.
10. Added Accedian SFP report.
11. Added SNMP engine uptime report.
12. Added/updated compiled MIBs:
    • Avaya
    • CodeBlue
    • Microchip Microsemi
    • ReadyLink
    • Smartoptics

Version 24.8   18th December 2024

1. Admin-level profiles
   User profiles can now be assigned admin rights. Previously, the admin user had special permission to view all data and make any changes. Now any profile can be given access to any selection of administration tools.
2. Config Searcher
   Config Searcher is a new tool that enables you to search for given content across configurations that have been saved by Config Crawler. Searches can be performed on the most recent configuration of many devices or historically on a single device.
3. Custom Dashboards
   Custom Dashboards allow users to stitch together relevant reports into a single dashboard. Dashboards are viewable under the Dashboards menu, and configurable in Admin->Dashboards.
4. Added/updated compiled MIBs:
   • cPacket
   • Toshiba

Version 24.7   27th November 2024

1. Upgraded the operating system to FreeBSD 13.4-RELEASE-p2:
   • Release notes
   • bhyve(8) out-of-bounds read access via XHCI emulation
   • Integer overflow in libnv
   • Multiple issues in the bhyve hypervisor
   • Unbounded allocation in ctl(4) CAM Target Layer
   • Certificate revocation list fetch(1) option fails
2. Boot on ZFS
   Modernise and unify the boot system to use ZFS. Previously AKIPS used two UFS partitions for the operating system and packages, combined with a ZFS partition for the database and configuration files. This release moves to ZFS for the entire stack.
   This is a significant change to the way AKIPS boots. It’s important that you have recent backups before upgrading.
3. Support UEFI booting
   In addition to the existing BIOS booting, UEFI is now supported. This is needed for modern hardware that does not support “legacy” BIOS booting.
   Note: An existing installation will never change its boot firmware.
4. Hybrid boot media
   The “Install” ISO is now a hybrid image that can be burned to a memstick. The dedicated memstick image option has been removed.
5. Fixed invalid OIDs crashing the poller.
6. Added port number to Opengear Serial Ports report.
7. Added Meinberg reports.
8. Added Palo Alto Log report.
9. Added UPS Device report.
10. Added/updated compiled MIBs:
    • Arista
    • Aviat
    • Cisco Products
    • Extreme Wireless
    • Mitsubishi
    • Pure Storage
    • Safran

Version 24.6   26th September 2024

1. Upgraded the operating system to FreeBSD 13.3-RELEASE-p7:
   • bhyve(8) out-of-bounds read access via XHCI emulation
   • Integer overflow in libnv
   • Incorrect ICMPv6 state handling in pf
2. Fixed broken index in Acme Packet requests stopping the SNMP poller.

Version 24.5   11th September 2024

1. Upgraded the operating system to FreeBSD 13.3-RELEASE-p6:
   • umtx Kernel panic or Use-After-Free
   • bhyve(8) privileged guest escape via USB controller
   • Multiple issues in ctl(4) CAM Target Layer
   • Multiple vulnerabilities in libnv
   • OpenSSH pre-authentication async signal safety issue
   • NFS client accepts file names containing path separators
   • ktrace(2) fails to detach when executing a setuid binary
   • pf incorrectly matches different ICMPv6 states in the state table
   • cron(8) / periodic(8) session login
2. Updated third-party packages, including:
   • postgresql16-client
3. Allowed Config Crawler to run even with configuration warnings.
4. Improved Cisco WAP IP report.
5. Fixed an issue where backups could be duplicated.
6. Fixed Status Alerts wait rules improperly triggering when flapping.
7. Added Chassis report for CyberPower.
8. Added text decoding for Palo Alto traps.
9. Added/updated compiled MIBs:
   • Fortinet Fortigate

Version 24.4   2nd July 2024

1. Upgraded the operating system to FreeBSD 13.3-RELEASE-p4:
   • OpenSSH pre-authentication remote code execution

Version 24.3.1   26th June 2024

1. Upgraded the operating system to FreeBSD 13.3-RELEASE-p3:
   • Release notes
   • Clang crash when certain optimization is enabled
   • High CPU usage by kernel threads related to ZFS
   • LDNS uses nameserver commented out in resolv.conf
   • Lock order reversal in killpg causing livelock
2. Updated third-party packages.
3. Added authentication services to Settings History.
4. Improved reliability of Backups.
5. Fixed Config Crawler not handling base64 passwords.
6. Fixed Config Viewer API not allowing case-insensitive device names.
7. Added Aruba PSU report.
8. Added Aruba Fan report.
9. Added Check Point Application Memory report.
10. Added Infinera Client report.
11. Added Infinera Fan report.
12. Added Infinera PSU report.
13. Improved Cisco WAP location.
14. Include “other” types in Storage report.

Version 24.2   16th May 2024

1. Upgraded the operating system to FreeBSD 13.2-RELEASE-p11:
   • Multiple vulnerabilities in unbound
   • TTY Kernel Panic
   • Insufficient barriers in WireGuard if_wg(4)
2. Updated third-party packages.
3. Added Aruba VSF Stack reports.
4. Added Chatsworth PDU reports.
5. Added Opengear Power Supply reports.
6. Added Opengear Serial Ports reports.
7. Added neighbors graph to Cisco EIGRP Neighbor Count report.
8. Reintroduced ability to use empty commands in Config Crawler.
   This fixes a regression introduced in v24.1.
9. Fixed scale in Proxim Link Tx Rate reports.
10. Fixed state changes not be categorised correctly for Cisco EIGRP Router ID Type and Siklu MultiHaul Bridge Status.
11. Fixed regexes in Alerting incorrectly parsing escape characters.

Version 24.1   26th February 2024

1. Upgraded the operating system to FreeBSD 13.2-RELEASE-p10:
   • bhyveload(8) host file access
   • jail(2) information leak
   • Timezone database information update
   • Login class resource limits and CPU mask bypass
   • kqueue_close(2) page fault on exit using rfork(2)
2. Updated third-party packages.
3. Added ability to perform multiple “captures” in a Config Crawler script.
4. Made port configurable in Config Crawler.
5. Fixed spurious ZFS warnings preventing backups from starting.
6. Added Proxim reports.
7. Added/updated compiled MIBs:
   • Chatsworth
   • Fortinet

Version 23.6   21st December 2023

1. Upgraded the operating system to FreeBSD 13.2-RELEASE-p9:
   • Prefix Truncation Attack in the SSH protocol
2. Updated third-party packages.

Version 23.5   13th December 2023

1. Upgraded the operating system to FreeBSD 13.2-p8:
   • Release announcement
2. Updated third-party packages.
3. Added support for SNMP using SHA-512.
4. Added Impact Assessment report.
5. Added option to limit concurrent SMTP connections.
6. Fixed Switch Port Mapper requests running after browser had closed.
7. Fixed Integration proxy settings not being applied correctly.
8. Automatically import IO::Socket::SSL for site scripts. This fixes an issue where attempting to use this module would fail.
9. Fixed Integrations failing when using “wait” rules.
10. Added/updated compiled MIBs:
    • Cyberpower
    • H3C
    • Janus
    • Proxim

Version 23.4   28th September 2023

1. Upgraded the operating system to FreeBSD 12.4-p5:
   • Wi-Fi encryption bypass
   • pf incorrectly handles multiple IPv6 fragment headers
   • Network authentication attack via pam_krb5
   • Potential remote code execution via ssh-agent forwarding
   • Remote denial of service in IPv6 fragment reassembly
2. Updated third-party packages.
3. Added support for SNMP using SHA-256.
4. Updated third-party Integrations for status alerting:
   • Moved Integration Settings to Admin->Alerting menu.
   • Add Microsoft Teams integration.
   • Add test button when saving credentials.
   • Automatically resolve events in Opsgenie, PagerDuty, and ServiceNow.
5. Fixed incorrect shutdown of web server SSL connections.
6. Added protections against illegally long OIDs.
7. Added toggle for CDP collection:
   • CDP and LLDP options are available in Admin->Discover/Rewalk.
8. Added Accedian inventory report.
9. Added external environmental sensors to APC Sensors report.
10. Added Aruba PoE Ports report.
11. Split AVTECH ROOMALERT4E Temperature into Temperature and Digital reports:
    • Fixed scale for internal temperature sensor.
12. Added Cisco EIGRP Neighbor Count report.
13. Renamed Cisco PoE report to Cisco PoE Ports.
14. Fixed Cisco Smart Licence Auth Expire Time displaying wrong Expire Time.
15. Updated F5 Virtual Client report:
    • Added VIP, Port, Protocol Number, Protocol and Default Pool.
16. Added generic report for NTP Association.
17. Added new Events/Alarms report for Sonus.
18. Added/updated compiled MIBs:
    • ADVA
    • Accedian
    • Cyan
    • Versa

Version 23.3   26th July 2023

1. Upgraded the operating system to FreeBSD 12.4-p3.
   • Network authentication attack via pam_krb5
   • ssh-add does not honor per-hop destination constraints
   • Timezone database information update
   • mpr(4) may fail to initialize devices
2. Updated third-party packages, including:
   • libX11-1.8.6,1
3. Added interface dark mode. Configure interface theme in User menu -> Appearance.
4. Increased HTTP Strict Transport Security header from 90 to 365 days.
5. Added Liebert reports:
   • NXR
   • NXR Phase
   • NXR Stats
6. Added Radware DefencePro CPU graphs.
7. Added/Updated compiled MIBs:
   • Ciena
   • Spectra Logic

Version 23.2   3rd May 2023

1. Upgraded the operating system to FreeBSD 12.4-p2.
   • Release notes
   • Errata
2. Updated third-party packages.
3. Updated PoE reports with more relevant columns.
4. Fixed an issue where listing local backups was disabled.
5. Added resizeable split panes to more pages.
6. Added Blue Coat reports:
   • HTTP Client Statistics
   • Memory Pressure
7. Added/Updated compiled MIBs:
   • AKCP

Version 23.1   8th March 2023

1. Upgraded the operating system to FreeBSD 12.3-p12.
   • Multiple vulnerabilities in OpenSSL
   • GELI silently omits the keyfile if read from stdin
   • Timezone database information update
   • ixgbe incorrectly reports input errors for 82599ES
2. Updated third-party packages.
3. Updated Bootstrap.
4. Added "Slot" and "Serial Number" columns to Cisco FRU Module Status report.
5. Added/Updated compiled MIBs:
   • Aruba
   • Bluecat
   • Lustre

Version 22.10   15th Decemeber 2022

1. Upgraded the operating system to FreeBSD 12.3-p10.
   • Stack overflow in ping(8)
   • Regression in Heimdal KDC
2. Added internal temperature statistics to Avtech 4E Temperature report.
3. Added Radware DefencePro reports.
4. Added SEL reports
   • Diagnostics
   • Power Supply
   • Satellite Information
   • Satellite Position
   • System Information
   • Temperature
5. Added Siklu Bridge report.

Version 22.9   30th October 2022

1. Upgraded the operating system to FreeBSD 12.3-p9.
   • Multiple vulnerabilities in Heimdal
   • Timezone database information update
2. Updated third-party packages, including:
   • pixman 0.42.2
3. Updated MAC vendor codes for Switch Port Mapper.
4. Added APC SmartUPS 3000 to APC Sensor report.
5. Added Cisco Gobal URPF Report.
6. Added Cisco Interface URPF Report.
7. Fixed temperature scale in Teltonika modem report.
8. Fixed NetFlow time-series graphs couldn't be saved.

Version 22.8   19th October 2022

1. Updated third-party packages, including:
   • expat 2.4.9
2. Added Harmony Enhanced MC devices to Dragonwave Radio report.
3. Added Riverbed Steelhead System report.
4. Added navbar warning when SSL certificate is nearing expiration.
5. Fixed Brocade PoE Power report missing drilldown graphs.
6. Added/Updated compiled MIBs:
   • Opengear
   • Siklu Radio Bridge

Version 22.7   19th September 2022

1. Upgraded the operating system to FreeBSD 12.3-p7.
   • zlib heap buffer overflow
   • Timezone database information update
2. Updated third-party packages.
3. Added Cisco PoE report.
4. Added Citrix Netscaler ICA sessions report.
5. Added Netscaler Services report.
6. Added Teltonika Device and Modem reports.
7. Added kind attribute to alert site scripting parameters.
   This can be used to programmatically determine which kind of alert fired the site script.
8. Fixed an issue where packet captures continued to run in the background after using SNMP walk tool.
9. Added/Updated compiled MIBs:
   • cPacket
   • Monico
   • Squid
   • ZPE Systems

Version 22.6   28th July 2022

1. Updated third-party packages.
2. Added F5 APM Lease Pool report.
3. Added Palo Alto TopN Graphs
   • IP Fragments Received
   • TCP Action Close
   • TCP Action Reset
   • TCP No Match
   • TCP Out of Window Drops
   • TCP Reassembly Errors
   • TCP Denied Errors
4. Added Siklu RF Status report.
5. Added Service Groups column to Cisco CBQ report.
6. Added Extreme Enterasys PoE Ports report.
7. Added Extreme PoE Ports report.
8. Added PoE report.
9. Added PoE Ports report.
10. Added MRV Laser Lane reports.
11. Fixed Aruba TopNGraph Controller Num APs menu link.
12. Fixed incorrect Bluecat TopN Report heading.
13. Updated Palo Alto Global Sessions report
    • Suppressed
    • Strict
14. Updated Global IP/TCP Statistics report
    • TCP Action Reset
    • TCP Denied Errors
15. Added/Updated compiled MIBs:
    • Orolia
    • Siklu
16. SHA-256 checksums:
    • e7c1f4abf09f87aa5e307afc0b1fdb1fda3898cba025d67ff0757e4a0ebc7a51   Install ISO
    • f74596a3b2676bbc20d9b9f57e3f902ab0cbfac6d9917485f3ce8f08f8e6f348   Install Memstick

Version 22.5   8th June 2022

1. Added Aruba ClearPass Traffic report.
2. Added model number to Aruba ClearPass System report.
3. Added CPU utilisation for Extreme Summit series in Extreme CPU report.
4. Split Juniper Laser report into "Laser Interfaces" and "Laser Lanes"
   • Changed default sort column to Tx Current in Laser Interfaces report.
5. Added/Updated compiled MIBs:
   • Infinera
   • RFC
   • Rittal
   • SEL
   • Solid Optics
   • Teltonika
   • VMware VeloCloud
   • Western Telematic
6. Supported MIB Objects:
   • 532 Counters
   • 503 Enumeration
   • 918 Gauges
   • 215 Integers
   • 973 Other
   • TOTAL: 3141
7. Reports:
   • 603 Tables
   • 988 Graphs
   • 81 Other
   • TOTAL: 1672
8. Compiled MIBs:
   • 5690 MIBs
   • 736297 Objects
9. SHA-256 checksums:
   • 3c2b10644b0b2a20d64872b562712d29d8887f739f583612469004e17979249a   Install ISO
   • 91f7e5f4bb2e089c966ad35e42a316d7eb7638aecd461fd9d864da1653375127   Install Memstick

Version 22.4   9th May 2022

1. Upgraded the operating system to FreeBSD 12.3-p5.
   • Multiple WiFi issues
   • OpenSSL certificate parsing infinite loop
   • Potential jail escape vulnerabilities in netmap
   • Bhyve e82545 device emulation out-of-bounds write
   • mpr/mps/mpt driver ioctl heap out-of-bounds write
   • 802.11 heap buffer overflow
   • zlib compression out-of-bounds write
   • freebsd-update creating erroneous boot environments
   • Timezone database information update
2. Updated third-party packages.
3. Fixed spurious "Database error" warnings.
4. Added ifAdminStatus field to Unused Interfaces web API.
   This is configurable with a URL parameter, see Admin -> API -> Web API Settings.
5. Added Avtech reports:
   • Switch State 4E
   • Temperature 4E
6. Added EfficientIP reports:
   • Apache
   • Database
   • Database Traffic
   • DHCP MS
   • DHCP Stats
   • DHCP Traffic
   • DNS Stats
   • DNS Traffic
   • Guardian
   • HTTP Traffic
   • IPM Server
   • Memory
   • NTP
   • Quagga
   • Sendmail
   • SNMP
   • SNMP Traffic
   • SOLIDserver
   • SSH
   • Syslog
   • TFTP
7. Added/Updated compiled MIBs:
   • Infinera
   • Mikrotik
8. Supported MIB Objects:
   • 531 Counters
   • 503 Enumeration
   • 913 Gauges
   • 213 Integers
   • 969 Other
   • TOTAL: 3129
9. Reports:
   • 601 Tables
   • 983 Graphs
   • 81 Other
   • TOTAL: 1665
10. Compiled MIBs:
    • 5602 MIBs
    • 725995 Objects
11. SHA-256 checksums:
    • 4f4c4b0148b21879050eae582a5e50134c8f5bdd34e0efaaeb965fd5acfd5835   Install ISO
    • 1ff9f93b073a026ae4385795d763dc35bcb73730bcef31c8f82a1d30648d8b80   Install Memstick

Version 22.3   9th March 2022

1. Upgraded the operating system to FreeBSD 12.3-p2.
   • Regression in i386 TLB invalidation logic
2. Updated third-party packages.
3. Added ability for Config Crawler to authenticate using public-key crypto.
4. Added extra validation to Syslog/Trap databases.
5. Added Juniper reports:
   • Chassis
   • Operation Status
   • Redundancy
   • Version
6. Fixed empty rows appearing in NetFlow CSV export.
7. Fixed "Start Time" being displayed incorrectly in SmartOptics Alarm report.
8. Supported MIB Objects:
   • 509 Counters
   • 485 Enumeration
   • 845 Gauges
   • 213 Integers
   • 964 Other
   • TOTAL: 3016
9. Reports:
   • 578 Tables
   • 918 Graphs
   • 81 Other
   • TOTAL: 1577
10. Compiled MIBs:
    • 5599 MIBs
    • 725569 Objects
11. SHA-256 checksums:
    • 3c9815b026ae3ff60b266a4347db12ce681d353ea6b15dcd116d680d8b62be5c   Install/Upgrade ISO
    • 57e1bfe6456e45f70b0b75b24e082dcc98586c13e1b39f2adcaa8669408e5c6b   Install Memstick

Version 22.2   2nd February 2022

1. Upgraded the operating system to FreeBSD 12.3-p1.
   • FreeBSD 12.3-RELEASE Release Notes
   • Incorrect XSAVE state size
   • vPCI compatibility improvements with certain Hyper-V releases
   • Incorrect PCID mode invalidations
   • Incorrect fragmented IPv4 packet handling in libalias
2. Updated third-party packages.
3. Added Alpha Rectifier System report.
4. Added DPS Telecom reports:
   • RTU Point
   • RTU Display
5. Added TopN graphs for Extreme/Rapid City memory.
6. Added Fortinet ADC High Availability report.
7. Added Socomec reports:
   • Battery
   • UPS
8. Added VLAN IDs to Switch Port Mapper reports.
9. Fixed Config Crawler authentication rate limiting.
   This new limit prevents too many connections from starting up and timing-out while waiting for authentication.
10. Fixed DNS database validation stalling backups.
11. Fixed Cisco FRU Fan Status "down" incorrectly marked as a good state.
12. Supported MIB Objects:
    • 509 Counters
    • 483 Enumeration
    • 845 Gauges
    • 212 Integers
    • 956 Other
    • TOTAL: 3005
13. Reports:
    • 574 Tables
    • 918 Graphs
    • 81 Other
    • TOTAL: 1573
14. Compiled MIBs:
    • 5599 MIBs
    • 725569 Objects
15. SHA-256 checksums:
    • 5fe8770f2fdd3f50b18532949be325fd915bcf35f1156224a4d7ce7711f5926a   Install/Upgrade ISO
    • abe4d90d01c10c076f3c07d9db4f829b0bf57b6722d8c86bfa4175b199dea422   Install Memstick

Version 22.1   12th January 2022

1. Upgraded the operating system to FreeBSD 12.2-p11.
   • Root certificate bundle update
   • Fix kernel panic in vmci driver initialization
   • Timezone database information update
2. Updated third-party packages.
3. Updated Aruba MIBs.
4. Added Aruba ClearPass reports:
   • System
   • Authentication
   • Memory
   • Storage
5. Added Galleon NTS reports:
   • Model
   • Firmware
   • GPS
   • Radio
   • Daemon States
6. Added Oracle Acme Packet reports:
   • Packet Codec
   • Packet Combined Session Agent
   • Packet Combined Sessions
   • Packet Realm Stats
   • Packet SIP Session Agent
   • Packet SIP Sessions
   • Packet SIP
   • Packet System Util
   • Packet System
   • Packet Transcode
7. Added ability to nest super groups in Manual Grouping.
8. Added CSV output of NetFlow reports.
9. Added show_headers parameter to http_result().
   Use this to get the HTTP status code and headers from external web requests.
10. Added toggle for LLDP collection.
    This feature is now opt-in. LLDP collection can use a large amount of disk space when monitoring core devices.
    It can be enabled under: Admin -> General -> Miscellaneous Settings.
11. Improved error messages in Config Crawler.
12. Improved reliability of database validation.
13. Fixed Config Crawler content downloading with the wrong filename.
14. Fixed Scheduled Reports using Web APIs requiring username.
15. Fixed Settings History restore downloading garbage file.
16. Fixed Site Script line number mismatch when debugging.
17. Fixed corrupt degree symbol (°) appearing in graphs.
18. Supported MIB Objects:
    • 509 Counters
    • 479 Enumeration
    • 831 Gauges
    • 212 Integers
    • 951 Other
    • TOTAL: 2982
19. Reports:
    • 568 Tables
    • 902 Graphs
    • 81 Other
    • TOTAL: 1551
20. Compiled MIBs:
    • 5599 MIBs
    • 725569 Objects
21. SHA-256 checksums:
    • 09ee60a86e5a5843b8d9b4de495de16e5d055393249db600baf069f76cef3623   Install/Upgrade ISO
    • da052aa7f1fe5680067e685e5c7fd339779231194e34d2b8d0a1236b2f1defc3   Install Memstick

Version 21.7.1   13th October 2021

1. Fixed authentication failures occurring when connecting to backup servers.
   This fixes a regression introduced in v21.7.
2. Reverted a change to non-admin users' profiles that could itself cause corruption.
   This fixes a regression introduced in v21.7.
3. SHA-256 checksums
   • 3724c01d318a6c4508f7876ea4b0f620fbfccd3bbec7c21cdda7ab34c97ba766   Install/Upgrade ISO
   • 22780691335a2be2e85d299104f578c8d0a2744f1b3118826106b2a1684703ff   Install Memstick

Version 21.7   12th October 2021

1. Upgraded the operating system to FreeBSD 12.2-p10.
   • Missing error handling in bhyve(8) device models
   • Remote code execution in ggatec(8)
   • libfetch out of bounds read
   • Multiple OpenSSL vulnerabilities
   • Multiple vulnerabilities in OpenSSL
   • libcasper assertion failure
   • Linux compatibility layer futex(2) system call vulnerability
   • OpenSSL 1.1.1e API functions not exported
   • Fix NVMe iovec construction for large IOs
2. Updated third-party packages.
3. Fixed graph exports failing.
4. Fixed incorrect type used in Cisco WLAN Access Point Radio report.
5. Fixed a bug where non-admin users' profiles are corrupted when auto grouping fails to finish.
   This change was reverted in 21.7.1.
6. Fixed a bug that caused threshold alerts to be incorrectly marked as duplicated and skipped.
   This fixes a regression introduced in v21.6.
7. Added mechanism for removing specific Config Crawler data.
8. Added VLAN ID to sp2vlan Web API endpoint.
9. Hardened SSH server ciphers and algorithms.
10. Added Cisco Error-Disable report.
    This is an opt-in feature, and can be enabled in Discover/Rewalk settings.
11. Added support for loading iframes without using cookies.
    Supplying username/password as query parameters is now required for loading content on external hosts.
    https://akips.example.com/cgi?...username=guest;password=secret
12. Added Cisco Discovery Protocol (CDP) report:
    • Local Interface
    • Remote Device
    • Remote Address
    • Remote Interface
    • Remote Platform
    The data for this report is collected once an hour.
13. Added Link Layer Discovery Protocol (LLDP) report:
    • Local Interface
    • Remote Device
    • Remote Address
    • Remote Interface
    The data for this report is collected once an hour.
14. Added Cisco report for Memory High Capacity:
    • Util
    • Used
    • Free
    • Total
15. Added SD WAN report for Citrix:
    • Path Name
    • Bytes
    • Bytes Dropped
    • Packets
    • Packets Dropped
    • Path State
16. Supported MIB Objects:
    • 492 Counters
    • 469 Enumeration
    • 809 Gauges
    • 207 Integers
    • 933 Other
    • TOTAL: 2910
17. Reports:
    • 553 Tables
    • 892 Graphs
    • 81 Other
    • TOTAL: 1526
18. Compiled MIBs:
    • 5596 MIBs
    • 725499 Objects
19. SHA-256 checksums
    • 1ea4fb178196bafae89db1cdaafc817115a3f899f7123bc75d2d73435a14ff48   Install/Upgrade ISO
    • 10f90b09a4ae763793628b90fb7968e0b0eb3069b7f7fe2cb5efa6936949f57c   Install Memstick

Version 21.6.1   20th August 2021

1. Fixed Cisco BGP Peer Prefix Stats report.

   In v21.6 we changed the cbgpPeerAcceptedPrefixes type to match CISCO-BGP4-MIB. This was not the correct type, and we inadvertently broke this report.
   Customers who upgraded to v21.6 will need to restore from a prior backup to retrieve historic cbgpPeerAcceptedPrefixes data.

2. SHA-256 checksums
   • 1a9b67aa84dda6a74c88af2ec8ca1df7f01bcb6672df4e1967addd69ec897c02   Install/Upgrade ISO
   • f629f3958b67de86590f7c2b291aed69f0f056c1d6a23dc4dd2929d4711e6c4c   Upgrade ISO
   • e8aa7bee8382d2c2923ba545fff8a3bb2f71e59f5a91327db78f94ff7188846f   Install Memstick

Version 21.6   12th August 2021

1. Updated third party packages.
2. Limited the number of simultaneous Config Crawler authentication requests.
3. Fixed IPv6 polling outages occurring for two minutes every two minutes.
   This fixes a regression introduced in v21.3.
4. Changed CISCO-BGP4-MIB cbgpPeerAcceptedPrefixes from gauge to counter.
   This fixes Cisco BGP Prefixes Accepted graph.
5. Changed Aruba Radius Authentication report.
   Success, Failure and Count are now shown as totals.
6. Fixed incorrect scale for Avtech Temperature report with ROOMALERT3E-MIB values.
7. Added mechanism for dropping duplicate threshold alerts created by different rules.
8. Added Cisco Smart Licensing report
   • Registration Name
   • Registration Status
   • Registration Success
   • Authorization Expire Time
   • Authorization Renew Success
9. Added CPU Busiest Group Util to Nokia CPU report
10. Added/updated compiled MIBs:
    • Aviat Networks
    • Exalt Communications
    • Palo Alto
11. Supported MIB Objects:
    • 487 Counters
    • 467 Enumerations
    • 806 Gauges
    • 206 Integers
    • 921 Other
    • TOTAL: 2887
12. Reports:
    • 547 Tables
    • 886 Graphs
    • 81 Other
    • TOTAL: 1514
13. Compiled MIBs:
    • 5596 MIBs
    • 725499 Objects
14. SHA-256 checksums
    • 67d51aff9e8dd94ceb584b6356344090d79d32ea0f9910a0cf3f5dfda9554c7b   Install/Upgrade ISO
    • 530ecf6dc7efc5b08b41a1aee34883b84b46ab1db83b578e297e8257b2a4ee2c   Install Memstick

Version 21.5   21st June 2021

1. Upgraded the operating system to FreeBSD 12.2-p8.
   • Incorrect validation in rad_get_attr(3)

   This fixes a regression to RADIUS authentication introduced in 21.4.

2. Clarified Enlogic input/circuit breaker menu items.
3. Limit Enlogic devices to 5 OIDs per request.
4. SHA-256 checksums
   • 0e9a0db4a6db807ae9a8161ad596b42c8a51f15f26a704c7f7906810c61bf13c   Install/Upgrade ISO
   • e0546e9438fe5bce9df67503853f867e6c8f5348883356ea77a29e612813812d   Install Memstick

Version 21.4   14th June 2021

1. Upgraded the operating system to FreeBSD 12.2-p7.
   • SMAP bypass
   • Missing message validation in libradius(3)

2. Added button for downloading a summary of group membership statistics.

   This will be used to help development of an upcoming redesign of the grouping database.

   To help, download your report in Admin > System > System Log Viewer. Click the Entity-Group Statistics button and upload the result at akips.com/upload.

3. Fixed a critical performance issue when updating interface speed groups (ifspeed_XXX).

   The Tune Interface State feature runs every 5 minutes. If any interfaces come up, the interface speed is collected and updated, which requires updating the ifspeed groups.

   To update ifspeed groups, previously we took a "sledgehammer" approach of clearing all ifspeed groups, then running bulk commands to assign interfaces back into the appropriate groups. For large configurations, this could take many minutes to run.

   This has been changed to only update interfaces which have recently changed speed.

4. Removed upsAdvTestDiagnostics from APC UPS Test report.

   It is not appropriate to be alerting on that OID as it will always return the "noTestDiagnostics" value.

5. Updated Avtech Temperature report with ROOMALERT3E-MIB values.
6. Added Avtech Switch State report
   • Label
   • Value
7. Added Enlogic Input Phases report
   • Voltage
   • Voltage State
   • Current
   • Current State
   • Apparent Power
8. Added Enlogic Circuit Breakers report
   • Name
   • Current
   • State
9. Added Enlogic Temperature report
   • Temperature
   • State
10. Added Enlogic Humidity report
    • Humidity
    • State
11. Added Nokia CPU report
    • Overall Idle
    • Busiest Core Util
12. Added Nokia Memory report
    • Util
    • Used
    • Allocated
13. Added Nokia Temperature report
    • Sensor
    • Description
14. Added Umbrella CPU report
    • User
    • System
    • Idle
15. Added Umbrella Disk report
    • Path
    • Util
    • Used
    • Available
    • Total
16. Added Umbrella Memory report
    • Util
    • Used
    • Free
    • Total
17. Supported MIB Objects:
    • 486 Counters
    • 464 Enumerations
    • 805 Gauges
    • 206 Integers
    • 919 Other
    • TOTAL: 2880
18. Reports:
    • 546 Tables
    • 885 Graphs
    • 81 Other
    • TOTAL: 1512
19. Compiled MIBs:
    • 5524 MIBs
    • 721879 Objects
20. SHA-256 checksums
    • 9d450d063ba1597929436a9d328ae1f99cbf0073e02cf6d0fcbe4253b9a97f97   Install/Upgrade ISO
    • dec36d5928120f8d82ff14f9611175562e76ccf614178d15affa16cc3fe0eb7f   Install Memstick

Version 21.3.1   12th May 2021

1. Fixed an issue where Event and Threshold graphs were missing from Dashboards.
   This fixes a regression introduced in 21.3.
2. SHA-256 checksums
   • 841f98dc83133365886ccd875bd7158ba18d90f509e6f689c43e4b20e1084188   Install/Upgrade ISO
   • 7aca1ff511bfacb3afbd9566cf79ae5814477ae32563327897b5cd6dacf78709   Upgrade ISO
   • 2ea4bca66b1ed64f7989db6286ac01294d92adb8ecf3b49f5942f1dcb1c64f82   Install Memstick

Version 21.3   11th May 2021

1. Upgraded the operating system to FreeBSD 12.2-p6.
   • Multiple vulnerabilities in OpenSSL
   • Memory disclosure by stale virtual memory mapping
2. Updated third party packages.
3. Added Accedian Regulator report:
   • Name
   • Committed Information Rate (CIR)
   • Committed Burst Size (CBS)
   • Accepted/Dropped Packets
4. Added APC UPS Test report
   • Diagnostic Results
   • Diagnostics
   • Last Diagnostics Date
5. Added bit rate columns to the following F5 reports:
   • F5 Global Client Statistics
   • F5 Global Server Statistics
   • F5 Pool Statistics
   • F5 Pool Member Statistics
   • F5 Virtual Client Statistics

6. Dual socket poller - a workaround for firewalls (Palo Alto, Check Point, Cisco ASA) which experience broken/stuck SNMP sessions.

   For several years, customers have experienced issues where firewalls lose session state for a device or group of devices. The symptom shows up as an SNMP unreachable device, yet an SNMP walk will succeed. Packet traces always show the polling packets going out, but no response from the devices.

   Palo Alto firewalls seem to get confused when there is short routing change. The session displays an incorrect outgoing interface, which means the SNMP requests never reach the device, or the responses never reach the AKIPS server. Check Point has a similar issue, whereas we've only seen issues with Cisco ASAs when they failover between primary/secondary nodes.

   The reason why an SNMP walk will succeed when this situation arises is because the walk will create a new UDP source port number, therefore the firewall will create a new session and not use the broken session.

   The poller will now disguise these firewall issues by opening two UDP sockets at start-up and switch between them every two minutes. This will give the firewalls enough time to expire those broken/stuck sessions.

7. Added the ability to run multiple poller processes. For very large configurations, a single polling process has hit its practical upper limits due to CPU requirements. Spreading the polling load across multiple CPUs significantly extends the poller's scalability.

   Note that this is an expert-only feature for massive AKIPS installations (i.e. monitoring 1 million+ interfaces from a single server).

8. Added CSV export to the Device to IP Mapping tool.

9. Added CSV export to the Event Reporter.

   Note: For the "summary" report, only the third table is exported. (Device, Description, Count, Last Change, Current Status.)

10. Added logging of successful user logins to Admin > System > System Log Viewer under the "Auth" log file.
11. Added ZFS Performance Graphs.
12. Removed weak TLS 1.2 CBC ciphers vulnerable to Lucky Thirteen attack.
13. Automatically set l3ipvlan interface speeds to 100 Gbps in the Discover/Rewalk.
14. Fixed column headings in BGP Peer Prefix Stats report.
15. Changed to a new time-series database compression implementation. AKIPS has always used a purpose built compression algorithm. This is a reimplementation which uses CPU SSE hardware instructions for better performance.
16. Reduced logging noise in the "SNMP" log. There is an ongoing effort to remove unnecessary developer debug messages from the AKIPS logs, especially for mature code.
17. Added/updated compiled MIBs:
    • APC
    • Check Point
    • CyberArk
    • Oracle Acme Packet
    • Zenitel
18. Supported MIB Objects:
    • 484 Counters
    • 458 Enumerations
    • 788 Gauges
    • 203 Integers
    • 905 Other
    • TOTAL: 2840
19. Reports:
    • 535 Tables
    • 872 Graphs
    • 81 Other
    • TOTAL: 1488
20. Compiled MIBs:
    • 5513 MIBs
    • 720008 Objects
21. SHA-256 checksums
    • 4df49e9eee9e34bc0c1c2f811bc31c43b1c919c2890d8abd54455b44189d8344   Install/Upgrade ISO
    • 8da32ddc289d2f0f0c82f1e77ba475abddac4b61d5ffb1a288f3c70c65c37899   Install Memstick

Version 21.2   17th March 2021

1. Reverted a drilldown report permissions change. This fixes an issue introduced in 21.1 that prevented users accessing Ping graphs.
2. Increased timeout for individual site scripts to 2 minutes each.
3. Added validation steps for DNS database. This fixes an issue that could prevent NetFlow data from being collected.
4. Added/updated compiled MIBs:
   • Riello
5. Compiled MIBs:
   • 5511 MIBs
   • 720315 objects
6. SHA-256 checksums
   • 5c223d2d56a9467e2cbf1e1194c792c72c6469060ddd59bbd4c9efa7af8be82c   Install/Upgrade ISO
   • 998a2241baf602c8cf7e07b25f816a07aa63ebfd35892acf1b4e51ee9950aea5   Upgrade ISO
   • 403b38e6991cacd38f65aba091567906cb45c427a4106644f0f93b3563d75c25   Install Memstick

Version 21.1   8th March 2021

1. Upgraded the operating system to FreeBSD 12.2-p4.
   • FreeBSD 12.2 Release Notes
2. Updated third party packages.
3. Check Site Scripts for syntax and best practices with Perl Critic.
4. List all the good states for Status Alerting.
5. Fixed Pulse Secure devices identifying as "NET-SNMP" not appearing in Pulse Secure reports.
6. Fixed rejecting email addresses with uppercase characters in the domain name.
7. Added Ciena CFM report
   • Delay
   • Jitter
   • LM Loss
   • Loss
   • Service Name
8. Added Geist Remote Sensor report
   • Name
   • Serial Number
   • Temperature
9. Added SmartOptics DCP report
   • Alarms
   • Interface
   • Linkview
10. Added/updated compiled MIBs:
    • Cisco
    • Meraki
    • SmartOptics
11. Supported MIB Objects:
    • 484 Counters
    • 456 Enumerations
    • 788 Gauges
    • 201 Integers
    • 894 Other
    • TOTAL: 2823
12. Reports:
    • 533 Tables
    • 870 Graphs
    • 80 Other
    • TOTAL: 1483
13. Compiled MIBs:
    • 5506 MIBs
    • 720003 Objects
14. SHA-256 checksums
    • d1be0fafc2085df56feeddc0e64b0a3218f31a4ae28fa7b2968339c2f945acce   Install/Upgrade ISO
    • 6547fa709dedddb605c29a70142c3658991f3a8487f3229ea21876d7cb142870   Install Memstick

Version 20.15.4   8th February 2021

1. Fixed nm-http not providing query string parameters in URL. This breaks Opsgenie integration and any calls to http_send()/http_result() with URLs containing the question mark character.
   This fixes a regression introduced in v20.15.
2. Fixed Status Alerting wait rules triggering when a device is in Maintenance Mode.
3. SHA-256 checksums
   • 40618bd8ca6cddbe06f27bb73669fef303f02a51f2b53730ab395eb0c453a358   Install/Upgrade ISO
   • f6edbb7ce3edecefb62da3ac3ba8dc6a6d4ba705ad0b91d838fdba69c39e74b8   Upgrade ISO
   • 988be153fc67e76bd5fd66c12826d9f4f37ab4c42a5ab572841922c62fb0e530   Install Memstick

Version 20.15.2   10th December 2020

1. Fixed rounding error in calculating graph Y-axis scale. This fixes a regression introduced in v20.15 which caused graphs to not appear in some situations.
2. SHA-256 checksums
   • b1c6cb1672a3ffaf7251494dcdf7273b81110fa8b193e36629e6df2c4e17bcf0   Install/Upgrade ISO
   • 26a39637b71fd22db3dd2bd97992a9409b3002c7f59caf204ceae5514e764d33   Upgrade ISO
   • 396ac90395d1e60515c4ca0b7c33cf4a7ed42e70d3a90e4d454b8ce94ddef560   Install Memstick

Version 20.15.1   2nd December 2020

1. Fixed nm-http failing for some hosts. This fixes a regression introduced in v20.15.
2. SHA-256 checksums
   • 1928424e7e17696d90e4aa978c161394e7d9c4b796cd3c29428022b8b7fd59da   Install/Upgrade ISO
   • f5329d0d2787cec5e0973dd89b942e4f6f0a94f52b3b86c749155b6db5c5d927   Upgrade ISO
   • 24db752428414be26af79c3ee7ffc66a342aa43fbc60c475abd6982f1e926824   Install Memstick

Version 20.15   1st December 2020

1. Fixed Opsgenie Integration. Updated nm-http client to HTTP 1.1 due to recent Opsgenie API changes.
2. Added IPv6 HTTP proxy support to nm-http client.
3. Updated MAC vendor codes for Switch Port Mapper.
4. Added/updated compiled MIBs:
   • Alcatel ASAM
   • Allot
   • Arris
   • Westell
   • WISI (Inca Networks)
5. Supported MIB Objects:
   • 484 Counters
   • 452 Enumerations
   • 771 Gauges
   • 200 Integers
   • 878 Other
   • TOTAL: 2785
6. Reports:
   • 528 Tables
   • 861 Graphs
   • 80 Other
   • TOTAL: 1469
7. Compiled MIBs:
   • 5497 MIBs
   • 719771 Objects
8. SHA-256 checksums
   • babc17e47a71cfd4aa2910402971eb55d814c874c2167137173218750f075d5a   Install/Upgrade ISO
   • cf5459e87241629c1084a8a33d3542a09cc765e6bd4910985a2efda2091d43c1   Install Memstick

Version 20.14   12th November 2020

1. Updated freetype2 to version 2.10.4.
   • CVE-2020-15999
2. Added Citrix NetScaler RSA and SSL reports.
3. Added the following columns to the Citrix NetScaler Global TCP Stats report:
   • Established Connections
   • Surge Queue Length
4. Integration Settings: added proxy validation and ability to remove proxy config.
5. NetFlow Reporter: allow case insensitive filtering of exporter list.
6. Changed the Config Crawler Tool to no longer save captured output to the Config Crawler repository.
7. Fixed default sort in Interface reports. This fixes a regression introduced in v20.13.
8. Fixed an issue where the asnumber database would not open after a restore.
9. Fixed an issue where the server would crash if an invalid IPv6 address was supplied in DNS settings.
10. Fixed a potential race condition in Threshold Alerting.
11. Fixed an issue polling Alpha Power devices.
12. Fixed an issue polling Cyberpower UPSes.
13. Supported MIB Objects:
    • 484 Counters
    • 452 Enumerations
    • 771 Gauges
    • 200 Integers
    • 878 Other
    • TOTAL: 2785
14. Reports:
    • 528 Tables
    • 861 Graphs
    • 80 Other
    • TOTAL: 1469
15. Compiled MIBs:
    • 5479 MIBs
    • 718395 Objects
16. MD5 checksums
    • bf1975582a94d08f47479dc6d889fef2   Install/Upgrade ISO
    • efa13a8b2045b765d97494ba4cf94940   Install Memstick
17. SHA-256 checksums
    • eab85179a13774e149402e3c3e5154360c450cbb36cd716df5b5c86ffbc17136   Install/Upgrade ISO
    • 7c61835a7c90437ebc79872cf2701542d30767e1ba8660d59dfb0c59e98da486   Install Memstick

Version 20.13   26th October 2020

1. Fixed NetFlow Dashboard. This fixes a regression introduced in v20.12.
2. Fixed "Illegal division by zero" error in the Availability Reporter.
3. Fixed Config Viewer script list and group list dropdowns. Previously, these lists could contain stale data.
4. Fixed Config Crawler Statistics script list and group list dropdowns.
5. Reverted the following interface reports back to displaying a single Speed column:
   • Interface Configuration
   • Interface Statistics
   • Interface Graph Reporter
   • Interface Percentile Reporter
   • Interface Reporter
   • Device Dashboard
6. Set the default MaxRep value of Alpha Power devices to 5. This is a workaround to handle a defective SNMP agent in Alpha devices.
7. MD5 checksums
   • ea365b80d5e86d552504c60b2b353cf0   Install/Upgrade ISO
   • 1f8401ea277fb84accec94f13b127225   Upgrade ISO
   • 1cb0acb80c4dd27f23ead8a28b784e9c   Install Memstick

Version 20.12   19th October 2020

1. Upgraded the operating system to FreeBSD 12.1-p10.
2. Updated third party packages.
3. Updated Perl to version 5.32.
4. Updated pango to version 1.42.4_5.
   • CVE-2019-1010238
5. Added Alpha Power report
   • Battery Voltage
   • Battery Current
   • Load Voltage
   • Load Current
6. Added automated closing of events for PagerDuty and Opsgenie integration.
7. Added authentication test for RADIUS and TACACS+.
8. Added proxy configuration to Integration Settings.
9. Added 'name' column to Accedian CFM reports.
10. NetFlow Reporter: added filtering by interface name.
11. NetFlow Reporter: added hostname options to resolve IP addresses.
12. NetFlow Reporter: added splitter bar.
13. NetFlow Reporter: display interface names where applicable.
14. NetFlow Reporter: changed exporter list to allow filtering.
15. NetFlow Reporter: increased number of graphs displayed from 100 to 200.
16. NetFlow Reporter: fixed unknown ports table information. This fixes a regression introduced in v19.4.
17. NetFlow Reporter: fixed drilldown link in bar graph.
18. Changed 'meter' parameter to 'exporter' in the command line tools nm-flow-reporter, nm-flow-timeseries, and through the Web API.
19. Added a DNS database to efficiently display hostnames in reports.
    • Optional feature which can be disabled in Miscellaneous Settings.
    • Used by the NetFlow reporter.
    • Built-in rate limiting to avoid overrunning your DNS server.
20. Display 24-hour military time on graphs when timezone is UTC.
21. Fixed an issue which prevented backups from running. This was due to a race condition which sometimes resulted in the snapshot database failing a "group count" validation check.
22. Fixed empty Juniper Power Supply slots creating blank Operating States. This fixes a regression introduced in v20.9.
23. Fixed SSL CSR tool overriding user supplied hostname.
24. Fixed SameSite attribute introduced in v20.11.
25. Fixed generic BGP and Juniper BGP AS number formatting.
26. Improved performance of the nm-ping-scan program during the Ping Scan phase of the Discover.
27. Interface graphs: display Tx/Rx speeds in the title when the link is asynchronous.
28. Interface Dashboard: display Tx/Rx speeds when the link is asynchronous.
29. Interface Statistics report: split Speed column into Tx/Rx. Rx speed is only displayed if the link is asynchronous.
    Note: This change will be reverted in v20.13.
30. Added/updated vendor MIBs:
    • Accedian
    • Andrew Wireless
    • Aruba
    • Teradici
31. Supported MIB Objects:
    • 477 Counters
    • 452 Enumerations
    • 769 Gauges
    • 200 Integers
    • 878 Other
    • TOTAL: 2776
32. Reports:
    • 526 Tables
    • 852 Graphs
    • 80 Other
    • TOTAL: 1458
33. Compiled MIBs:
    • 5479 MIBs
    • 718395 Objects
34. MD5 checksums
    • 622d815622b8e594a91aee64c9af5a99   Install/Upgrade ISO
    • 28286826a014a007521415f28ebd47a6   Install Memstick

Version 20.11   9th September 2020

1. Upgraded the operating system to FreeBSD 12.1-p9.
   • SCTP socket use-after-free bug
2. Updated third party packages.
3. Updated libX11 to version 1.6.12
   • CVE-2020-14363
4. Added Accedian CFM Packet Loss report
   • Packet Loss
   • Gaps
   • Largest Gap
   • Percent
5. Added Accedian CFM Two-way Delay report
   • Delay
   • Variation
6. Added Avtech Sensor and Temperature reports.
7. Added F5 Global CPU report.
8. Added F5 Platform report
   • Platform Name
   • Marketing Name
   • Product Name
   • Serial
   • Version
   • Build
   • Edition
   • Build Date
9. Added Infoblox Hardware report
   • ID
   • Type
   • Serial
   • NIOS Version
10. Added Infoblox Grid Status report.
11. Added Infoblox Node Status report.
12. Added Isilon CPU, Disk, and Fan reports.
13. Added Metamako Temperature and Fan reports.
14. Added Trend Micro Tipping Point Policy report
    • Blocked Packets
    • Dropped Packets
    • Incoming/Outgoing Packets
15. Added CSV export to the Interface Percentile Reporter.
16. Added "Restore" button to Settings History tool.
17. Added SameSite attribute to Set-Cookie HTTP response header to allow iframes and linking to AKIPS graphs from other hosts.
    The latest version of Chrome browser now only delivers cookies with cross-site requests if they are set with "SameSite=None;Secure".
18. Changed the nm-availability command line arguments.
    Please see the help text for the new syntax.
19. Improved diagnostics for SSL Settings tool.
20. Fixed a potential race condition in the database sync caused by a complex CPU cache coherency issue. This had the potential to cause database corruption and/or backup validation failures.
21. Fixed a buffer underflow issue in nm-httpd web server.
22. Fixed Availability slowing down Event Dashboard performance when not configured.
23. Fixed Cisco WLAN Access Point report displaying hexadecimal for controller and VLAN names. This fixes a regression introduced in v20.10.
24. Fixed users unable to authenticate due to case sensitivity.
25. Fixed SSL Settings not importing RSA private keys.
26. Fixed an issue where Settings History never runs if the Discover or Rewalk is scheduled for midnight and takes longer than an hour to complete.
27. Fixed Discover and Rewalk default schedule. This was incorrectly set to midnight instead of disabled.
28. Added/updated vendor MIBs:
    • Check Point
    • Ciena
    • Gigamon
    • Sandvine
29. Supported MIB Objects:
    • 477 Counters
    • 452 Enumerations
    • 755 Gauges
    • 200 Integers
    • 866 Other
    • TOTAL: 2750
30. Reports:
    • 525 Tables
    • 850 Graphs
    • 79 Other
    • TOTAL: 1454
31. Compiled MIBs:
    • 5473 MIBs
    • 717403 Objects
32. MD5 checksums
    • 38ef4ce0c33bb3246ce3cf003301b8bc   Install/Upgrade ISO
    • 474fa8b12273b8c9858d2a7e4e192930   Install Memstick

Version 20.10.2   27th August 2020

1. Fixed PDF export and Scheduled Reports functionality. This fixes a regression introduced in v20.10.1.
2. MD5 checksums
   • fe58986973cfed583781d7f9f9475200   Install/Upgrade ISO
   • a3b4b06d503cf39a1fcbba6adf455493   Install Memstick

Version 20.10.1   21st August 2020

1. Upgraded the operating system to FreeBSD 12.1-p8.
   • VMware VMXNET3 driver packet loss and degraded performance
   • Potential memory corruption in USB network device drivers
   • Multiple vulnerabilities in sqlite3
   • sendmsg(2) privilege escalation
2. Updated third party packages.
3. Updated pango to version 1.42.4_4. Correction: This does not resolve CVE-2019-1010238 as previously mentioned here.
4. MD5 checksums
   • b6a8daa6b9174f1f89b255fa99957530   Install/Upgrade ISO
   • 54862cfb032e85c9f16feb0a681a36eb   Install Memstick

Version 20.10   27th July 2020

1. Upgraded the operating system to FreeBSD 12.1-p7.
   • USB HID descriptor parsing error
   • Multiple vulnerabilities in unbound
   • IPv6 socket option race condition and use after free
   • Stability issues in ena(4) driver
   • iflib watchdog timeout resetting idle queues
   • Kernel panic in mps(4) driver
2. Updated third party packages.
3. Added Cisco Voice Peer Calls report.
4. Added "negate" functionality to the AKIPS IP filter syntax by using a "!" character at the start of the filter.
   For example:
   • Exclude 10.1.2.0/24 subnet: !10.1.2.0/24
   This feature can be used in the IP Address filter of the following tools:
   • NetFlow Reporter
   • Syslog Reporter
   • Trap Reporter
5. Added Splunk HTTP Event Collector integration to Status Alerting. Beta
6. Added Assignment Group and Assigned To fields to ServiceNow integration.
7. Fixed labeling of Infoblox DNS Queries Per Second in reports and graphs.
8. Sonus Call Stats report: replaced description column with port number.
9. Fixed assigning VLAN groups to profiles. This fixes a regression introduced in v19.8.
10. Fixed an issue in Manual Grouping when selecting a super group would display "Loading..." forever.
11. Fixed an issue where Auto Grouping would incorrectly leave items in groups.
12. Fixed an issue in the Status Reporter where the refresh timer would count down from "random" numbers.
13. Fixed an issue with the SSL CSR tool not saving the private key.
14. Added/updated vendor MIBs:
    • Cisco
    • Enlogic
    • Majorpower
15. Supported MIB Objects:
    • 467 Counters
    • 443 Enumerations
    • 734 Gauges
    • 195 Integers
    • 842 Other
    • TOTAL: 2681
16. Reports:
    • 510 Tables
    • 834 Graphs
    • 79 Other
    • TOTAL: 1423
17. Compiled MIBs:
    • 5461 MIBs
    • 701706 Objects
18. MD5 checksums
    • 91f3bec8831fbab53be03ab3c0a3baa3   Install/Upgrade ISO
    • 6118838949d6b6db4112bae2a6fe16c1   Install Memstick

Version 20.9   8th June 2020

1. Upgraded the operating system to FreeBSD 12.1-p5.
   • Insufficient packet length validation in libalias
   • Memory disclosure vulnerability in libalias
   • Improper checking in SCTP-AUTH shared key update
   • Use after free in cryptodev module
   • Insufficient cryptodev MAC key length check
2. Updated Perl to version 5.30.
3. Updated jQuery to v3.5.1.
4. Added Cumulus Interface Discards report
   • IPv4 Discards
   • Buffer Overflow Discards
   • ACL Discards
   • Blackhole Discards
   • Egress Queue Discards
   • Egress Non-Queue Discards
5. Added Liebert Device report.
   • Model
   • Firmware
   • Serial
   • Manufacturer
   • Date of Manufacture
6. Added Oracle Acme Packet reports
   • Environment Monitor
   • Fan Status
   • Power Status
   • Temperature
   • Volume
7. Added Panduit PDU Status report
   • Comms State
   • Type
   • Mode
   • Number of Outlets
8. Added Panduit PDU Statistics report
   • RMS Voltage
   • RMS Amperage
   • Power
   • Power Factor
   • Frequency
   • Phase Volts
   • Phase Amps
   • Phase Power
   • Phase Power Factor
9. Added Panduit PDU Outlet report
   • Outlet Number
   • Outlet Name
   • Outlet State
   • RMS Amps
   • Power Factor
   • Outlet Amps Limits
10. Added Polycom Conferences report.
11. Added Polycom Hardware Status report
    • Overall Status
    • Board Status
    • Camera Status
    • Microphone Status
    • NIC Status
    • PTC Status
12. Added Polycom Identity report
    • Model
    • Type
    • Serial
    • Software Info
    • Build Date
    • Status
13. Added Polycom Microphone Status report.
14. Added Polycom NIC report
    • MAC
    • Speed
    • Duplex
    • Status
15. Added Polycom Service report
    • Security Profile
    • SIP Status
16. Added Polycom Service Integration report
    • Global
    • CDR
    • Exchange
    • Operational
    • Presence
    • Provisioning
    • Software Update
    • Syslog
17. Added Raritan Device report
    • Model
    • Hardware
    • Firmware
    • Sensors
    • Managed Sensors
    • MAC Address
    • IP Address
    • Netmask
    • Gateway
18. Added Raritan Temperature and Humidity reports.
19. Added interface controls to various reports.
    • Aerohive Radio
    • Cisco Cable Modems
    • Cisco Voice Interfaces
    • Cumulus Interface Discards
    • Extreme Flow Limit
    • HP Laser Interfaces
    • Juniper Firewall
    • Juniper Laser Interfaces
    • PacketLight Optical Interfaces
    • WiFi Config
20. Added controller column to Aruba AP report.
21. Added workaround to handle Avaya config format in the Config Crawler.
22. Added reporting of "empty" Juniper Power Supply slots.
23. Added part number to Liebert Agent report.
24. Added alert functions testing capability to Site Scripting.
25. Added height controls to graphs.
26. Changed all AS numbers greater than 65,536 to be displayed in "asdot" (x.y) notation.
27. Changed Site Scripting scheduled functions to run at arbitrary intervals or run at a specific time of day.
28. Removed sched_1d_ Site Scripting functionality. Use sched_HHMM_ instead as this gives you flexibility to run daily at a specific time.
    Existing sched_1d_ scripts will be automatically converted to run at midnight localtime.
29. Increased precision of Entity Sensor: Power (dBm) to support monitoring of more power sensors.
30. Fixed CSV export of AS numbers not being displayed in dot notation.
31. Fixed status wait alerting rules not working with Integration.
32. Fixed sorting of Config Crawler Statistics report.
33. Added/updated vendor MIBs:
    • Alpha
    • Avtech
    • Delta
    • Oracle Acme Packet
    • Polycom
    • Radware
    • Velocity
34. Supported MIB Objects:
    • 467 Counters
    • 443 Enumerations
    • 732 Gauges
    • 193 Integers
    • 843 Other
    • TOTAL: 2678
35. Reports:
    • 509 Tables
    • 833 Graphs
    • 79 Other
    • TOTAL: 1421
36. Compiled MIBs:
    • 5449 MIBs
    • 699431 Objects
37. MD5 checksums
    • 7804919714c36959f5ffa00c2b2e013b   Install/Upgrade ISO
    • 23ee68624ac62d52b0dd9dc6c8c7a403   Install Memstick

Version 20.8.1   16th May 2020

1. Fixed "Integration function not found" error message that prevented saving of Status Alerting rules.
   This fixes a regression introduced in v20.8.
2. MD5 checksums
   • 7ac86a215ca8f23672640b196baa2ccd   Install/Upgrade ISO
   • 8f5046dbcbfc158bf42e7aedad46364c   Upgrade ISO
   • 8f79671b8268dcb3efd3eb941d860130   Install Memstick

Version 20.8   7th May 2020

1. Added Cisco StackWise Stack Port Status report
2. Added Exablaze Ports report
   • Present Status
   • Signal Status
   • Enabled Status
   • Speed
   • Bits/Sec Tx/Rx
   • Bytes Tx/Rx
   • Packets Tx/Rx
   • Rx Errors
   • Rx Dropped
   • Multicast Tx/Rx
   • Unicast Tx/Rx
   • Broadcast Tx/Rx

   NOTE: Exablaze does not support the standard IF-MIB.

3. Added Exablaze Power Supply report
   • Present Status
   • Power (W)
4. Added Exablaze Temperature report
5. Added Juniper Power Status report
6. Added Pulse Secure Temperature report
7. Added PagerDuty integration to Status Alerting. Beta
8. Added ServiceNow integration to Status Alerting. Beta
   Currently, only Incident Table integration is supported. More functionality will be added in future releases.
9. Added Slack integration to Status Alerting. Beta
10. Added Settings History tool to record, display, and retrieve AKIPS configuration.
11. Added tool for creating an SSL Certificate Signing Request (CSR) for your AKIPS server.
12. Added CSV export for Status Exceptions drilldown from the Events Dashboard.
13. Added optional destination port number for Syslog Forwarding.
14. Added -X option to the nm-http client program to specify a HTTP request method.
15. Allow custom HTTP request methods (e.g. HEAD, DELETE) to be passed to http_send()/http_result() using the 'method' parameter.

    http_send ({
             method => 'DELETE',
             ...
             });

16. Added a workaround for a defect in the Cisco UCS SNMPv3 implementation.

    The UCS SNMP agent returns an unknownEngineID Report packet with its snmpEngineID filled in, but zero values for snmpEngineBoots and snmpEngineTime. In response to the next request packet from AKIPS, it sends a notInTimeWindow Report packet with all three values correctly filled in.

17. Fixed restore script failing due to sftp permissions error. This fixes a regression introduced in 20.7.
18. Fixed a race condition in NetFlow reporting that could lead to data loss.
19. Fixed extremely long walk times when discovering Fortinet devices. The discover was unnecessarily walking tables in the Fortinet MIB that were not needed for the IP sessions report introduced in 20.7.
20. Fixed an issue with the Config Web API being unable to handle multiple commands in a single POST request. This fixes a regression introduced in 20.6.
21. Added/updated vendor MIBs:
    • Citrix NetScaler
    • Palo Alto
22. Supported MIB Objects:
    • 460 Counters
    • 409 Enumerations
    • 707 Gauges
    • 182 Integers
    • 786 Other
    • TOTAL: 2544
23. Reports:
    • 489 Tables
    • 816 Graphs
    • 79 Other
    • TOTAL: 1384
24. Compiled MIBs:
    • 5463 MIBs
    • 696212 Objects
25. MD5 checksums
    • c3aea1f560d120735042235b167b7def   Install/Upgrade ISO
    • 277bffd5b80d68a6c3a2c77fe117cff2   Upgrade ISO
    • cc0c5cad49a675aa92cf4a9c5443e5ce   Install Memstick

Version 20.7   22nd April 2020

1. Upgraded the operating system to FreeBSD 12.1-p4
   • OpenSSL remote denial of service vulnerability
   • ipfw invalid mbuf handling
2. Added Cisco Virtual Stack Status report
   • Interface
   • Status
   • Last Change
3. Added Fortinet IP Sessions report
4. Added ISC DHCP Pools report
   • Pool Size
   • Pool Util
   • Active Leases
   • Expired Leases
   • Available Addresses
5. Added SonicWall CPU report
   • CPU
   • Management CPU
   • Forward/Inspect CPU
6. Added SonicWall Memory report
7. Added SonicWall Firewall Stats report
   • Max Allowed Connections
   • Current Connections
   • NAT Translations
8. Added SonicWall IPSec Stats report
   • Peer Gateway
   • First/Last Src Address
   • First/Last Dst Address
   • Created
   • User
   • Bytes
   • Bits/Sec
   • Packets
9. Added SonicWall System report
   • Model
   • Serial
   • Firmware
   • ROM
10. Added Viptela Environment report
    • Part
    • Status
    • Description
11. Added Viptela Inventory report
    • Part
    • Part Number
    • Serial
    • Version
    • Description
12. Added Viptela Temperature report
13. Added Cisco Firewall HW Status of "down" as a good state.
14. Added Config Crawler Statistics report.
15. Added Bits/Sec column to the Cisco NBAR Protocols report.
16. Pause page refresh countdown timer when browsing the navigation menus.
    Previously, the navigation menu dropdown would disappear whenever the report refreshed.
17. Fixed a defect in the mset ADB command that could cause subsequent commands to fail.
18. Fixed an issue that could cause the nm-flow-compressor program to crash and prevent it from compressing flow data.
19. Moved Device Naming Scheme option from Miscellaneous Settings to Discover/Rewalk Settings.
20. Updated jQuery to version 3.5.0
21. Supported MIB Objects:
    • 448 Counters
    • 404 Enumerations
    • 705 Gauges
    • 181 Integers
    • 778 Other
    • TOTAL: 2516
22. Reports:
    • 483 Tables
    • 805 Graphs
    • 77 Other
    • TOTAL: 1365
23. Compiled MIBs:
    • 5463 MIBs
    • 695749 Objects
24. MD5 checksums
    • 5039349e5e643d4895e47d325075858f   Install/Upgrade ISO
    • e21dd98159e439ef8e050c9b5c3b546a   Install Memstick

Version 20.6   6th April 2020

1. Upgraded the operating system to FreeBSD 12.1-p3
   • Multiple denial of service in ntpd
2. Added F5 VPN Connections report
   • Profile Name
   • Active Connections
   • Total Connections
3. Added NetScaler IP Stats report
   • Bytes Tx/Rx
   • Bits/Sec Tx/Rx
   • Packets Tx/Rx
4. Added NetScaler Interface Stats report
   • Bytes Tx/Rx
   • Bits/Sec Tx/Rx
   • Packets Tx/Rx
   • Packets Dropped Tx/Rx
5. Added OneAccess System report
   • Crash Count
   • Boot Version
   • Reboot Reason
   • Start Reason
6. Added OneAccess Components report
   • Product Name
   • Description
   • Serial
   • Manufacture Date
7. Added OneAccess SIP Gateway Status report
   • Gateway State
   • Registration State
   • Registrar Server
   • Bandwidth
   • Registration Errors
   • Registered Endpoints
   • Calls
   • Auth Rejects
8. Added OneAccess Voice Connections report
   • FXS Ports/Peers
   • BRI Ports/Peers
   • PRI Ports/Peers
   • VMOA Connections
   • VTOA Connections
9. Added Opengear Humidity report
10. Added Pulse Secure VPN report
    • VPN Tunnels
    • SSL Connections
    • Version
    • Users
    • User Limit
11. Changed Cisco FRU Module Status report to include all modules.
    This report was renamed from Cisco FEX Module Status.
12. Added Config Viewer Web API.
    This feature retrieves the latest config crawl of the specified device and script. See help text under Admin > API > Web API Settings for details.
13. Allow read-only access to the Config and Events Web API via the api-ro user.
14. Allow Interface Percentile Reporter to calculate any percentile.
15. Changed none option in NetFlow Reporter to disabled.
16. Fixed Config Viewer displaying groups not assigned to a user profile.
17. Added Fortigate VPN Usage report
    • Users
    • Sessions
    • Tunnels
18. Added/updated vendor MIBs:
    • Exablaze
    • Pulse Secure
    • SonicWall
    • ZPE Systems
19. Supported MIB Objects:
    • 443 Counters
    • 402 Enumerations
    • 694 Gauges
    • 179 Integers
    • 754 Other
    • TOTAL: 2472
20. Reports:
    • 472 Tables
    • 787 Graphs
    • 76 Other
    • TOTAL: 1335
21. Compiled MIBs:
    • 5463 MIBs
    • 695749 Objects
22. MD5 checksums
    • 35921ae4979201912d15d764a836e74d   Install/Upgrade ISO
    • c2369f07ce36698eb419d35482c92598   Install Memstick

Version 20.5   17th March 2020

1. Added Cisco WebVPN Sessions report.
2. Added Opengear Modem report
   • Model
   • Enabled Status
   • Connected Status
   • Technology
   • 3G/4G RSSI
   • Alerts
   • IMSI
3. Added Palo Alto GlobalProtect Gateway Tunnels report
   • Util
   • Active Tunnels
   • Max Tunnels
4. Fixed gaps in Poller Performance Graphs.
5. Supported MIB Objects:
   • 429 Counters
   • 399 Enumerations
   • 679 Gauges
   • 178 Integers
   • 734 Other
   • TOTAL: 2419
6. Reports:
   • 462 Tables
   • 751 Graphs
   • 76 Other
   • TOTAL: 1289
7. Compiled MIBs:
   • 5460 MIBs
   • 695318 Objects
8. MD5 checksums
   • 818cdf9a755a5cfd0d6a2b510ef499ab   Install/Upgrade ISO
   • e870ae80ed824c37cd1b45387ebf07d3   Upgrade ISO
   • a40eab8d1d627340ca562f37bb44a1ae   Install Memstick

Version 20.4   16th March 2020

1. Added Brocade Chassis report
   • ID
   • Temperature
   • Version
2. Added Brocade PoE Power report
   • Util
   • Used
   • Free
   • Total
3. Added DragonWave Radio report
   • Tx Profile
   • Tx Power
   • Rx Good Frames
   • Rx Error Frames
   • RSL
   • SNR
4. Added DragonWave System report
   • Operating Status
   • Temperature
5. Added Microsoft DHCP Server report
   • Start Time
   • Discovers
   • Requests
   • Releases
   • Offers
   • Acks
   • Nacks
   • Declines
6. Added Microsoft DHCP Subnet report
   • Util
   • Used
   • Free
   • Total
   • Pending Offers
7. Added Opsgenie integration to Status Alerting Beta
   This feature is enabled under Admin -> API -> Integration Settings menu.
8. Added Guest Name to VMware Guest MAC Address report.
9. Added next/prev change buttons to Config Viewer.
10. Added support for SSL connections when using a proxy in nm-http client.
11. Added "Basic" authentication support for GET requests in http_send()/http_result().
12. Added timeout and retry options for RADIUS.
13. Added timeout option for TACACS+.
14. Added more detailed CGI runtime logging for dashboards.
15. Changed NetFlow Reporter default filtering options from none to any.
16. Fixed _home_akips_tmp_csv_ appearing in CSV filenames.
17. Fixed _home_akips_tmp_pdf_ appearing in PDF filenames.
18. Fixed delay in nm-http client when closing a request.
19. Fixed race condition in the web server (nm-httpd) causing truncated and/or incorrect output from the api-script CGI.
20. Added/updated vendor MIBs:
    • Cisco
    • Cisco UCS
    • Cumulus
    • Digi
    • ExtraHop
    • net-track
    • Panduit
    • Silver Peak
21. Supported MIB Objects:
    • 427 Counters
    • 396 Enumerations
    • 674 Gauges
    • 177 Integers
    • 732 Other
    • TOTAL: 2406
22. Reports:
    • 459 Tables
    • 744 Graphs
    • 76 Other
    • TOTAL: 1279
23. Compiled MIBs:
    • 5460 MIBs
    • 695318 Objects
24. MD5 checksums
    • 4e161c8f63d2aed3bc96f46b646e05a9   Install/Upgrade ISO
    • 6f28c14b4069df94740eb4a3cbfdd726   Upgrade ISO
    • c8284f4b9a3cbffad725e975af90cfa1   Install Memstick

Version 20.3.1   19th February 2020

1. Fixed APC UPS Battery Condition and Output Status exceptions for valid states.
   After the APC PowerNet-MIB update in v20.2, the 'good' states were incorrectly renamed, generating false exceptions and alerts.
2. MD5 checksums
   • cb98542fcca1b5d478ff140ea1f0a42f   Install/Upgrade ISO
   • 08d092b547217f70262f5433c336c57c   Upgrade ISO
   • a96fac6e445607826df6d4b34eb21b75   Install Memstick

Version 20.3   17th February 2020

1. Added nm-clock-setup script for configuring system clock and event timer. This is required on some misbehaving VMware installs where a broken virtual clock increments seconds but not sub-second values.
2. Added Juniper Box report
   • Class
   • Serial number
   • Revision
   • Installed time
3. Added Viptela reports
   • Jitter
   • Latency
   • Loss
4. Added VMware Guest report
   • Name
   • OS
   • Memory
   • CPU
5. Added VMware Guest MAC report
   • Virtual MAC
   • MACs
6. Fix ZPE MIB Trap definitions
7. Added CISCO-LWAPP-AP-MIB.cLApCrashInfoTable to the SNMP walk skip list. Cisco Airespace controllers get messed up and constantly return the same OID in the cLApCrashInfoTable during a walk.
8. Fix System Info always reporting 'NTP not running'
   Admin > System > System Info > Network Time Peers. Regression introduced in v19.8.1. Path to ntpd.pid had changed in FreeBSD 12.1.
9. Added/updated vendor MIBs:
   • Aruba AOS-CX
10. Supported MIB Objects:
    • 417 Counters
    • 395 Enumerations
    • 665 Gauges
    • 175 Integers
    • 722 Other
    • TOTAL: 2374
11. Reports:
    • 453 Tables
    • 722 Graphs
    • 75 Other
    • TOTAL: 1250
12. Compiled MIBs:
    • 5441 MIBs
    • 686512 Objects
13. MD5 checksums
    • 408cb11d6bf94ce64e4b372648ae07c4   Install/Upgrade ISO
    • bd3e7ca527eff374fa0816cf9d1c8f3c   Upgrade ISO
    • 072950ee1297ba49c3d70ec76d84c0ff   Install Memstick

Version 20.2   7th February 2020

1. Upgraded the operating system to FreeBSD 12.1-p2
2. Added CSV button to the Navbar
3. Added HPE IRF Stack Topology and Port Status reports
4. Added Alpha / Argus-Power-System-MIB Report
5. Added BGP Peer state of "idle" as a good state
6. Added timeout/retry configuration controls to the Radius Auth setup
7. Added Endrun report
   • CPU
   • Memory
   • CDMA Stratum
   • CDMA Time Figure of Merit
   • CDMA Receiver Subsystem State
   • CDMA Receiver Signal Processor State
   • CDMA Receiver Signal Processor State
   • CDMA Channel
   • NTP Packets
   • NTP Packets Dropped
   • NTP Auth Failures
8. Updated HP Nimble storage report
   • Volume Name
   • Volume ID
   • State
   • Size
   • Usage
   • Number of Connections
   • Number of Reads/Writes
   • Number of Read/Write Bytes
9. Added Battery Remaining to UPS report
10. Added Cradlepoint modem report
    • Signal Strength
    • Status
    • Serial Number
    • Firmware
    • Service Display
    • SINR
    • RSRP
    • RSRQ
    • Roaming Status
    • RF Band
    • Home Carrier
    • IMSI
    • IMEI
    • APN
11. Added Mellanox Infiniband report
    • Physical State
    • Logical State
    • GUID
    • Xmit Wait
    • Errors
    • Admin Speed
12. Config Crawler: added auxauth2 to support scripts when a command to enter privileged mode requires both a username and password. Refer to the help text under Crawler Settings for details.
13. Fixed saving of graphs when using Chrome.
14. Fix issue where if above and below alerts were configured on the same object, duplicate alerts would trigger for each event on that object.
15. Fix for APC battery report. Not all APC devices support the PowerNet-MIB.upsAdvBatteryActualVoltage object.
16. Fixed missing radios in the Cisco Wireless radio report. Radios with a snmp index ending in .0 were not being added.
17. Fixed Cisco Qos reports incorrectly mixing data from the various Qos reports.
18. SNMP Walk Tool - Fix incorrect sysObjectID in filename for ping-only device.
19. Prune config from devices removed from tech_cisco_qos group. This fixes a regression introduced in 20.1. Previously, all Cisco devices were walked for CISCO-CLASS-BASED-QOS-MIB. If the device contained that MIB but was not in the tech_cisco_qos MIB, then config was deleted. After 20.1, the MIB is only walked for devices in that group, so if a device was removed from the group, its config was never deleted.
20. Due to the Cisco defect CSCva45165, Cisco BFD stats collection is now a discover opt-in feature. Refer to the discover help text in section 7. Optional Features. The default is to not collect Cisco BFD stats.
21. Added/updated vendor MIBs:
    • APC
    • Commscope
    • Endrun
    • Extreme
    • OneAccess
    • Trustwave
22. Supported MIB Objects:
    • 417 Counters
    • 395 Enumerations
    • 662 Gauges
    • 173 Integers
    • 713 Other
    • TOTAL: 2360
23. Reports:
    • 449 Tables
    • 719 Graphs
    • 75 Other
    • TOTAL: 1243
24. Compiled MIBs:
    • 5430 MIBs
    • 685863 Objects
25. MD5 checksums
    • f23a592feb12049b2328128efbffb15c   Install/Upgrade ISO
    • 0e3d43397651bea47aef9ab1230f6938   Install Memstick

Version 20.1   10th January 2020

1. Upgraded the operating system to FreeBSD 12.1-p1
   • FreeBSD 12.1 Release Notes
   • Machine Check Exception on Page Size Change
2. Disable TCP segmentation offload (TSO) because it was observed to misbehave in VMware / FreeBSD 12.1. This resulted in very long inter-packet delays and timeouts to the web browser.
3. Added 'notPresent' as a good state for APC PDU Sensor Status
4. Added Bluecoat CPU report
5. Added 'standby' as a good state for Juniper jnxOperatingState
6. Added IT-Watchdogs climate report
   • Serial Number
   • Temperature
   • Humidity
   • Air flow
   • Light
   • Sound
7. Endrun - moved from SONOMA-MIB to SONOMAMG-MIB. Endrun have deprecated the SONOMA-MIB and replaced with SONOMAMG-MIB.
8. Added Cisco BFD state report
9. Cisco Wireless
   • Added AP Radio status
   • Added AP Number of users
10. Cisco IPSLA
    • Added monitoring of IPSLA HTTP and Jitter Oper Status
    • Changed Status field to HTTP and Jitter Oper Status in those reports
    • Add Last Change column for Oper Status
    • Split Description column into Num/Tag/Target columns for readability and sorting.
    • Change default sort to Status column
11. Cisco Class Based Qos
    • Removed Index column because they are meaningless values to the user.
    • Added Policy name, class map and interface columns to each of the reports.
    • Set the child description to contain Policy, Class, Interface. This allows GUI filtering across all three columns.
    • Fixed drilldown graphs so ugly child indexes are not displayed in the graph titles.
12. Added new alert script to handle BGP peer state changes.
13. Moved Bluecat DNS stats from ADONIS-DNS-MIB to BCN-DNS-MIB. The DNS stats in the ADONIS-DNS-MIB return zeros. Customers will need to rewalk the devices after upgrade to use the BCN-DNS-MIB objects.
14. Renamed avaya/POLICY-MIB to avaya/AVAYA-POLICY-MIB and bluecoat/POLICY-MIB to bluecoat/BLUECOAT-POLICY-MIB due to name clashes
15. Added support for CISCO-IF-EXTENSION-MIB receive speed. Support async speeds by setting ifInSpeed/ifOutSpeed using the CISCO-IF-EXTENSION-MIB.
16. Fixed ADSL speed logic - prefer ifxxHCOctets over ifxxOctets
17. Retry AJAX calls on browser connection timeout
18. Set Radius timeout to 10s and retries to 10 (default is 3 seconds and 3 retries)
19. Set Tacacs+ connection timeout to 10 seconds
20. Fix Palo Alto Zone Active Connections report which was not passing child description to drilldown graphs. Changed report title to Palo Alto Zone Connections.
21. Fix ADB IP address filtering. For example:

    mget * * sys ip4addr value 10.132.0.0/16

22. Fixed a defect where old entity sensors were not being removed from the AKIPS configuration.
23. Added DBD::Pg package for site scripting use
24. Updated jQuery to version 3.4.1
25. Add multiple IP address support to Web API for Device Discovery script
26. Config Crawler
    • Name device's config based on device name
    • Device's config will be renamed/deleted when the device is renamed/deleted
    • Improve compatibility with Huawei routers
27. Switch port mapper - reduced the vlan cache time from 20 days to 1 day.
28. SNMP performance speedup. Tightened the request/response duty cycle for SNMP walks. Previously the duty cycle was set at 50% so AKIPS wouldn't overrun the SNMP agents in devices.
29. Added ability to skip walks for specific device types. A defect in Cisco VG310 SNMP agent causes the walk of the bridge mib in the spanning tree section to go on forever.
30. The discover SNMP walks are now spread across /24 ranges to reduce potential congestion. For example:

    10.1.1.1
       10.1.2.1
       10.1.3.1
       ...
       

31. Fixed an issue where the discover would perform unnecessary SNMP walks of Cisco devices which were not in the tech_cisco_qos group.
32. Allow non-admin user access to Add Ping/SNMP Device screens. This is a restricted opt-in access configured under Profile Settings.
33. Device Editor - added SNMPv3 context field
34. Add SNMP Device - allow configuring SNMPv3 context
35. Retain the current licence key on a restore.
36. Ping scan/poller - Set ICMP Identifier and increment Sequence numbers. A customer reported an issue where the OS command line ping worked but the AKIPS ping scan and the poller pings were being blocked by a firewall. AKIPS does not use those ICMP fields, so they were previously set to 255. We suspect that the firewall was blocking ICMP packets where the Identifier and Sequence numbers were not being incremented. Set the identifier to the process ID, and increment sequence number on each request.
37. Added snmp fail early option for SNMP walks.

    The fail early option tracks the number of failed requests to a device. Once the failed limit is reached, all queued and additional requests for that device are immediately deleted.

    The rewalk loads a list of devices to rewalk configs and removes all devices which are currently SNMP unreachable. If a device becomes unreachable during the rewalk, then the snmp library continues to send/retry every queued request. This significantly increases the time the rewalk takes.

    NOTE: This feature is turned off by default.

38. Added Aruba wlanAPStandbyIpAddress. Aruba APs typically have a primary and secondary controller. The stats/state of the AP needs to be collected from the controller the AP is currently associated to. On failover, the AP will switch to its secondary controller. This means the stats/state data will be invalid. Adding this OID allows custom site scripts to update the controller's IP that the data should be collected from.
39. Fixed an issue preventing non-admin users from accessing the Config Viewer.
40. Fixed an issue preventing the time filter from supporting dates after 31st December 2020. The time filter is used throughout the product.
41. Added/updated compiled vendor MIBs:
    • Avaya
    • Cisco
    • Cradlepoint
    • Cumulus
    • Cyberpower CPS
    • DragonWave
    • HPe Nimble storage array
    • IT WatchDogs
    • Meinberg
    • Network Technologies Inc
    • OpenBSD
    • Polycom
    • Raritan
    • Safenet
    • Trendnet
    • Vertical
    • ZPE Systems
42. Supported MIB Objects:
    • 411 Counters
    • 380 Enumerations
    • 636 Gauges
    • 168 Integers
    • 694 Other
    • TOTAL: 2289
43. Reports:
    • 437 Tables
    • 689 Graphs
    • 75 Other
    • TOTAL: 1201
44. Compiled MIBs:
    • 5410 MIBs
    • 678487 Objects
45. MD5 checksums
    • 5fb013f0c841a802a17dc415fd5ee50e   Install/Upgrade ISO
    • e93e3ac19ec93f297984dfb096a0661a   Upgrade ISO
    • 912988a81da9092d7c4b252ec660931e   Install Memstick

Version 19.8.2   9th January 2020

1. Fix for NetFlow not working in v19.8.1.
   Due to the operating system upgrade to FreeBSD 12.1 in v19.8.1, we introduced a regression that prevented the nm-flow-compressor program from compressing flow data.
2. MD5 checksum
   • cf23cb02ad52f77ea8194b0d992dcd26   Upgrade ISO

Version 19.8.1   11th December 2019

1. Upgraded the operating system to FreeBSD 12.1-p1.
   • FreeBSD 12.1 Release Notes
   • Machine Check Exception on Page Size Change
2. Fix for software expiry.
3. MD5 checksums
   • a288e9aa1d944a90ae1e1d14f889933a   Install/Upgrade ISO
   • 976e31e8a5c6fe1a72d7c4a72681b80b   Install Memstick

Version 19.8   9th October 2019

1. Upgraded the operating system to FreeBSD 11.3-p3.
   • FreeBSD 11.3 Release Notes
2. Expanded Aerohive Radio report.
3. Added Aerohive Radio Association report.
4. Added APC UPS Battery Remaining graph.
5. Added Endrun CPU, Memory, NTP, and Stratum reports.
6. Added Palo Alto Zone Connections report.
7. Added bitrate graphs to Cisco CBQ Traffic Shaping report drilldown.
8. Display additional info when Add SNMP Device fails to add the device.
9. Tidy up Cisco IPSLA descriptions. The description is now a combination of IP, port, type, and tag.
10. Removed Owner and Tag columns from Cisco IPSLA report.
11. Fixed a memory leak in threshold alerting.
12. Fixed Event Reporter not applying profile filters. This fixed a regression introduced in version 19.4.
13. Fixed an issue where the Discover would hang when Strip Domain was turned off and device sysNames contained spaces.
14. Fixed unable to save or change the Authentication Scheme under Authentication Settings.
15. Reverted VLAN grouping code to version 19.3 for performance reasons.
16. Changed Config Crawler capture to optionally capture all output from the command.
17. Changed generic ISIS to opt-in feature under the Discover settings. This is a workaround to avoid triggering a denial of service defect in Cisco ASR routers.
18. Removed ifIndex and AS number support for NetFlow v5 due to the protocol only allowing 16 bit values. Customers should instead use v9 or IPFIX.
19. Updated Perl to version 5.28.
20. Added/updated vendor MIBs:
    • Aerohive
    • Ciena
    • OneAccess
21. Supported MIB Objects:
    • 411 Counters
    • 375 Enumerations
    • 629 Gauges
    • 168 Integers
    • 679 Other
    • TOTAL: 2262
22. Reports:
    • 433 Tables
    • 683 Graphs
    • 73 Other
    • TOTAL: 1189
23. Compiled MIBs:
    • 5,342 MIBs
    • 667,619 Objects
24. MD5 checksums
    • 1ecf4c860f190dfe9ee4e7212c2a2b7b   Install/Upgrade ISO
    • 12f00a3a6ad0c7017ce5b4384980b283   Install Memstick

Version 19.7   23rd August 2019

1. Upgraded the operating system to FreeBSD 11.2-p14.
   • IPv6 remote Denial-of-Service
2. Added generic ISIS report
   • Neighbour
   • State
   • 3Way
   • Sys ID
   • Adjacent Type
   • Usage
   • IPv4 and IPv6
3. Added Ceragon reports
   • Health
   • Inventory
   • Radio Status
   • Radio Config
   • MMRC Status
   • Transceiver
4. Added Mikrotik reports
   • Fan
   • Power
   • Optical
   • Registration Table
   • Neighbour
   • Queue Simple
5. Allow the Config Viewer and Device to IP Mapping tools to be assigned to non-admin users under Profile Settings.
6. Added option under Grouping Settings to prune empty super groups.
7. Device Dashboard performance speedup.
8. Reverted interface grouping code to version 19.3. This fixes a number of issues introduced in version 19.4 for some customers.
   The Tune Interface State feature runs every 5 minutes. If any interfaces come up, the interface speed is collected and updated. From version 19.4 onwards, this would trigger the full auto grouping to run. On sites with large configs, due to auto grouping taking many seconds to run, this would introduce a race condition between grouping and the rest of the product.
   If AKIPS support has instructed you to turn off Tune Interface State to workaround an issue, you can turn this back on after upgrading.
9. Fixed Availability reporting not working for non-admin users. This fixed a regression introduced in version 19.4.
10. Fixed report refresh counter when the user stops the refresh counter. If a user stops the refreshing of a report by clicking on the refresh counter in the navbar, and later navigates back to the tab, the refresh counter would continue.
11. Fixed a race condition between the database sync and auto grouping which could cause backups to fail due to snapshot database validation failure.
12. Fixed a potential false positive in group database validation code.
13. Fixed Huawei Netstream v9 templates being discarded due to router reboot detection.
14. Fixed double counting of bytes in IPFIX when the template contains postOctetDeltaCount. This was incorrectly being decoded as OUT_BYTES as per v9 NetFlow, however there is not an exact 1:1 mapping between IPFIX and v9 fields.
15. Added sort option back into the NetFlow Reporter. This was removed in version 19.4.
16. Fixed missing group filtering on the following CGIs:
    • Ping/SNMP Walk Tool
    • SNMP Trap Reporter
    • Switch Port Mapper
    • Syslog Reporter
    • TopN Graphs
    • Unused Interfaces
17. Reduced the amount of unnecessary logging for:
    • IP Filter parse/compiling caused by item 19 in version 19.4.
    • In the new nm-flow-meter process.
    • Database sync debugging.
    • Database shutdown debugging.
18. Removed hostname warning from Software Activation screen.
19. Added/updated vendor MIBs:
    • Juniper
    • Siemens
    • Socomec UPS
20. Supported MIB Objects:
    • 392 Counters
    • 374 Enumerations
    • 622 Gauges
    • 164 Integers
    • 673 Other
    • TOTAL: 2225
21. Reports:
    • 427 Tables
    • 664 Graphs
    • 73 Other
    • TOTAL: 1164
22. Compiled MIBs:
    • 5291 MIBs
    • 664829 Objects
23. MD5 checksums
    • 60d579a64855b863b32c76cf4241045e   Install/Upgrade ISO
    • e7aac16e37460840c73e9516bc78cc9e   Install Memstick

Version 19.6   9th August 2019

1. Upgraded the operating system to FreeBSD 11.2-p13.
   • ICMPv6 / MLDv2 out-of-bounds memory access
2. Fixed a number of regressions introduced in version 19.4, including:
3. Fixed incorrect packet and byte counts in NetFlow. The flow meters were reusing memory and not zeroing packet and byte counts, leading to ridiculous counts being reported.
4. Fixed segmentation fault in grouping program.
   This issue affected sites with >128 vlan groups, which caused Auto Grouping to fail.
5. Fixed "Delete Broken Rules" button under Manual Grouping only fixing one rule at a time.
   NOTE: This button will be removed in a future release when broken manual grouping rules are automatically fixed.
6. Fixed event records not appearing in the Events Dashboard under some circumstances.
7. Fixed a memory leak in the events database.
8. Fixed the Event Reporter not filtering on 'critical' or 'warning' flags.
9. Fixed an issue in the Events Dashboard where drilling down on Critical Events and Critical Thresholds graphs would incorrectly display all events or thresholds.
10. Fixed Config Crawler not allowing passwords containing punctuation.
11. Fixed Arista CPU/Memory/Temperature reports not appearing.
12. Updated NetFlow reporter API help text in the Admin -> API -> Web API Settings
13. Report refreshing now only occurs if the browser tab is visible. This significantly reduces the number of unnecessary CGI requests.
14. Added/updated vendor MIBs:
    • Mikrotik
15. MD5 checksums
    • d87c4ca2e67207b9365f869d33a2c623   Install/Upgrade ISO
    • 3417efcb4f041870acb1a4d27be82a86   Install Memstick

Version 19.5   2nd August 2019

1. Fixed a potential deadlock introduced in 19.4. A race condition exists in the new DNS database, which we have temporarily removed from the product until a permanent fix is implemented.
2. Fixed an issue that caused loss of NetFlow data if the 19.4 upgrade is interrupted (e.g. by a software restart or server reboot).
3. MD5 checksums
   • f9ca2960461c2db458bdc82cd2ada79d   Install/Upgrade ISO
   • 2798a46a69f7f7f5146b25d1c428832f   Upgrade ISO
   • a34a07d2d0f1e2c067e23038a1cdc98e   Install Memstick

Version 19.4   1st August 2019

1. Upgraded the operating system to FreeBSD 11.2-p12.
2. Added Aerohive reports
   • CPU
   • Memory
   • Client count
3. Added Citrix Netscaler SDX reports
   • CPU
   • Memory
4. Added ServerTech TopN Graph reports.
5. Added Cisco IE1000 reports
   • CPU
   • Temperature
6. Added Arista BGP peer state report
   • Identifier
   • AS Number & Name
   • Admin State
   • Current State
   • Last Change
   • Updates
   • Messages
7. Added Arista BGP prefix report
   • Remote IP
   • AFI number
   • Prefixes accepted
   • Prefixes In & Out
8. Added description column to the ADSL report. The ADSL MIB does not have the equivalent of IF-MIB.ifName, and its object indexes do not easily map back to the IF-MIB ifTable. The discover resolves the ifName and sets the description of the ADSL entry to ifName.
9. Add 'member' as a good state for HP Stack Member State. Any stack with >2 members (a commander and a standby) was showing an exception for any additional member.
10. Convert APC UPS 'build', 'test' and 'battery last replaced' dates from mm/dd/yy or mm/dd/yyyy to yyyy-mm-dd. This makes the columns sortable and more consistent.
11. Added row hover to all tabular reports.
12. Fix Admin > Discover > SNMP Walk Statistics objects count.
13. Devices cleared from the warn_event group will no longer appear in the Unreachable Devices table of the Event Dashboard.
14. Removed Device Uptime table from the Events Dashboard because it added no value to the report.
15. Added LDAP auth test button to the Admin -> Users / Profiles -> Authentication menu.
16. Allow sorting of the username/name/profile in the User Settings.
17. Increased maximum syslog/trap history to 1000 days. This can be configured in the Admin -> General -> Miscellaneous menu.
18. Set the default Unused Interfaces report to Last 90 days.
19. Allow both regex and IP filter API queries on AKIPS database entries that contain IP addresses. Previous releases only allowed regex queries.
    Regex example (messy)
    mget * * sys ip4addr value /10\.1\.50\./
    
    IP filter examples (simpler)
    mget * * sys ip4addr value 10.1.50.0/24
mget * * sys ip4addr value 10.1.50.0-50
mget * * sys ip4addr value 10.1.*.0/24
    

    Note: The IP address of each monitored device is stored as text type in the AKIPS configuration. This is a design error as it would have been much more efficient to store them in their natural host order binary format to allow efficient IP range/mask queries. The storage type will be changed in a future release, and regex queries will be deprecated.

20. Auto grouping performance speedups.

    The auto grouping in large sites was taking a long time to complete (e.g. 20 minutes). This causes usability and event notification issues. A significant speedup, in the range of 100 times, has been achieved for commonly used grouping rules.

    Speedups have been implemented for the following attributes:

    • SNMPv2-MIB.sysDescr
    • SNMPv2-MIB.sysContact
    • SNMPv2-MIB.sysObjectID
    • SNMPv2-MIB.sysLocation
    • SNMPv2-MIB.sysName

    Speedups have been implemented for the following interface grouping functions:

    • Interface speeds
    • Interface types
    • Interface VLANs

21. Availability
    • The availability code has been rewritten (from Perl to C), which has resulted in a significant run-time speedup.
    • Exclude devices in Maintenance Mode from group Availability calculations.
    • Added a "Maintenance Mode Devices" checkbox to the Availability Reporter. This overrides the behaviour of the previous point above so that devices currently in Maintenance Mode are included in availability calculations.
    • Added nm-availability command line tool, which can export availability stats in CSV format.
22. Added group list filtering to multiple control panels. Some customers have 1000s of device and interface groups. This makes many of the GUI controls frustrating to use due to the long select lists. A new group list filter has been added to many of the control panels. This allows the user to type in a filter to reduce the group list to a more manageable size.
23. Added Cisco Airespace Wireless AP report Beta
    This implements controller based wireless access point reporting.
    • CPU
    • Number of clients
    • State
    • Controller
    • IP address
    • MAC address
    • VLAN
    • Serial number
    • Uptime
    • Join Time
    • Model
    • Type
    • Software version
    • Hardware version
    • Location
    
    

    Cisco AP monitoring is an opt-in feature. To enable:

    1. Navigate to the Admin -> Discover -> Discover/Rewalk menu
    2. Scroll down to section 7. Optional Features. Enable and Save.
    NOTE: Cisco WLAN functionality is in beta status for the following reasons:

    • The Airespace controller SNMP agent is known to be defective. The issue is the agent returns invalid out-of-order MIB objects in certain walk responses. A workaround for this defect has been implemented for the specific MIB tables that are known to be broken. There may be more tables that haven't been identified yet.
    • Airespace MIB support has evolved over time. Earlier versions appear to return zero or NUL values for many MIB objects that weren't implemented at the time. The newer controllers seem to have moved to XE IOS.
    • AP radio stats are still being investigated. There seems to be limited useful data collected and returned by the controller.
24. Data compression

    AKIPS uses a purpose built compression algorithm to store much of its structured data (e.g. time-series, events, NetFlow records). The algorithm implementation has been re-engineered to achieve a higher level of speed and compression level when running on modern CPU architectures. The re-engineered compression has only been implemented in the NetFlow rewrite. It will be introduced into other parts of the product in future releases.

25. Added new internal databases for:
    • DNS lookup cache
    • AS Numbers/Names
    • Country geolocations
26. NetFlow enhancements Beta

    The AKIPS NetFlow architecture has been completely re-engineered. The original thinking was that customers would point a limited number of centrally located flow exporters at AKIPS. In reality, the core routers are just too busy to do 1:1 flow exports - often a site requirement because sampled flow has limited practical use. Therefore, many customers have instead configured their regional and end point routers to send the flow exports.

    In the previous architecture, a flow meter process was started for each flow exporter. Some customers need to configure 1000s of exporters, which resulted in thousands of running meter processes, causing CPU and memory contention. The new architecture reduces the number of flow meter processes to a default of half the number of CPU cores of the server (tunable). Each meter process handles many exporter flows. This significantly reduces context switching, CPU load and memory usage. The goal is to scale to somewhere around 5000+ exporters and 500k flows/sec on a single server.

    Part of the reason for the rewrite was to also to enhance the information being collected, stored and reported. This includes:

    • Integration with new BGP AS numbers/names database
    • Integration with new DNS cache database
    • Integration Country geoloation database
    • Collect and store Src/Dst AS flow fields
    • Collect and store Src/Dst interface ifIndex flow fields
    • Collect and store ToS (Type of service) flow fields
    • Re-engineered data compression algorithm

    Note: The NetFlow report GUI will be enhanced in the next release to include interface filtering. Scale and functionality testing has been carried out using the AKIPS flow simulator, which can simulator 1000s of flow exporters.

27. Config Crawler & Diff ToolPrototype

    A config crawler and diff tool has been added. The goal is to efficiently collect and store router/switch configurations using ssh and store them in a version control system. This "working prototype" feature includes the following functionality:

    • Mass parallel collection using ssh
    • Simple script based configuration - Admin -> General -> Config Crawler
    • Daily scheduling
    • Per rule scheduling
    • Storage in a svn-lite repository
    • Config diff viewer - Tools -> Config Viewer

28. Added/updated vendor MIBs:
    • Adtran
    • Alpha Technologies
    • Arris
    • Aruba
    • CableLabs
    • Ceragon
    • Cisco Airespace
    • DataConnection
    • D-Link
    • Digipower
    • Ekinops
    • Forcepoint
    • Huawei
    • Liebert
    • Nokia
    • Samsung
    • Stormshield
    • Zhone
29. Supported MIB Objects:
    • 385 Counters
    • 361 Enumerations
    • 589 Gauges
    • 157 Integers
    • 651 Other
    • TOTAL: 2143
30. Reports:
    • 415 Tables
    • 635 Graphs
    • 73 Other
    • TOTAL: 1123
31. Compiled MIBs:
    • 5269 MIBs
    • 663182 Objects
32. MD5 checksums
    • 7095356c351b5b5b67a70650479c105e   Install/Upgrade ISO
    • 2b78f3fbb15a0e7279145eba2a882142   Install Memstick

Version 19.3.2   20th May 2019

1. Fix for software expiry.
2. MD5 checksums
   • ec58244f860b81732662f19d68f67f7f   Install/Upgrade ISO
   • ec0d2ab00b56140f053f30cfbf256251   Upgrade ISO
   • 43570890322aa6da7fad697632751c5f   Install Memstick

Version 19.3.1   18th March 2019

1. Added Server Name Indication (SNI) support to the nm-http client.
2. Fixed Opsgenie integration by sending the SNI field during TLS negotiation.
3. MD5 checksums
   • ea12a0ef9cd798491ed442c341feb6d8   Install/Upgrade ISO
   • 98cc4668d172f51aaf1d9d144a69d448   Upgrade ISO
   • eb302bcb8c7eef9e1a9487d229886a6e   Install Memstick

Version 19.3   16th March 2019

1. Fixed a potential deadlock introduced in 19.2. A race condition was introduced in the message database, which stores syslog and SNMP traps, that could cause the ping/SNMP poller to stop saving any data.
2. Fixed a false "Database Error" message caused by a race condition in the message database validation code introduced in 19.2.
3. MD5 checksums
   • 93cbc3c43649c858f792483d428e7a4a   Install/Upgrade ISO
   • 3d87de41ff07f253f1327d6e3e760a83   Upgrade ISO
   • bcc96608c8e0beeeafff2cf662726edd   Install Memstick

Version 19.2   13th March 2019

1. Upgraded the operating system to FreeBSD 11.2-p9.
   • System call kernel data register leak
   • kqueue race condition and kernel panic
   • ZFS vnode reclaim deadlock
   • Kernel panic under load on Intel "Skylake" CPUs
2. Added APC PDU temperature and humidity under APC Sensors report/graphs.
3. Added Avaya/Extreme VSP Blade CPU and Memory reports.
4. Added Cisco CPU Cores report.
5. Added Cisco FEX Fan Status report.
6. Added Cisco FRU Power Supply Status report.
7. Added F5 TMM Memory reports.
8. Added Mikrotik Temperature report.
9. Added Mikrotik Voltage report.
10. Added Mikrotik Access Point report:
    • SSID
    • Band
    • Bitrate
    • Client
    • Auth Client
    • Frequency
11. Added Mikrotik Registration Table report:
    • Remote MAC
    • Bytes
    • Packets
    • Bitrate
    • SNR
12. Added SOLiD Distributed Antenna Systems (DAS) reports:
    • BTS Interface Unit (BIU):
      • Temperature
    • Donor Optic Unit (DOU):
      • Laser Diode
      • Photo Diode
    • Main Drive BTS Unit (MDBU):
      • Address
      • Temperature
    • MDBU Bands:
      • Type
      • Input High/Low
      • Output High
    • Remote Optic Unit (ROU):
      • Link Failure
      • Laser Diode
      • Photo Diode
      • Temperature
13. Added serial to Eaton UPS report.
14. Added interface to Infinet PTP Radio Stats report.
15. Added workaround in Discover/Rewalk to delete Liebert temperature sensors reporting invalid values.
16. Added 'emerg', 'crit', 'err', and 'warn' to syslog priority levels. Each of these short names were incorrectly defined in RFC 5427.
17. Display frequency in MHz instead of GHz in the following reports:
    • Mikrotik Access Points
    • Ubiquiti AirMax Radio Config
    • Ubiquiti AirFiber Radio Config
18. Enhanced the database validate and repair functionality.
19. Ignore HP Fan Status 'off' and 'removed' instead of treating them as error states.
20. Fixed backup script incorrectly validating a combination of the snapshot and live databases. This could result in an improperly sync'ed database being backed up.
21. The following single sign on features have been taken out of beta:
    • Secure LDAP
    • RADIUS
    • TACACS+
    NOTE: AKIPS recommends enabling this feature on a test/lab server and verifying that it works with your authentication environment before enabling it on your production server.
22. Added/updated vendor MIBs:
    • Aerohive
    • Cisco
    • Cisco Firepower
    • ECI Apollo
    • Exinda
    • Tellabs
    • Trendmicro
23. Supported MIB Objects:
    • 380 Counters
    • 356 Enumerations
    • 577 Gauges
    • 152 Integers
    • 630 Other
    • TOTAL: 2095
24. Reports:
    • 409 Tables
    • 608 Graphs
    • 71 Other
    • TOTAL: 1088
25. Compiled MIBs:
    • 4853 MIBs
    • 596281 Objects
26. MD5 checksums
    • 4793a3637e336d99188aec3333cd129f   Install/Upgrade ISO
    • 1794d2dcd5b2782ca602cf9e6b4aa7bf   Install Memstick

Version 19.1   31st January 2019

1. Added Avaya/Extreme VSP Series reports for:
   • Temperature
   • Fan
   NOTE: These reports appear under the Avaya menu.
2. Added Brocade Stack Topology report.
3. Added ECI reports for:
   • CPU
   • Memory
   • Fan
4. Added IBM PDU report:
   • Serial
   • Status
   • Voltage Warning
   • URL
   • Number of Outlets
5. Added IBM PDU Outlet report:
   • Type
   • Status
   • Voltage
   • Current
6. Added Infinet reports for:
   • CPU
   • Memory
7. Added Infinet Point to Point Radio report:
   • Tx/Rx Bitrate
   • Tx Retries
   • Tx Errors
8. Added Infinet Radio report:
   • Tx/Rx Bitrate
   • Tx Retries
   • Tx Errors
9. Added Sonus reports for:
   • CPU
   • Memory
   • Temperature
10. Added temperature to Sonus Power Supply report.
11. Added Synology Disk report:
    • Model
    • Type
    • Status
    • Temperature
12. Added Synology Raid Status report.
13. Added "interface" option to the Ping/SNMP Walk Tool when multiple interfaces are configured on the AKIPS server. This option determines which interface the packet capture listens on.
14. Added logging of rejected NetFlow v9/IPFIX templates to Admin > System > System Log Viewer under the "Flow" log file.
15. Changed the drilldown target for the Events Dashboard "Unreachable Devices" table to link to the Device Dashboard.
    Previously, this linked to a table showing the recent history of outages. The outage history is available from the Device Dashboard by clicking on "IPv4 Ping" or "SNMP" next to the Availability graph.
16. Added workaround in nm-snmp command to handle broken SNMP implementations in Windows Server: don't print EndOfMibView objects in walk output. This was generating noise in the logs during a Discover/Rewalk.
17. Added workaround in nm-flow-collector to handle NetFlow v9 and IPFIX packets that contain padding bytes at the end of the packet.
18. Fixed a race condition in the web server process (nm-httpd) where both the nm-httpd process and a CGI could become deadlocked in a pipe read, causing the web server to stop responding to requests.
    NOTE: This issue did not affect the poller or syslog/trap/netflow collection. The software continued to collect data and send alerts in this state.
19. Fixed Ping/SNMP Walk Tool selecting the first item in the device list when an IP address is typed in manually.
20. Fixed an issue preventing software updates using IE, Safari, or Edge browsers.
    This fixes a regression introduced in v18.7.
21. Fixed nm-flow-collector discarding reused template IDs.
    A NetFlow v9/IPFIX exporter may incorrectly reuse a template ID for a different template. If the old template was an incorrect format the flow collector would always discard that template ID.
22. Fixed API "assign" command using "all group" filter.
    For example, to assign all interfaces in both groups A and B into C, the following syntax previously did not work:
    assign interface * * all group A B = C
23. Fixed Accedian Performance Assurance incorrect scale for One-Way and Two-Way Delay.
24. Removed a feature where a session cookie was expired if the user's IP address changed, automatically logging out the user. This could result in unwanted logout behaviour in various scenarios, e.g. users behind load balancers or dual stack IPv4/IPv6 client devices.
25. Removed units (degrees C/F) from Opengear Temperature report and graphs.
    Opengear devices can be configured to report either Celsius or Fahrenheit, however there is no SNMP object that identifies which units are in use.
26. Updated EULA to version 1.6.
27. Added/updated vendor MIBs:
    • Avaya
    • SOLiD
    • Viptela
28. Supported MIB Objects:
    • 371 Counters
    • 343 Enumerations
    • 563 Gauges
    • 145 Integers
    • 607 Other
    • TOTAL: 2029
29. Reports:
    • 393 Tables
    • 591 Graphs
    • 71 Other
    • TOTAL: 1055
30. Compiled MIBs:
    • 4655 MIBs
    • 548094 Objects
31. MD5 checksums
    • 0e9a3f5be35a9edfad89b878d35cca66   Install/Upgrade ISO
    • 223769acd31ae46b15a3c38e850ac1e7   Upgrade ISO
    • b779ec00894672ff2b2d6260aa577775   Install Memstick

Version 18.9   30th November 2018

1. Fixed Tools > Graph Reporter not loading. This fixes a regression introduced in version 18.8.
2. Fixed segmentation fault in the SNMP trap collector.
   The fixes introduced in version 18.8 did not fully resolve the trap decoding regressions introduced in version 18.7. If SNMPv2 trap parameters were configured on the AKIPS server and an SNMPv3 trap was received, the trap daemon would crash.
3. Force the admin user to sign in using local authentication only.
4. MD5 checksums
   • be197969eea3ed2691553567e8809ba8   Install/Upgrade ISO
   • b819c1e922383d1c752d3fc373b6d930   Upgrade ISO
   • 72e378f253273ba7c85f4ef7ceb96284   Install Memstick

Version 18.8.1   26th November 2018

1. Fixed a regression introduced in 18.8 for web API authentication. Web API calls return invalid username/password due to syntax changes introduced to the backend nm-pam authentication program used for single sign on.
2. MD5 checksums
   • 0c1cb1ec9710a6109a7d67b1401c476e   Install/Upgrade ISO
   • 37d0f6cdcd0566be88bbf50cbdc1a107   Upgrade ISO
   • ce0c16dcff1e6cd10d00ac2cefdeafbc   Memstick Image

Version 18.8   22nd November 2018

1. Upgraded the operating system to FreeBSD 11.2-p4.
   • Improper ELF header parsing
   • IP fragment remediation causes IPv6 fragment reassembly failure
   • Denial of service in listen syscall over IPv6 socket
   • Small kernel memory disclosures in two system calls
2. Added Accedian CPU and Temperature reports
3. Added Accedian Performance Assurance report
   • Near-end Packet Loss
   • Far-end Packet Loss
   • One-way Delay
   • Two-way Delay
4. Added Fortinet ADC Virtual Server report
   • Virtual Domain
   • New Connections
   • Concurrent Connections
   • Throughput
5. Added HP Stack Status report
   • State
   • Topology
6. Added HP Stack Port Status report
7. Display Autonomous System ASDOT notation in BGP reports when the ASN is in the private range 4200000000 - 4294967294.
8. Updated Admin > General > Private AS Numbers to support ASDOT notation.
9. Updated Auto Grouping help text examples.
10. Added MAC Address Table log file to Admin > Discover > Discover Log Viewer.
11. Added -x option to the nm-http client to specify a proxy server.
12. http_send() / http_result() added 'proxy' parameter. For example:

    http_result ({ ...
                             proxy => 'proxy.example.com:3129',
                             });

13. Added nm-lagg-setup command line tool for configuring LAGG/LACP/failover interfaces on the AKIPS server. Contact us for assistance in configuring this feature.
14. Performance speedup to the database sync.
15. Fixed Switch Port Mapper using incorrect device/interface dashboard drilldown links. For example, the "Location History" report was using the same device dashboard link on every row even when the switch location changed.
16. Fixed Cisco IPSLA Jitter report drilldown not displaying the MOS graph.
17. Fixed not being able to select "today" in the date picker.
18. Fixed memory leak in nm-flow-collector caused by deleting active flow meters under Admin > General > Netflow Meters.
19. Fixed segmentation fault in the SNMP trap collector when SNMPv3 trap parameters were configured on the AKIPS server and an SNMPv2 trap was received. This fixes a regression introduced in version 18.7.
20. User authentication fixes/changes:
    • Added an "Auth Type" dropdown menu item under Admin > Users/Profiles > User Settings.
    • Only attempt to authenticate a given user determined by their "Auth Type" setting. Previously, both local and remote authentication were attempted.
    • Split internal PAM configuration into separate files by authentication type. This will resolve issues where enabling single sign on configuration may accidentally lock all users out of the web interface.
21. Added/updated vendor MIBs:
    • Check Point
    • ECI
22. Supported MIB Objects:
    • 371 Counters
    • 332 Enumerations
    • 537 Gauges
    • 140 Integers
    • 584 Other
    • TOTAL: 1964
23. Reports:
    • 377 Tables
    • 567 Graphs
    • 71 Other
    • TOTAL: 1015
24. Compiled MIBs:
    • 4636 MIBs
    • 542675 Objects
25. MD5 checksums
    • fc2d14231d0d92056bfe8d1322a4e6eb   Install/Upgrade ISO
    • 031af1df8d37cf1ee52214a10fb6d0f9   Memstick Image

Version 18.7.1   26th October 2018

1. Fixed an issue in the single sign on configuration that could potentially allow local users unauthenticated web access.
   A regression was introduced in v18.7 where the Authentication Settings screen would create an invalid PAM service file that would allow local users to sign in using any password if the authentication server was unreachable.
   Customers who configured single sign on prior to 18.7 are unaffected.
2. MD5 checksums
   • 9486152e71c3a19b291b78cb8c33be7f   Install ISO
   • 0caf0fd6e5ccd7e2f2dc55553c240470   Upgrade ISO
   • 582a2e30d786963ecb8117386be7af5e   Memstick Image

Version 18.7   23rd October 2018

1. Added global poller SNMP window tunable (defaults to 1). Previously this was a hard coded value. This tunable is only useful when monitoring networks with high latency and/or high packet loss.
2. Poller performance improvements for SNMPv3 authentication.
3. Added SNMP poller report under "Reports -> Device -> SNMP Statistics".
   • Tx Requests
   • Rx Responses
   • Round Trip Time
   • Lost / No Response
4. Added bit rate columns and graphs to Cisco Class Based QoS reports.
5. Added Ciena Traffic Profile report.
6. Added Ciena VLAN report.
7. Added Fortinet FortiADC reports.
8. Added H3C Power Supply Status report.
9. Added HP Laser Interface report.
10. Added Nutanix Cluster report.
11. Added Nutanix Disk report.
12. Added Nutanix Storage Pool report.
13. Added Nutanix Container report.
14. Added Nutanix Hypervisor report.
15. Added Nutanix VM report.
16. Added Opengear Temperature report.
17. Added Radware Ports Throughput report.
18. Added "HTTP Log" Web API to allow access to the AKIPS server http log.
19. Added UPS-MIB.upsAlarmsPresent for threshold alerting.
20. Added CISCO-VTP-MIB.vlanTrunkPortDynamicStatus for status alerting.
21. Added packet loss to the Cisco IPSLA Jitter report. Delete CodecType object if "notApplicable" to reduce clutter.
22. Updated standard AS Numbers for BGP reporting.
23. Changed the default sort for the Spanning Tree report to the "Topology Changes" column.
24. Changed Cisco Class Based QoS reports to display total packets/bytes instead of average packets/bytes.
25. Apply user's mute/trim rules to Syslog/Traps reports when drilling down from the Events Dashboard.
26. Unreachable Devices report - turn off maintenance checkbox by default. This reverts the change introduced in 18.5.
27. Relax username restrictions. Unix usernames cannot start with a digit, but other single sign on authentication schemes are less restrictive. For example, allow usernames containing all digits.
28. Run various discover features sequentially instead of concurrently to reduce the impact on devices. The discover automatically performs discovery/update of various device parameters (e.g. ifspeed, ifalias, etc).
29. Fixed a defect on some control panels where selecting the first device in the device list had no effect on the report.
30. Fixed Syslog/Trap regex filters and alerting to be case insensitive to be consistent with the rest of the product.
31. Fixed an issue in the web API authentication where every request would attempt to authenticate against a single sign on server (e.g. LDAP, Radius, Tacacs) before the local password database. Customers who perform a large number of automated web API queries noticed a large increase in requests to their authentication server.
32. Fixed Cisco Cell Modem RSRQ/SNR/SINR scale. These objects are reported in tenths, not units. Scale them up to milli-dB in our database for ease of reporting.
33. Fixed keyboard map selection in the installer due to a change in the FreeBSD 11.2 installation program.
34. Fixed a poller performance issue when an SNMPv1 device returned an error status value (e.g. when requested MIB OIDs are unknown). The poller was not immediately sending the next request.
35. Added/updated vendor MIBs:
    • Accedian
    • Avaya
    • Ciena Nortel
    • Ciena CES
    • Fortinet
    • Meraki
    • Opengear
    • Raritan
36. Supported MIB Objects:
    • 369 Counters
    • 329 Enumerations
    • 487 Gauges
    • 140 Integers
    • 616 Other
    • TOTAL: 1941
37. Reports:
    • 370 Tables
    • 555 Graphs
    • 71 Other
38. Compiled MIBs:
    • 4630 MIBs
    • 541425 Objects
39. MD5 checksums
    • 4405c006d42db4416a216aaf109021ce   Install ISO
    • bfb09f9853388f5afa64ce801bddfe04   Upgrade ISO
    • 58569c0817f4d9f563ddff8d8b5d70f9   Memstick Image

Version 18.6.1   19th September 2018

1. Fixed Switch Port Mapper data not being collected from SNMPv3 contexts.
   A regression introduced in v18.5 prevented the Mapper from walking SNMPv3 contexts, resulting in the loss of address location information for some customers.
2. MD5 checksums
   • ce66051cb488bc3cef7839fb3ac80871   Install ISO
   • c0444b18afd4de5c32c887e27b0c261f   Upgrade ISO
   • 9a07667ccfe49eaa0e60714b397f29f6   Memstick Image

Version 18.6   7th September 2018

1. Fixed invalid SNMP parameters typed in by the user causing the Discover to run forever.
2. Fixed the poller exiting if a device is configured with an SNMP version but no SNMP IP address.
3. Fixed the software taking a long time to start if the backup server is unavailable.
4. Fixed the backup failing under certain conditions due to being unable to validate the snapshot copy of the database on disk.
5. Added MaxRep configuration to the Device Editor.
6. Added error messages to the Rewalk output to assist troubleshooting of invalid/missing SNMP configuration.
7. Added additional checks to the database validate and repair functionality.
8. MD5 checksums
   • 06c5b1158c2ebdef06b1d9a151026b08   Install ISO
   • 66c1b80ed8b81f02a9e6dc7703923560   Upgrade ISO
   • f394ce9e4e6cecd6c8549f2b06c9844d   Memstick Image

Version 18.5   16th August 2018

1. Upgraded the operating system to FreeBSD 11.2-p2.
   • FreeBSD 11.2 Release Notes
   • Unauthenticated EAPOL-Key Decryption Vulnerability
   • Resource exhaustion in IP fragment reassembly
   • L1 Terminal Fault (L1TF) Kernel Information Disclosure
   • Resource exhaustion in TCP reassembly
2. Added PIM Interface reporting
   • IP Address
   • Netmask
   • Mode
   • Designated Router
   • Interface Status
3. Added Spanning Tree report
   • Protocol
   • Bridge
   • Designated Root
   • Last Change
   • Topology Changes
4. Added BFD Session State report using the BFD-STD-MIB
   • Interface
   • IP Version
   • IP Address
   • Status
   Note: This has only been tested against a Palo Alto device.
5. Added F5 Cluster report
   • Failover Status
   • Sync Status
6. Added Axis Temperature report
7. Added H3C Module Status report
8. Added Cisco Firewall Hardware Status
9. Added Cisco IKE Tunnel report
   • Remote IP Address
   • Tunnel Status
   • Tx/Rx Packets
   • Tx/Rx Bytes
   • Tx/Rx Dropped Packets
10. Added Cisco IPSLA HTTP RTT report
    • Total RTT
    • TCP Connect RTT
    • DNS RTT
    • Transaction RTT
11. Added Cisco IPSLA Jitter report
    • Average Jitter
    • Src to Dst Jitter
    • Dst to Src Jitter
    • Src to Dst Latency
    • Dst to Src Latency
12. Added Cisco DS1 report
13. Added Cisco Class Based QoS reports
    • Classmap Pre Policy Packets
    • Classmap Pre Policy Bytes
    • Police Conformed Packets / Bytes
    • Police Exceeded Packets / Bytes
    • Police Violated Packets / Bytes
    • Queueing Dropped Packets / Bytes
    • Traffic Shaping Delayed Packets / Bytes
    • Traffic Shaping Dropped Packets / Bytes
14. Added Pulse Secure reports
    • CPU
    • Memory
    • Disk/Swap Util
15. Added Pulse Secure Users report
    • Concurrent users
    • Cluster users
    • Total users
    • Web users
    • Mail users
16. Added Pulse Secure Hits report
    • Total
    • File
    • Web
    • Apple
    • Terminal
    • SAM
    • Network
    • Meeting
17. Added UPS input frequency
18. Added single sign on configuration controls for:
    • Secure LDAP
    • RADIUS
    • TACACS+
    Important notes:
    • This is a beta feature and must be verified to work with your authentication environment on a test/lab AKIPS server before enabling it on your production server.
    • Users need to be added manually into AKIPS using the Admin -> Users/Profiles -> User Settings menu before they can log in. This adds the user into the AKIPS database and sets up their email address and profile.
    • The AKIPS user database was designed with Unix-like usernames in mind, which means lowercase English letters (a-z), digits, and the only permissible punctuation characters are dash, underscore, and dot. If your usernames do not conform to this format then it will not be possible to authenticate those particular users.
19. Speedup to control panels when displaying large device/interface lists on Firefox.
    Customers have previously reported that their GUI either locks up or is very slow when displaying control panels which have large select lists (e.g. 20k+ devices). This appears to be an issue with drop down single select menus and very large lists. A test setup monitoring 60,000 switches showed the problem badly.
    Switching the control panels to multi-select lists appears to have resolved the browser performance problem and the GUI is fairly responsive, considering the size of the configuration. Chrome performance is still 'hit and miss'. Some versions of Chrome are slightly slower than Firefox, but other versions spin 100% on CPU or hang.
20. Major performance improvements to the database sync runtimes.
    The AKIPS databases are written to backend storage every 10 minutes, and also after the 80 minute database compression. Due to ZFS improvements in FreeBSD 11.1 and 11.2, and changes to our database sync algorithm, the sync runtimes have been significantly improved. The changes have reduced the overall number of disk writes, system calls, context switches and interrupts. For large AKIPS configurations, the performance graphs should show a noticeable improvement.
21. Added ADB Pre Sync Runtime graph to the Admin -> Performance -> Database report.
22. Added a SNMP request rate limiting option to the nm-snmp command. This feature limits the rate at which SNMP walks are sent (e.g. Discover / Rewalk). Rate limiting was required during large scale testing in our lab because the discover and rewalk would overrun our SNMP simulators, each of which was configured to simulate 10,000 × 24-port switches.
23. Added poller debug support for enumerated and TimeTick object types.
24. Reduced the SNMP polling window from 40 seconds down to 30 seconds. The poller now starts its schedule at second 5 and finishes at second 35.
25. Changed poller scheduling algorithm so devices with more than 2000 OIDs are started at the beginning of the polling cycle. Previously it was 5000 OIDs.
26. Ping/SNMP Walk Tool: allow access to non-admin users. The admin user has to explicitly assign the SNMP Walk Tool to a profile under Profile Settings, even if 'All Reports' is turned on.
27. Added SNMP v3 engine database that stores the following:
    • Engine ID
    • Engine Boot Time
    • Engine Boot Count
28. Performance improvement to SNMP walks using SNMPv3. nm-snmp goes through v3 engine discovery at the start of every walk. This is unnecessary and inefficient when performing many MIB table walks of a device like the discover does. nm-snmp now stores v3 information in the engine database and reuses this information for each subsequent walk. Both the poller and nm-snmp share the new engine database. nm-snmp always performs at least one v3 engine discover for each device (required for the APC agent issue described below).
29. Workaround for defective APC SNMPv3 agents which causes them to be reported as SNMP unreachable and no data is collected.

    The poller performs engine discovery for each device at start up, and reuses this information for each subsequent polling cycle so it does not constantly go through the engine discover process.

    SNMPv3 uses engine ID, boot count and boot time values in its authentication mechanism. When a device is rebooted, its boot count is incremented and boot time reset. On the next poll request, there will be a mismatch between the poller and the agent, therefore the agent should return a SNMPv3 Report packet to force engine rediscovery.

    There is a defect in APC devices where the agent never generates a report packet when it is rebooted. It just silently discards all requests which do not match its new time/count values. The poller has no way of knowing what has occurred.

    Since the poller and nm-snmp programs share the new engine database, the next snmp walk will force a rediscovery of the APC engine information. AKIPS performs regularly walks of every device to update various configuration information.

30. Added "Destroy Database" button to the Admin -> System -> Restore menu. On a backup server, testing a restore to itself results in a live database after a reboot. A customer may wish to test the restore, but then remove the database after the test without needing to do a complete reinstall.
31. Added Admin -> General > Login Banner menu to enable customers to display a custom message on the login page. It is a requirement for some organisations to display a legal notice to their users on all systems.
32. Availability Reporter: Fixed displaying a single group. For the group summary report, it should be possible to append ';group={name}' to display a single group. Fixed a bug where if a device appeared in multiple groups then all of those groups would be displayed.
33. Enhanced the Switch Port Mapper API function to search on MAC address. A query will take the following format:
    http://{server}/api-spm?password={pw};mac={MAC}
34. Changed control panel checkbox sliders so they are more obvious.
35. Changed Unreachable Devices: Turn on maintenance mode checkbox by default.
36. Changed HTTP server so it only redirects to HTTPS if a valid SSL certificate is loaded.
37. Fixed an issue where the databases were not being sync'ed when a backup was started manually. This could potentially cause database inconsistencies on a restore.
38. Fixed removing static routes from the configuration.
39. Added/updated vendor MIBs:
    • Alpha Technologies
    • APC PowerNet to version 4.2.6
    • BlueCat
    • Cisco
    • IBM
    • Infinet
    • NEC
    • Palo Alto
    • Oracle
    • VMware
40. Supported MIB Objects:
    • 352 Counters
    • 324 Enumerations
    • 450 Gauges
    • 130 Integers
    • 585 Other
    • TOTAL: 1841
41. Reports:
    • 353 Tables
    • 508 Graphs
    • 71 Other
42. Compiled MIBs:
    • 4600 MIBs
    • 533935 Objects
43. MD5 checksums
    • 63ce65ecbbc0e6939e918114fb858bef   Install/Upgrade ISO
    • 60c617c9d7ddf249d9a9c909d150c831   Memstick Image

Version 18.3   16th May 2018

1. Upgraded the operating system to FreeBSD 11.1-p10
2. Added WWW-MIB reports to Reports -> Device menu:
   • WWW Summary
     • Requests
     • Responses
     • Bytes
   • WWW Requests
     • Request Type
     • Requests
     • Bytes
3. Added Proxy HTTP report to Reports -> Device menu:
   • Client Requests
   • Client Hits
   • Client Errors
   • Server Requests
   • Server Errors
4. Added ForeScout reports:
   • ForeScout Device Status
     • IP Address
     • Connection Status
     • NTP Status
     • HA Status
     • Engine Status
     • OnHold Status
     • Channel Status
     • Failover Status
   • ForeScout System
     • Agent
     • Version
     • Database Type
     • Packets
     • Bytes
5. Fixed Cisco Memory not reported correctly for devices with greater than 4 GB of memory. Prefer CISCO-ENHANCED-MEMPOOL-MIB for memory statistics as this MIB supports 64 bit counters.
6. Fixed calling http_result() with a GET request breaking status alerting.
   A regression introduced in v18.1 resulted in waitpid() being called with an uninitialized pid value. When this occurred, nm-site-script-alert-events would hang forever, locking up the process responsible for status alerts.
7. Fixed a rare Snappy compression library failure causing the ping/SNMP poller to stop saving any time-series data.
8. Fixed an issue where an interrupted upgrade left the AKIPS server in a state where it was no longer possible to upgrade until the server was rebooted.
9. Fixed Liebert Battery Status treating 'notfullycharged' as a good state.
10. Ignore Interface Duplex state 'na' instead of treating it as an error state.
11. Ignore APC PDU Power Supply status 'notpresent' instead of treating it as an error state.
12. Updated Perl to version 5.26.
13. Added/updated vendor MIBs:
    • Aruba
    • Bluecoat
    • CISCO-WIRELESS-NOTIFICATION-MIB (changed various trap syntax from OCTET STRING to DisplayString)
    • ForeScout
    • Fortinet
    • Ixia
    • Kemp Technologies
    • QLogic
    • Ruckus
14. Supported MIB Objects:
    • 313 Counters
    • 312 Enumerations
    • 462 Gauges
    • 128 Integers
    • 529 Other
    • TOTAL: 1744
15. Reports:
    • 331 Tables
    • 494 Graphs
    • 70 Other
16. Compiled MIBs:
    • 4514 MIBs
    • 524255 Objects
17. MD5 checksums
    • 1732de6066c1543ef53163a90be14ab9   Install ISO
    • d17d076b7b2663cbffcdc4b22dec6118   Memstick Image

Version 18.2   27th March 2018

1. Upgraded the operating system to FreeBSD 11.1-p8:
   • Speculative Execution vulnerabilities ("Meltdown" and "Spectre V2")
   • Multiple vulnerabilities of ntp
2. Switch Port Mapper: added support for searching with dashed MAC addresses: xx-xx-xx-xx-xx-xx
   Microsoft Windows "ipconfig" command displays MAC addresses in this format.
3. Reduced disk usage on the backup server by removing ZFS snapshots older than 7 days. Previously, snapshots were kept for up to 14 days. The new backup retention policy is:
   • The most recent 80 minute backup
   • Start of current day
   • Start of yesterday
   • Start of every 2nd day, up to 7 days
4. Changed "Impact Assessment" table in the Events Dashboard to ignore devices in Maintenance Mode.
5. Fixed "Impact Assessment" drilldown link regression introduced in v17.16 which would display the Unreachable Devices report with no options selected.
6. Fixed status wait alerting rules not reloading Site Scripts.
7. Fixed System Settings not deleting static routes if all static routes configuration was removed from the System Settings screen.
8. Added/updated compiled MIBs:
   • Avaya
   • Cisco
   • Nutanix
9. Supported MIB Objects:
   • 296 Counters
   • 304 Enumerations
   • 462 Gauges
   • 128 Integers
   • 526 Other
   • TOTAL: 1716
10. Reports:
    • 326 Tables
    • 494 Graphs
    • 69 Other
11. Compiled MIBs:
    • 4498 MIBs
    • 522495 Objects
12. MD5 checksums
    • e335b5af1f77473c58d86cf2b10ab217   Install ISO
    • c51705d884cdcbb4c4daa2702c06d809   Memstick Image

Version 18.1   9th February 2018

1. Added F5 APM Report:
   • APM Sessions
     • Active Sessions
     • Total Sessions
   • APM Global
     • Active Sessions
     • Total Sessions
2. Added denied and discarded stats to the Palo Alto Global Active Sessions report.
3. Added Palo Alto AHO/DFA Report:
   • AHO Usage
   • FPGA AHO Requests
   • DFA Matches
   • FPGA DFA Requests
4. Added Palo Alto IP/TCP Report:
   • IP Fragments
   • TCP Action Close
   • TCP No Match Close
   • TCP Out of Window Drops
   • TCP Reassembly Errors
5. Significant speedup to the 10 and 80 minute database sync runtimes. The ADB and TDB sync runtimes can be viewed in the Admin -> Performance -> Database menu. The database sync runtimes for some large configurations were taking a long time to complete. This would cause things like the ping/SNMP poller to stall while waiting for database locks. The issue is extremely complicated and involves many variables, including:
   • The way AKIPS does large sequential database file writes
   • Inefficiencies in how the kernel flushes dirtied memory pages to storage
   • ZFS ARC size
   • Memory size, speed and free memory
   • Sequential and random write speed to the storage
   • Back end storage controller cache sizes
   • Back end physical media (spindles vs SSD)
   • How busy the shared storage is at the time of the syncs
   • VMs incorrectly configured for shared CPUs (must be dedicated cores)
   • Amount of RAM allocated to the VM
   • Virtual disk setup (e.g. SAN fixed size, NAS eager provisioning)
   • etc...
   NOTE: Approx 24 hours after upgrading to 18.1, check that the 10 minute ADB and 80 minute TDB sync runtimes have reduced by viewing the Admin -> Performance -> Database graphs.
6. Added separate scheduled discover and rewalk controls. Customers may want to schedule both. For example, discover new devices from a limited set of IP address ranges, but also perform a daily rewalk of all existing devices. Setting both to the same time of day will mean a rewalk of existing devices runs first, followed by a discovery.
7. Added an SNMP walk skip rule for the SNMPv2-MIB.sysOR... MIB objects. Some devices return an error in this part of the MIB. The objects are of no use anyway.
8. Added an SNMP walk skip rule for F5-BIGIP-LOCAL-MIB ltmPoolMbrStatusParentType. These objects are encoded using string indexes, which could be very long depending on how the customer configured the pool names. The F5 SNMP agent would timeout and fail on an SNMP walk in that part of the MIB because they have a broken understanding of what 'max repetitions' is supposed to do.
9. Allow regular non-admin users access to the Device Editor. Customers have requested allowing regular users to access the Device Editor so that they can place devices into Maintenance Mode. Changed Device Dashboard to display the 'Edit' button if applicable. The admin user has to explicitly assign the report (in this case, Device Editor) to the profile, even if 'All Reports' is turned on. The 'Rewalk' and 'Delete' buttons will only be displayed for the admin user.
10. Added a good state of 'standby' for the CISCO-STACK-MIB.moduleStandbyStatus
11. Added descriptions to Sonus call table and graphs.
12. Increased the hard coded ping scan 'limit' value from 300 seconds to 30 minutes. This is required for ping scan rules with very big ranges. For example: 10.128-255.*.*
13. Speedup the backup and restore. Changed scp/sftp to use the [email protected] encryption instead of the default encryption. Testing shows a 25% speedup in data transfer times and reduction in CPU usage.
14. Database performance graphs improvements
    • Changed default selection to last30d
    • Added last90d option
    • Removed last8h option
    • For last30d selection, added "Previous 30 Days" graphs for sync runtimes
    • Removed disk usage graphs as these are available under "Disk Usage Graphs" report
15. Updated all discover related Site Scripts to include locking around the discover_scan() and discover_config() functions. This stops race conditions where two discover Site Script functions run at the same time.
16. Fixed an issue where threshold alerts were generated from rules which had been deleted. The alerting checks every minute to see if any objects in the threshold groups have dropped below their thresholds, in which case an alert is generated and the object gets removed from the group. Threshold groups from old rules weren't being removed until they were empty, so alerts could be generated a long time after the associated rule had been removed from the config.
17. Fixed Site Script function name prefix checking for wrapper functions. A customer had a site script function named 'web_group_auto_run' which was incorrectly being called by group_scripting_wrapper() due to the function name containing 'group_'. This resulted in the Auto Grouping calling itself and deadlocking the discover. Fixed so that group_scripting_wrapper() only calls function names beginning with 'group_'. Also fixed other wrapper functions.
18. Fixed invalid sysName handling in the discover. The discover now runs config_strip_sysname() over SNMPv2-MIB.sysName first as it may not contain any valid characters. If the result is empty string, then set sysName to DNS name or IP address.
19. Fixed off-by-one in timestamp of the 'cseries' API command. The output of the 'cseries' command was missing a header timestamp due to an off-by-one error. Removed seconds from the timestamp header because it's always ':00' and provides misleading accuracy.
20. Fixed a Discover issue with TRIPPLITE-MIB.tlUpsAlarmLocation object. This object is used to fake up sysLocation, but if it contains an unmatched double quote character it was causing the discover to hang with an "invalid command" error from nm-db.
21. Bug fix to the device editor for putting devices in maintenance mode. The GUI button was only updating the group assignment and not creating or deleting a manual grouping rule. Therefore when the auto grouping ran, it would not correctly update the grouping assignments.
22. Bug fix to the http_result() API in Common.pm. It was not calling waitpid() for exited child processes, therefore zombie processes were sitting around forever if the Perl script was persistent.
23. Bug fixes to Web API programs (api-msg, api-flow, api-flow-timeseries) which were not calling waitpid() to reap child processes.
24. Added/updated compiled MIBs:
    • Arista
    • Avaya
    • Efficient IP
    • Hitachi
    • Loadbalancer.org
    • Microsoft LAN Manager
    • Verint Systems
25. Supported MIB Objects:
    • 296 Counters
    • 304 Enumerations
    • 462 Gauges
    • 128 Integers
    • 526 Other
    • TOTAL: 1716
26. Reports:
    • 326 Tables
    • 494 Graphs
    • 69 Other
27. Compiled MIBs:
    • 4485 MIBs
    • 520275 Objects
28. MD5 checksums
    • f265b54c6c63919a680453164cf068a7   Install ISO
    • 39433992c1c036bcd415354da6417948   Upgrade ISO
    • daee6b004f23a9fa7a19b951a2c8b0fa   Memstick Image

Version 17.16   21st December 2017

1. Upgraded the operating system to FreeBSD 11.1-p6
2. Usability enhancements to the Unreachable Devices report:
   • Add options to show/hide columns (Ping4, Ping6, SNMP)
   • Add option to display devices in maintenance mode
   • Hide buttons when printing or generating PDF
3. Added a "Maintenance Mode" control in the Device Editor.
4. Don't display unreachable devices which are in maintenance mode.
5. Display a message in the Device Dashboard when a device is in maintenance mode.
6. Added support custom http header support to the http_send() / http_result() APIs when doing GET requests.
7. Added optional port number to nm-http. For example:
   nm-http "http://www.example.com:8080/"
http_send ({ url => "http://www.example.com:8080/" });
8. Allow commas in place of semicolons in the time filter syntax. This makes it simpler for users to manipluate the time filter in the URL instead of using a %3B to URL encode semicolons.
9. Added cgi_post_data() API to retrieve POST data. This can be used in web_ functions in Site Scripting to retrieve POST data as a scalar when Content-Type is not application/x-www-form-urlencoded or multipart/form-data (e.g. when receiving text/plain or application/json).
10. Validate time filter in Status and Threshold rules
11. Fix to CGIs which were not terminating when the user closes their browser window.
12. Fix "site_cfg" appearing in device list.
13. Added/updated compiled MIBs:
    • Citrix
    • Avaya
    • Opengear
    • Mikrotik
14. Supported MIB Objects:
    • 283 Counters
    • 304 Enumerations
    • 460 Gauges
    • 128 Integers
    • 524 Other
    • TOTAL: 1699
15. Reports:
    • 322 Tables
    • 490 Graphs
    • 69 Other
16. Compiled MIBs:
    • 4442 MIBs
    • 517147 Objects

Version 17.15   17th November 2017

1. Added -H option to the nm-http client. This allows custom HTTP headers to be sent.
2. Common.pm http_send() / http_result() pass optional HTTP headers through to remote server when doing POST requests. For example:

   http_result ({ ...
            headers => [ "X-First-Name: Joe", "X-Last-Name: Smith" ],
            });

3. Increased the size of manual grouping lists from 10000 to 50000. Display a warning if the 50000 limit is reached.
4. Restrict the size of ZFS ARC (file system cache) to 50% of physical memory.
5. Added Liebert UPS Report
6. Added Dell switch CPU
7. Added optional Asset Table to Device Dashboard using site-specific configuration entries. This generates a customisable table in the Device Dashboard containing entries generated by the customer, e.g. asset tags, links to other systems, etc. Column headers are generated using the attribute name (replacing underscores with spaces). For example:

   add child Atlanta-ro asset
   add text Atlanta-ro asset Asset_Tag = 1234
   add text Atlanta-ro asset SSH = "<a href='ssh://10.1.2.3'>SSH</a>"
   add text Atlanta-ro asset Wiki = "<a href='https://mywiki.example.com/device/Atlanta-ro.html'>link</a>"

8. Create automatically generated interface groups (ifspeed, iftype, vlan) first so that they can be used in Auto Grouping rules.
9. Fixed the backup/restore to allow spaces in passwords/passphrases.
10. Fixed a race condition when saving Site Scripts.
11. Fixed status wait alerting rules not reloading nm-site-script. A customer reported error messages about not finding site script subroutine when a wait timer is used together with 'call' action in Status Alerting.
12. Fixed nm-ping-scan so it displays error messages about invalid IP address ranges.
13. Fixed Device Dashboard drill down to the Ping/SNMP Walk tool.
14. Fixed false positive in the Status Alerting when checking rules with a time/value filter.
15. Prune old backup snapshots when out of disk space.
16. Added new option to allow each walk request to disable OID loop checks. The snmp library checks if walk response packets have OIDs in binary order. This is needed for MIB table loop detection (a bug in various vendor devices). The OID loop check can be disabled globally using the -f flag to nm-snmp. The loop check can now be disabled on a per walk command basis by using the syntax 'errchk 0' in the command. This functionality is required for walking Cisco wireless controllers. All the AireSpace tables are returned in an unsorted order.

17. Added/updated compiled MIBs:
    • Calix
    • Dell
    • Mellanox
    • APC PowerNet
18. Supported MIB Objects:
    • 281 Counters
    • 304 Enumerations
    • 461 Gauges
    • 125 Integers
    • 527 Other
    • TOTAL: 1698
19. Reports:
    • 322 Tables
    • 489 Graphs
    • 69 Other
20. Compiled MIBs:
    • 4441 MIBs
    • 515958 Objects

Version 17.14   25th October 2017

1. Added TopN Graph reports to most vendor technologies.
2. Added separate Ping Tool which can be assigned to non-admin user profiles.
3. Added Juniper COS report:
   • Tx Drops
   • Tx Packets
   • Tx Bytes
4. Added AudioCodes DS1 Trunk report
   • Trunk Util
   • Trunk Calls
5. Updated Aruba Controller report
   • Serial Number
   • Temperature
6. Added Brocade Stack report
   • Index
   • Type
   • Config State
   • Oper Status
   • Role
   • MAC
   • Serial Number
7. Added Haivision Chassis report
   • Type
   • Serial Number
   • Firmware Version
   • Video (inputs, encoders, decoders)
   • Audio (encoders, decoders)
8. Added Haivision Audio report
   • Name
   • Input
   • Mode
   • Algorithm
   • Bitrate
   • Bytes
   • Packets
   • Errors
   • Resets
9. Added Haivision Video report
   • Name
   • Input
   • Bitrate
   • Admin Status
   • Oper Status
   • Bytes
   • Packets
   • Errors
   • Resets
10. Added Haivision Stream report
    • Name
    • Type
    • Encaps
    • Port
    • Admin Status
    • Oper Status
    • Bytes
    • Packets
    • Failed Bytes
    • Failed Packets
11. Added static route configuration to the Admin->System->System Settings.
12. Changed the following Admin Tools from a HTTP GET to a POST due to browser buffer size limitations with GET requests.
    • Alert Settings
    • Availability Settings
    • Site Scripting
13. Availability Reporter
    • Display message if no groups configured.
    • Enable sorting event graph by availability percent.
    • Fixed 'Save Graph' not working for availability group summary (1st column)
    • Fixed sort options not being passed through to saved graph
14. Switch Port Mapper
    • Display message if collection is turned off.
    • Fixed handling of Cisco IOS-XE, which does not fully support the ENTITY-MIB.
    • Added spm_exclude_arp_context group handling to the Switch Port Mapper. Some devices (e.g. Cisco Nexus) get stuck at 100% cpu for a long time when walking virtual context ARP tables, especially in large flat networks (i.e. large subnets). Virtual context ARP tables will be skipped for all devices in the spm_exclude_arp_context group.
      add device group nexus
assign * * sys SNMPv2-MIB.sysDescr value /NX-OS/ = nexus
assign device * any group nexus = spm_exclude_arp_context
      
15. Interface Grapher - added sort option.
16. On Microsoft Hyper-V, disable timesync service if NTP is configured.
17. Performance improvements to the flow reporter.
18. Fixed help text for ifOperStatus in Status Alerting.
19. Fixed editing manual group interface groups after the table has been sorted.
20. Fixed stripping of whitespace in site scripting code.
21. Fixed Unused Interfaces Report. Toggling the device group selector between Multi Select and Single Select causes the buttons to disappear off the screen.
22. Fix to parsing ADB value when using mget commands. Treat the value as an integer if it starts with a digit, but fallback to string if the entire value can not be correctly parsed.
23. Added/updated compiled MIBs:
    • Aruba
    • Check Point
    • Cisco
    • West Safety Services
24. Supported MIB Objects:
    • 281 Counters
    • 304 Enumerations
    • 457 Gauges
    • 125 Integers
    • 523 Other
    • TOTAL: 1690
25. Reports:
    • 320 Tables
    • 484 Graphs
    • 69 Other
26. Compiled MIBs:
    • 4415 MIBs
    • 514364 Objects

Version 17.13   29th September 2017

1. Added collection of virtual context ARP table data for the switch port mapper.
2. Added a group rename button in the manual grouping controls.
3. Added 'CGI Debugging Toggle' option to the Miscellaneous settings menu, which enables logging for 10 minutes, then the option automatically turns off.
4. Added help text in the Status Alerting for configuring ifOperStatus alerts.
5. Added support for entity sensors with 'micro' precision.
6. Added F5 global HTTP/SSL(https) report.
7. Changed discover_device_rewalk() perl function so that it is only necessary to pass in either the device name or SNMP IP address to make it easier for site scripting.
8. Fix layout of the Availability Reporter for narrow browser windows. Previously, the outage graph would disappear from view if the browser window was too narrow (e.g. less than 1200 pixels).
9. Events Dashboard - moved Unreachable Devices table to right-hand side Previously, this table would typically disappear off the bottom of the screen due to the length of the two tables above it (Impact Assessment and Status Exceptions).
10. Fixed an introduced regression in the syslog/trap reporting speedup code. The reporter was not correctly marching through the historical compressed data files.
11. Speedup to the availability reporter. Only load data for groups configured under Availability Settings. This will speedup both Events Dashboard and Availability Reporter.
12. Alerting: validate email addresses and whether 'call' functions exist in the Site Scripting GUI.
13. Allow more characters in interface descriptions. Replace stripped characters with a space instead of nothing.
14. Restrict drilldown access in dashboards if the user profile does not have access to those reports.
15. Disable NTP client when running in Hyper-V environments because it clashes with the host time services and can cause VM hangs.
16. Supported MIB Objects:
    • 266 Counters
    • 287 Enumerations
    • 424 Gauges
    • 118 Integers
    • 539 Other
    • TOTAL: 1633
17. Compiled MIBs:
    • 4412 MIBs
    • 513792 Objects

Version 17.12   14th September 2017

1. Reduced the memory usage of the flow collector and flow meter processes.
2. Updated the AS numbers for BGP reports.
3. Performance speedup for Syslog/Trap queries on a single device (e.g. Device Dashboard) for last N days.
4. Interface Percentile Reporter
   • Added 98th percentile option to the controls.
   • Fixed report styling when the URL is copy/pasted into a new browser window, or the report is generated via Scheduled Reporting.
5. Availability Reporter
   • Added sort by name or percent availability
   • Added ability to display only devices/interfaces that failed to reach the availability target
6. Discover
   • Allow the discover to add SNMPv3 devices which do not support IF-MIB. The discover uses SNMPv3 engine IDs for device fingerprinting, so it's not critical if devices running SNMPv3 don't support IF-MIB (e.g. Cisco APIC devices).
   • Fixed the discover so it skips duplicate device checking using MAC tables if running SNMPv3. This fixes the discovery of Cisco virtual ASA contexts.
7. Alerting
   • Fix an issue where alerts do not trigger due to a site script locking issue when using 'call' actions with wait rules.
   • Fix an issue where alerts do not trigger when mixing 'call' and 'email' actions with the same wait time.
   • Allow multiline regex matches in the trap alerting. Previously, a regex would only match if all the text was on the same line. Changed the regex syntax so that "." (dot) will match newlines.
   • Clear 'wait' threshold groups due to a bug in a previous release. The old status wait alerting code was unreliably clearing entities from their respective wait groups. The alerting code has been fixed, but entities are still present in these internal groups after the upgrade to 17.10. Clear the wait groups when upgrading to 17.12. This may mean that some wait alerts don't trigger immediately after the 17.12 upgrade.
   • Performance improvements to the threshold alerting syntax. Changed help text examples to recommend specifying the correct entity type instead of '*'. This can double the performance of internal 'mget' queries. Changed threshold rule validation to warn if an unnecessary attribute regex is being used, which degrades performance.
8. API / Site Scripting
   • Added config_delete_device() and config_rename_device() API functions to provide code consistency across the product, and enable users to use these functions in Site Scripting.
   • Added optional hostname field to the custom_discover_import_csv site script.
9. Fixed an issue where the nm-graph process would spin forever when processing a large number of data points. For example, a 12 month graph for syslog at 1 minute resolution.
10. Added/updated compiled MIBs:
    • Haivision
    • Mirth
    • ServerTech
    • Tufin
11. Supported MIB Objects:
    • 263 Counters
    • 287 Enumerations
    • 425 Gauges
    • 118 Integers
    • 539 Other
    • TOTAL: 1632
12. Compiled MIBs:
    • 4412 MIBs
    • 513792 Objects

Version 17.11   23rd August 2017

1. Fixed "Save Graph" not working.
   The FreeBSD ports team recently merged several graphics ports into a single port mesa-libs. This package was missing from 17.10, which broke the "Save Graph" functionality. This release requires a full OS upgrade to install the missing package.
2. Fixed "Email Domain" setting being ignored in 17.10.
3. Graph Reporter: fixed issue with some graphs not being listed.
4. Alerting: added help text examples for sending alerts to multiple email addresses.
5. Netflow Reporter: display number of results at the top of the table.

Version 17.10   17th August 2017

1. Upgraded the operating system to FreeBSD 11.1-p1:
   • FreeBSD 11.1 Release Notes
   • OpenSSH Denial of Service vulnerability
2. Removed the text string "(AKIPS Network Monitor)" in the email alert sender's address to simplify processing by other systems. The sender address is now 'akips@yourdomainname'.
3. Added MAC and IP Address columns to the interface config report. These are the MAC/IP addresses of the interfaces themselves, not of attached devices.
4. Added "Tools->Device to IP Mapping" report with links to the device editor.
5. Allow optional 'zone' name in the System Settings IPv6 Gateway field. (e.g. fe80::1%bce0).
6. Availability Report:
   • Added display count in the outage graph subtitle.
   • Fixed natural sorting of device groups
7. Unreachable Devices:
   • Allow hiding of the controls by removing 'controls=device;' from the URL.
8. Syslog/SNMP Trap Reporters - Removed default refresh.

   Previously, the Syslog and Trap Reporters would start a 30 second refresh timer no matter what filter options were selected. This can make the reporters frustrating to use when doing queries over long periods of time and/or with a lot of syslog/trap data. To start a 60 second refresh timer on a LastN report, click the "Reload" button in the graph.

9. Manual Grouping:
   • Changed to used natural sorting of groups
10. Added Discover SNMP Walk Statistics Report to identify slow devices.
    • Device
    • RunTime
    • Total Walks
    • Successful Walks
    • Failed Walks
    • Total Objects
11. Added Midspan global PoE report
    • Power Backup Type
    • Internal State
    • External State
    • Power Utilisation
    • Power Maximum Rating
12. Added Sonus Call Stats report:
    Global Calls:
    • Current
    • Total
    • Connected
    • Refused
    • Errored
    Egress Calls:
    • Attempts
    • Accepted
    • Completed
    • Rejected
    Ingress Calls:
    • Attempts
    • Accepted
    • Completed
    • Rejected
13. Added Sonus Power Supply report
    • Present State
    • Input State
    • Input Type
    • Input Power
    • Input Voltage
    • Input Current
    • Output Power
    • Output Voltage
    • Output Current
    • Temperature
14. Fixed missing data while the 80 minute data processing is running. This problem has been tracked down to long running persistent CGIs that are not signaled to close/reopen the time-series database when the 80 minute data processing/compression occurs. Programs like nm-graph were pointing at the wrong compressed database files.
15. Status Alerting:
    Fixed the following issues with Status Alerting 'wait' rules:
    • Fix wait rules which may generate an "up" alerts with no corresponding "down" alert.
    • Fix issue of alert only triggering once when 'value' filter is applied to a rule, (i.e. parent child attribute). For example, the rule will only trigger the first time a device goes down.
    • Trigger an alert if the status changes between several error conditions in a row and the wait time has elapsed for the first event, e.g. 'ok' -> 'degraded' -> 'failed' will alert on 'degraded' after N minutes. Previously, the 'failed' event would reset the wait interval. If the status was constantly changing between error states then the alert would never trigger.
    • Fix potential issue where wait rules get confused by multiple 'up' -> 'down' -> 'up' -> 'down' changes within the wait period.
    • Fix issue where "up" alert is not triggered for a 'call' action.
    • Fix issue where alerts may not be bundled correctly.
16. Device Editor:

    Fixed missing IPv4/v6 ping poller configuration when an IPv6 address is set in the device editor. The editor now adds the ping6 child and all appropriate attributes for the ping poller to start polling it. Previously it was only possible to add IPv6 ping polling to a device via a full discover.

17. Fixed profile validation in the 'email:' field. Specifying a profile in the 'email:' field in combination with email addresses or other profiles did not work due to a defect in the config validation.
18. Display error message for the 'add group' command if the group already exists as another type. A customer reported an Auto Grouping issue where nothing was being assigned to a device group. The problem was the target group already existed as a super group but no error message was being displayed when attempting to add the group as a device group, so it was confusing why the command failed to work as expected.
19. Fixed IPv6 Ping (Echo Request) packets generated by the poller so the 'identifier' and 'sequence' fields are set to 0xff. The AKIPS poller does not use those fields because they are only 16 bit fields, which are far too small. Some network devices and firewalls do not like those fields being set to '0', so they drop/block them.
20. Fixed a defect in the poller which may cause the poller to crash and restart.
21. Fixed an introduced regression in version 17.9 where the discover was not stripping sysName correctly if a fully qualified host.domain name was set in the devices.
22. FreeBSD 11.1 also included an upgrade of the clang/llvm C compiler to version 4.0.0. The compiler highlighted a number of runtime programming errors which have been fixed (e.g. buffer overruns).
23. Added/updated compiled MIBs:
    • Sonus UX MIBs
24. Supported MIB Objects:
    • 263 Counters
    • 287 Enumerations
    • 425 Gauges
    • 118 Integers
    • 535 Other
    • TOTAL: 1628
25. Compiled MIBs:
    • 4407 MIBs
    • 512592 Objects

Version 17.9   26th July 2017

1. Backed out changes to the nm-graph program as it caused a database lock up, making the GUI unresponsive. This means the fix for item 1 in 17.8 needs to be re-assessed.

Version 17.8   26th July 2017

1. Critical bug fix to the all statistics reports which affects every installation. Multiple customers reported a defect where the strip graphs in all reports are missing data while the 80 minute database processing is running. The data is still there in the time-series database, but wasn't being graphed. The problem was tracked down to a defect in graphing program.
2. Critical bug fix to the auto/manual grouping. Due to a lack of locking around the grouping code, two instances of the auto grouping could occur at the same time, causing grouping rules to fail. If this occurs, this could incorrectly delete manual grouping rules.
3. Added 'Delete Broken Rules' button to the manual grouping controls.
4. Fixed a regression from 17.7 in the Site Scripting controls where site scripts could not be saved.

Version 17.7   25th July 2017

1. Critical bug fix to the nm-ping-scan program. The ping scan is used in both the discover and optionally in the switch port mapper data collector. A problem was found where nm-ping-scan would crash due to insufficient memory if 148 or more ping rules were defined. The discover would then fail and no devices would be added.
2. Added support in the discover for vendor devices which do not support the SNMPv2-MIB.sysName MIB object. If no sysName is found, then the following process occurs to determine a device name:
   1. IPv4 reverse DNS lookup
   2. IPv6 reverse DNS lookup
   3. Use the IPv4 address
   4. Use the IPv6 address
3. Added Strip Domains On/Off control. The discover normally strips off the domain name (i.e. everything after the first '.') before adding the device to the configuration. In some sites where they monitor multiple sub domains, this can lead to duplicate sysNames. Turning the Strip Domain option off means all new devices will be added to the configuration with their fully qualified {host name}.{domain name}.
4. Changed the auto grouping so it does not suppress the 'add group' commands.
5. Added/updated compiled MIBs:
   • ForcePoint
6. Supported MIB Objects:
   • 251 Counters
   • 281 Enumerations
   • 445 Gauges
   • 117 Integers
   • 500 Other
   • TOTAL: 1594
7. Compiled MIBs:
   • 4407 MIBs
   • 512592 Objects

Version 17.6   13th July 2017

1. Added Cisco 3G Cell/GSM report
   • Connection Status
   • Modem Status
   • Network Name
   • RSSI
   • ECIO
   • RSRP
   • RSRQ
   • SNR
   • SINR
2. Added support FORTIWEB (FORTINET) appliance:
   • CPU
   • Memory
   • Disk Usage
3. Added McAfee Web Gateway report:
   • Legitimate
   • Blocked
   • Anti-Malware
   • Media Filter
   • URL Filter
   • HTTP Requests
   • HTTPS Requests
4. Added McAfee Web Gateway Version report:
   • Product
   • Anti-Malware
   • Engine
   • DAT
   • TrustedSource
5. Added SafeNet Storage report
6. Added SafeNet Total Requests report
   • Current
   • Successful
   • Failed
7. Added SafeNet Total Connections report
   • Current
   • Open
   • Total
8. Added SafeNet SSL Connections report
   • Current
   • Open
   • Total
9. Added SafeNet SSL Handshakes report
   • Current
   • Total
   • Failed Current
   • Failed Total
10. Added SafeNet SSL Resumes report
    • Current
    • Total
11. Added SafeNet Authenticate Requests report
    • Current
    • Successful
    • Failed
12. Added SafeNet Cryptographic Requests report
    • Current
    • Successful
    • Failed
13. Implemented "call" action for status alerting wait rules.
14. Fixed SNMP library and GUI controls for SNMPv3 auth/priv configuration. The LUK (localised user key) database would be corrupted if an SNMPv3 configuration of "priv" but no "auth" was used. "auth" must be defined if "priv" is defined.
15. Fixed Aruba ClearPass Latency units
16. Fixed incorrect status event reporting of interface duplex.
17. Fix truncated output when printing or exporting to PDF due to result div being constrained by overflow setting emulating a normal browser window instead of flowing over multiple pages.
18. Added/updated compiled MIBs:
    • AMX SVSI MIB
    • FORTINET-FORTIWEB-MIB
19. Supported MIB Objects:
    • 251 Counters
    • 281 Enumerations
    • 445 Gauges
    • 117 Integers
    • 500 Other
    • TOTAL: 1594
20. Compiled MIBs:
    • 4403 MIBs
    • 512412 Objects

Version 17.5   15th June 2017

1. Interface Dashboard:
   • Fix issue where the result disappears if the browser window is too narrow.
2. Status Reporter:
   • Added device and description to the "History" drill down report title.
3. Backup:
   • Display server disk space for "List Local Backups".
   • Check for sufficient free disk space on backup server before starting the backup.
4. Added Aruba wired OperState and ifSpeed.
5. Unused Interfaces:
   • Added 270 days and 12 months to drop down list.
6. Switch Port Mapper:
   • Fix "unknown vendor" always displayed in Address Locator history
   • Fix for Junos
   • Display ARP Table VLANs one per line
7. Added Geist Climate Monitor
   • Temperature
   • Humidity
   • Dew Point
8. Added Gemalto Safenet reports back in
9. Added battery remaining column to the Eaton UPS Battery report
10. Added UPS battery capacity graph for generic UPS-MIB, APC and Eaton.
11. Fixed incorrectly hiding of columns with no values.
12. Fix segmentation fault for the message reporter due to insufficient locking when the ip2name binary file was being updated.
13. Dropped HTTPS support for IE10 and earlier to improve security.
14. Added/updated compiled MIBs:
    • 3Com
    • Aruba
    • Brother
    • Cisco
    • Geist
    • HP
    • MRV
    • McAfee
15. Supported MIB Objects:
    • 234 Counters
    • 279 Enumerations
    • 428 Gauges
    • 115 Integers
    • 492 Other
    • 1548 Total
16. Compiled MIBs:
    • 4392 MIBs
    • 510841 Objects

Version 17.4   4th May 2017

1. Upgrade the operating system from FreeBSD 10.3-p17 to 11.0-p9.
2. Fixed numerous "cross site scripting" security issues.
3. Added UCD Disk performance report
   • Bytes Transferred
   • I/O Transactions
4. Added Fireeye reports
   • Appliance Status
   • Chassis
   • Temperature value and status
5. Added Ciena WaveServer Laser Temperature support.
6. Added sysUptime column to the Device Dashboard.
7. Added a 'max' column to the Cisco Voice Calls report.
8. Removed Gemalto Safenet reports which were added in version 17.3 due to a defect in the Safenet devices. sysName is apparently hard coded to be 'localhost', which causes the discover to report them all as duplicate devices. The defect has been reported to Gemalto.
9. Added missing 'Device' column in the Switch Port Mapper ARP table. The switch's ARP table can display entries for devices on other switches on the same subnet.
10. Added zoom option to the PDF button in the navbar.
11. Added expert only IPFW Rules configuration tool - Admin -> General -> IPFW Rules.
12. Updated MAC vendor codes for Switch Port Mapper.
13. Updated AS numbers for BGP reporting.
14. Print dots ...... when SNMP Walks are being queued in very large sites because FireFox can timeout and close the connection, therefore stopping the discover.
15. Fix to the discover ping scan for servers that are multi homed. The ping scan was not always reading responses from each network interface, therefore the discover would fail to add devices.
16. Fix to reduced the Interface Dashboard memory usage due to large switch port mapper data files.
17. Fixed a race condition in the backup/restore setttings when restoring locally. The "Save Settings" incorrectly displayed "ok: Saved Authentication" when it actually failed.
18. Fixed a backup database inconsistency when using the manual "Run Backup" button.
19. Fixed the nm-socket CPU usage. When nm-socket was idle (i.e. no connections) it was chewing up approx 0.5% CPU unncessarily.
20. Fixed an issue in the chassis report where old cards/slots were not being expired from the configuration. For example, a card moved from one slot to another would show up twice (old and new slots).
21. Regression introduced in v16.17 with the introduction of backup snapshots. If a backup runs while a restore from the "latest" snapshot occurs, then the restore will fail.
22. Restricted access to various reports if there is no valid licence key (e.g. unlicensed or free versions).
23. Added/updated compiled MIBs:
    • Agent++
    • Ciena
    • Isilon
    • Polycom
24. Supported MIB Object stats:
    • 234 Counters
    • 277 Enumerations
    • 392 Gauges
    • 115 Integer
    • 522 Other
    • 1540 Total
25. Compiled MIBs:
    • 3883 MIBs
    • 468769 Objects

Version 17.3   22nd March 2017

1. Upgraded the installation operating system to FreeBSD 10.3-p17.
   Refer to the following FreeBSD security advisory:
   • OpenSSL multiple vulnerabilities
2. Added Brocade per slot CPU statistics
3. Added Brocade Module report:
   • Description
   • Serial Number
   • Number of Ports
   • Status
   • Redundant Status
4. Added Cisco ISIS Neighbour report:
   • Neighbour ID
   • Status
   • 3Way Status
   • Sys ID
   • Adjacent Type
   • Usage
   • IPv4/v6 Address
5. Added APC Netbotz Fluid report:
   • Sensor
   • Status
   • Severity
   • Comms Status
6. Added Eaton PDU reports:
   PDU
   • Product Description
   • Part Number
   • Serial Number
   • Firmware Version
   • Unit Name
   • Status
   • Inputs
   • Outputs
   Inputs
   • Voltage
   • Current
   • Power (Watts & VA)
   • Phase Type
   Outlets
   • Name
   • Type
   • Current
   • Power (Watts & VA)
7. Added Gigamon Chassis report:
   • Model
   • Description
   • Software version
   • Chassis
   • Blades
   • Firmware version
   • Hardware version
8. Added Ingate Config report
   • Serial Number
   • Software Version
9. Added Ingate CPU report
10. Added Ingate SIP Sessions report:
    • Current Sessions
    • Util% Sessions
    • Limit Sessions (Maximum)
11. Added SafeNet reports:
    • Config
    • CPU
    • Memory
    • Storage
    • Requests
12. Changed the PDF button in navbar to prompt for PDF title and filename.
13. Fixed an issue in the web APIs where child processes where not being reaped, therefore leaving a large number of zombie processes until the http server killed idle web API CGIs.
14. nm-http (http/https client)
    • Added TLS v1 and v1.1 support for older devices.
    • Implemented HTTP Basic Auth
15. API changes:
    • Changed http_send() http_result() parameter from 'insecure' to 'secure'.
16. Backup Settings: Fixed per-backup disk usage info. Use ZFS command to get actual disk used by each backup. Previous command was only reporting the disk used by each current backup, not including ZFS snapshots.
17. Discover: Fixed writing out the discover deleted devices file. If a single device is attempted to be discovered, but it fails the duplicate mac address check, the discover exits without logging why the device failed to get added.
18. Graph Reporter: Added "Aggregate" button similar to the Interface Grapher.
19. Interface Dashboard: Rearranged the dashboard so it renders correctly when created as a PDF.
20. Restore: Fixed a regression introduced in version 17.1. Don't remove local ZFS snapshots before doing a restore because the user may be using the local snapshot as the restore data.
21. Security: Disable sshd TCP forwarding.
22. Site Scripting: Added site script log file. Log STDERR and STDOUT from site scripts to /home/akips/log/script for debugging purposes. The log file can be viewed using the System Log Viewer.
23. Syslog Alerting: Change "syslog" action to "forward". Renamed the program 'nm-syslog' to 'nm-syslog-fwd'.
24. Threshold Alerting: Fix % value in alerts for non-ifutil objects.
25. Unused Interfaces: Limit the number of printed VLANs to 10 otherwise the report is too wide.
26. Added/updated compiled MIBs:
    • APC PowerNet-MIB to version 4.2.1
    • H3C
    • Ingate
    • Palo Alto to PANOS8
    • Safenet INGRIAN-MIB
    • Synology
    • Tripplite
    • VMware
27. Supported MIB Object stats:
    • 230 Counters
    • 269 Enumerations
    • 392 Gauges
    • 111 Integer
    • 513 Other
    • 1515 Total
28. Compiled MIBs:
    • 3839 MIBs
    • 465305 Objects

Version 17.2   3rd February 2017

1. Unreachable Device Report: fixed regression in v17.1 where selecting a group would not display any results.
   This also affected the drilldown from the 'Impact Assessment' table on the Events Dashboard.
2. Added nm-http 'insecure' option for connecting to hosts with self-signed SSL certificates.
3. QNAP NAS HDD report: fixed default sort.

Version 17.1   2nd February 2017

1. Upgraded the OpenSSL port to version openssl-1.0.2k. All AKIPS compiled software links against the OpenSSL port library rather than the default version in the base of FreeBSD.
2. Added nm-http, a http/https client (i.e. similar to curl, but simpler and not full of weekly security notices). nm-http can be used to perform GET/POST requests to other systems/devices. For example, this can be used in the Site Scripting for sending alerts to other systems. Contact [email protected] for assistance on using the nm-http in an alerting site script. Examples will be added to our support page once we have a few practical site script implementations.
3. Added new Web API to access Site Scripts remotely. Refer to the help text in the Web API Settings menu.
4. Updated the help text for each section in the Web API Settings menu.
5. Enhanced the Web Config and Events API so the nm-db error messages are passed through to the remote agent.
6. Added new Admin -> Miscellaneous -> SSL Settings menu for installing a SSL certificate.
7. Added Cisco IPSLA columns for voice tests:
   • MOS Score
   • CODEC Type
8. Added QNAP NAS HDD Report. Note: More research is required to do other QNAP reports.
9. Added splitter bar to various controls:
   • Device Reporter
   • Event Reporter
   • Graph Reporter
   • Status Reporter
   • Syslog/Trap Reporter
   • Ping/SNMP Walk Tool
   • Switch Port Mapper Reporter
   • Unused Interfaces Reporter
10. Profile Settings: Added 'All Groups' and 'All Reports' controls.
11. Profile Settings: Added time zone support to user profiles. Assign a time zone to a profile in Profile Settings to display graphs and reports in that time zone.
    Note: time zone functionality has not been added to the alerting yet. It will be completed in a later release.
12. Speedup to all reports with strip graphs if a long time period (e.g. 3 months) was selected. The resolution of the strip graph was too fine, therefore producing very large SVG output (e.g. 10Mbytes per strip graph instead of ~10Kbytes). This had a significant effect to browser rendering performance.
13. Syslog/Trap Reporter: Fixed saving of mute/trim state per user.
14. Fix an internal overflow when compiling extremely large IPv6 address ranges for the ping scan.
15. Fix an issue where Status Alerting wait alerts don't get sent. For example, if a device goes down for a long time, and Auto Grouping gets run while the device is still down, then the 'up' alert was not being sent.
16. Changed various CGIs to use a POST request instead of a GET. This is required because some customers still use old OS/Browsers that have a small GET buffer size (e.g. 2k to 4k) which truncates the HTTP GET request data.
17. Restore: Remove any local ZFS snapshots before starting a restore.
18. Syslog Alerting: Fix if multiple rules contain "syslog" (forwarding) actions then the facility/priority weren't being passed to the nm-syslog forwarding program, screwing up the messages.
19. Interface Flapping Report: Fixed first blank entry not appearing in the device dropdown list
20. Interface Flapping Report: Added 30 second refresh timer.
21. Unreachable Device Report: Display reachable state. Previously, if ping or SNMP state was "up", this report would instead display "n/a" in the state column. Fixed to display "up" and the corresponding IP address instead of "n/a".
22. Unreachable Devices Report: Fix refresh timer when sorting on a different column.
23. Status Reporter: Pass through refresh timer parameters so reports can be set to refresh.
24. Site Scripting: Fix an error in custom_export_device where sysUpTime was not being printed.
25. Status Reporter: Fix APC Sensor Probe Status "disconnected" not appearing.
26. Auto Grouping: Fix to clear all devices from spm_exclude group before running the auto grouping rules. Previously, devices assigned to spm_exclude group never got cleared from the group.
27. Updated Perl to version 5.24.
28. Added/updated compiled MIBs:
    • Alcatel
    • Eaton
    • Gigamon
    • Juniper
29. Supported MIB Object stats:
    • 228 Counters
    • 255 Enumerations
    • 376 Gauges
    • 106 Integer
    • 482 Other
    • 1447 Total
30. Compiled MIBs:
    • 3803 MIBs
    • 460069 Objects

Version 16.22   23rd December 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p15.
   Refer to the following FreeBSD security advisory:
   • Multiple vulnerabilities of ntp

Version 16.21   22nd December 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p14.
2. Added Web (http/https) API for access to the following programs and data files:
   1. nm-db (configuration and events)
   2. nm-msg-reporter (i.e. syslog and traps)
   3. nm-flow-reporter (netflow tables)
   4. nm-flow-timeseries (netflow time-series data)
   5. Switch Port Mapper data files
   6. Unused Interfaces data files
   Notes:
   • Web API services requires a valid licence key.
   • There is a new Admin->API->Web API Settings menu to turn on/off each of the Web API services.
   • Access to the Web APIs requires two new user accounts with passwords to be created: api-rw and api-ro. The api-rw user is required for access to the nm-db program (Configuration and Events) Web API. Refer the API Programming Guide.
   • Refer to the help text and examples in the Web API Settings menu for URL specifications.
3. Added Admin->API->TCP Socket Settings menu for configuring the start up parameters for the nm-socket program. nm-socket can be configured to connect directly to the following:
   • nm-db
   • nm-msg-reporter
   Notes:
   • The TCP socket settings and nm-socket requires a valid licence.
   • There is NO authentication method in nm-socket, so it should only ever be used in a closed secure environment.
4. Added maintenance mode for devices so all events and alerts are suppressed. To put a device in maintenance mode, add a device group called maintenance_mode to the auto grouping rules and place each of the devices into that device group. This can be achieved by using either:
   • Auto grouping
   • Manual grouping
   • Web API
   • TCP Socket API
5. Added VLAN data to the switch port mapper reports
   • VLAN column to the ARP table
   • VLAN column to the Address Location table
   • New Interface to VLAN table
   A list of VLANs for each device and further switch port mapper reporting enhancements will be added in early 2017 releases.
6. Discover Perl Module changes (Discover.pm)
   • Changed the calling parameters of discover_scan() to make site scripting easier. It now takes an array of ping rules.
   • Changed discover_device_rewalk() to make sysObjectID and sysDescr parameters optional so it is easier to script. If not specified, the System table will be walked.
   • Added comments to all exported functions.
7. Added VLAN column to the Unused Interfaces report.
8. The discover now rejects sysNames that match reserved ADB keywords and user accounts.
9. Updated AS Numbers for BGP reporting.
10. Updated vendor codes used in the Switch Port Mapper.
11. Added initial Huawei NQA summary report. More Huawei reports will be added in 2017 builds.
12. Added Dell iDRAC6 objects to Dell iDRAC System Status report. However, iDRAC6 devices do not support IF-MIB and will not get added by the Discover. The iDRAC6 Site Script is required to add these devices, available from our Site Scripts page.
13. Added vlan2sp and sp2vlan files to the drop down list in the system log viewer.
14. Added location field to Juniper Virtual Chassis report.
15. Added Juniper VirtualChassis Port report.
16. Display an error if Start/End dates not selected in the Interface Percentile Reporter.
17. Only send gzipped output if the http client requests it. Previously all HTTP output was gzipped as all browsers support it. This may not be the case when using Curl for Web API access if the --compressed option has not been specified.
18. Reduce the volume of logging that occurs in the discover/rewalk log, in particular all the manual grouping commands to assign reports to profiles.
    • Don't print Manual Grouping output in the discover/rewalk
    • Don't print Auto Grouping "add" commands in the discover/rewalk
    • The full output still gets displayed in the Auto Grouping screen
19. Fix interfaces being added to the wrong ifType group. For example, mplsTunnel was incorrectly being added to iftype_mpls group because the code was doing a regex /mpls/ instead of an exact match.
20. Fix for RLE Technologies temp/humidity. Customers need to set text strings in their configuration for "temperature" and "humidity", and units of "Degrees C", for the discover to be able to handle them. There are no enumerated objects in the MIB to tell what the sensor is.
21. Fix to SNMP library when no Auth/Priv mode is configured, but a password was. In the Device Editor, it is possible to set SNMPv3 Auth or Priv to "none" but leave the password field filled out. This was causing the poller to crash.
22. Fixed an academic cross site scripting security issue reported by automated security scanners which incorrectly fill in the HTTP HOST field with the URL and the AKIPS http server was not sanitising the HOST field. It is entirely academic because the browser and/or OS would already need to be compromised.
23. Various fixes for IE11 broken Javascript issues. IE11 is not recommended for sites with a large number of devices and/or interfaces because its Javascript performance for populating large select lists is extremely poor. Current Firefox versions appears to have the fastest Javascript engine.
24. Added/updated compiled MIBs:
    • Cisco
    • Gigamon
25. Supported MIB Object stats:
    • 228 Counters
    • 252 Enumerations
    • 374 Gauges
    • 105 Integer
    • 479 Other
    • 1438 Total
26. Compiled MIBs:
    • 3651 MIBs
    • 436003 Objects

Version 16.20   28th November 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p12
   Refer to the following FreeBSD security advisories:
   • OpenSSL Remote DoS vulnerability
   • OpenSSH Remote Denial of Service vulnerability
2. Added APC PDU Load report
   • Utilisation
   • Amps
   • Max Rating
   • Status
3. Added APC NetBotz Humidity and Temperature TopN Graphs.
4. Added current utilisation and max rating to the APC PDU Phases report.
5. Added AudioCodes Config report
   • Model
   • Serial number
   • Software version
6. Added Liebert agent report
   • Model
   • Serial number
   • Agent software version
7. Added generic WiFi Interface Config report for vendors that support IEEE802dot11-MIB (e.g. Ubiquiti).
   • Station ID
   • Channel
   • Product Name
   • Product Version
8. Added Cisco FEX (Fabric Extender) module status report
   • Device
   • Module
   • Status
9. Added Cisco Cable Modem report
   • Total modems
   • Offline modems
   • Title
10. Add Huawei reports
    • CPU
    • Memory
11. Added Ingrasys Temperature report
12. Added RLE Technologies environment reports
    • Humidity
    • Temperature
13. Added initial 95th Percentile Interface Reporter.
    • Transmit 95th percentile
    • Receive 95th percentile
    • Sum (Transmit, Receive)
    • Max (Transmit, Receive)

    The algorithm calculates transmit and receive 95th percentile of five minute averages. Different telcos reportedly bill on either Sum or Max, so both columns are calculated and displayed in the report.

    Added a new From/To datepicker because a Telco billing period typically starts on a given day of the month.

    You can not sort on Sum or Max columns because the backend database does not support that functionality.

    NOTE: 95th percentile is mainly used in the USA for billing purposes by telcos and ISPs. It is just a '95th median' value and has no useful purpose for any type of capacity analysis. Links with vastly different traffic profiles can end up having the same 95th percentile.

14. Speedup to the device filtering in control panels where the server has 10000+ devices in its configuration. This was purely a browser javascript performance issue when clearing the current long select list.
15. Added splitter bar to the Interface Dashboards. This enables the control panel to be resized so that long device names or interface descriptions can be viewed.
16. Added interval keyword to API time-series syntax. Changed the topN/calc/series commands so that the aggregate interval parameter has an explicit 'interval' keyword. This is to allow the interface 95th percentile reporter to run commands with both an interval (e.g. 5 minute average) and calculate a median. For example:

    calc interval avg 300 median 95 time "last30d" ...

17. Added last 2 hour system performance graphs to server report to aid in tech support analysis.
18. Added "Delete Local Backups" button to the Admin->System->Backup control panel. This button appears if there is backup data located on the current server and is useful to delete backup data which is no longer required.
19. Backup performance increases for high latency links.
    • Increased the backup sftp socket buffer size to 128k. Across high latency links, this gave a modest speedup (approx 10%). On a LAN this makes no difference.
    • Increased TCP sendbuf and recvbuf increments to improve backup performance. Across high latency links, increasing the sysctl variables gave between 25% and 50% speedup. Setting recvbuf_inc to 1MB gave an even better performance improvement over 512k, but set it to 512k for now in case there are unintended consequences.
20. Added backup graphs to the Admin -> Performance graphs.
21. Added warnings if backup disk is >75% full, don't backup if >90% full.
22. Fixed the SNMP Walk Tool from consuming too much browser memory. After 100,000 lines, don't send walk output to the browser behind a hidden tag because it still consumes heaps of memory in the browser, eventually causing it to hang.
23. Fixed Ingrasys TopN Humidity Graphs menu item which was incorrectly displaying temperature graphs.
24. Fixed aggregate command when time filter includes next 30 day data block (i.e. time-series database blocks in the future. When using the Interface Graph Reporter to aggregate Bits Per Second graphs, if the time filter includes the next 30 day block (e.g. displaying a graph that includes the end of the current month, and the time series database hasn't rolled over to a new 30 day block yet), then the Y scale for the graph is incorrectly calculated.
25. Prevent 'wait' rules applying to uptime objects in the status alerting. A customer tried applying a wait rule to sysUpTime, and it generated two alerts:
    • At the time of the uptime reset, contained correct uptime value in alert.
    • Five minutes later, the alert reported the device was previously up since epoch time (1st Jan 1970).

    The 'wait' logic was intended for enumerations with good/bad states. If an enumeration flips good -> bad -> good within the wait time window then no alert is generated. An uptime only has a 'reset' event, so the same logic cannot be applied. So it doesn't make sense to apply 'wait' rules to uptime objects.

26. Added/updated compiled MIBs:
    • RLE Technologies RLE-FALCON-EM-MIB
    • Ruckus
    • NUTANIX-MIB
27. Supported MIB Object stats:
    • 228 Counters
    • 247 Enumerations
    • 374 Gauges
    • 105 Integer
    • 471 Other
    • 1425 Total
28. Compiled MIBs:
    • 3563 MIBs
    • 426909 Objects

Version 16.19   27th October 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p11
   Refer to the following FreeBSD errata advisory:
   • Virtual Memory issues
2. Added Ubiquiti AirMax Radio Config report
   • SSID
   • MAC
   • Security
   • WDS state
   • Repeater state
   • Channel width
3. Added APC ATS Config report
   • Model
   • Serial number
   • Firmware
   • Output status
   • Selected source
   • Redundancy status
4. Palo Alto Config report
   • Serial number
   • Software version
   • Hardware version
   • Application definition version
   • Antivirus version
   • Threat definition version
5. Added Cisco VSS Chassis report
   • Chassis ID
   • Role status
   • Uptime
6. Added Brocade/Foundry snChasPwrSupply2Table report.
7. Added "splitter bar" to the Tools->Interface Reporter/Grapher. This allows the control panel to be resized so that long device names or interface descriptions can be viewed.
8. Added interface name to switch port mapper ARP table.
9. Enhanced the switch port mapper so it handles collecting MAC address information from Cisco CatOS switches. The data is collected by using SNMPv2 Community Name addressing or SNMPv3 Contexts, but CatOS does not support the ENTITY-MIB.entLogicalCommunity and ENTITY-MIB.entLogicalContextName MIB objects. A workaround has been applied by faking up these MIB objects.
10. Limit the browser output in the SNMP Walk tool to 100000 lines.
11. Added the ability to send syslog messages instead of emails in the alerting. Requires a simple Site Script.
12. Updated help text and examples in the alerting configuration menus.
13. Fixed walking of APC devices during a discover/rewalk.
14. Fixed a defect in the poller when a device was unreachable. Under certain circumstances, time-series values were being incorrectly inserted when a device was unreachable and not responding to requests.
15. Skip broken hrSystemUptime for Windows servers. TimeTicks are meant to represent 10ms increments, but Windows servers increment HOST-RESOURCES-MIB.hrSystemUptime at 10x the rate (i.e. 1ms increments). This makes polling hrSystemUptime for Windows servers completely useless, as we attempt to generate events and alerts with every polling cycle.
16. Added DISMAN-EVENT-MIB is required to decode some traps, but commented out sysUpTimeInstance because it is trying to define an object at SNMPv2-MIB.sysUpTime.0, which is silly and pointless.
17. Added/updated compiled MIBs:
    • Palo Alto PAN-TRAPS-MIB
    • Cisco Product MIBs
    • DPS Telecom MIBs
18. Supported MIB Object stats:
    • 228 Counters
    • 245 Enumerations
    • 368 Gauges
    • 99 Integer
    • 452 Other
    • 1392 Total
19. Compiled MIBs:
    • 3555 MIBs
    • 425438 Objects

Version 16.18   6th October 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p9
   Refer to the following FreeBSD security advisory:
   • Multiple OpenSSL vulnerabilities
2. Updated various third party packages due to security issues.
3. Added "Tune Interface Titles": rewalk IF-MIB.ifAlias on all devices to update interface titles every 30 minutes. This is enabled by default and can be turned off in Miscellaneous Settings.
4. Changed the Unreachable Devices report to allow multiple devices to be deleted.
5. Fixed a defect in the flow collector where a corrupt packet could cause nm-flow-collector to spin at 100% CPU.
6. Removed devfs and procfs file systems from Server Storage report. These file systems always report 100% full.
7. Added generic Device Storage report. This is a combined report for all server and vendor specific disk and file system utilisation reports.
8. Added disk utilisation stats to the Device Dashboard report.
9. Fixed a race condition in the message database locking.
10. Added "unknown" protocols to the protocol selector in the Netflow Reporter (e.g. "tcp unknown").
11. Added HP CPU/Memory/Temperature for devices using HP-STACK-MIB.
12. Added HP Fan Status report for devices using HP-FAN-MIB.
13. Added HP Power Supply report:
    • Status
    • Power Utilisation
    • Power (Watts)
    • Power Rating
    • Temperature
14. Fixed missing Device Temperature TopN Graphs report.
15. Added "Current Status" column to the Interface Flapping report.
16. Added "Replaced Date" column to the Eaton UPS Battery report.
17. Added help text for alert scripting parameters to Site Scripting. This details the various parameters passed through to Site Scripting functions via the Alerting call syntax.
18. Added initial Device NAT report for devices using NAT-MIB.
19. Added initial Cisco NAT Entries report. According to Cisco ASA Release Notes, this value corresponds with the "show xlate count" IOS command.
20. Added initial Cisco NAT Sessions report.
21. Fixed swap usage check not shutting down the software into safe mode when the server consumes 50% of swap.
22. Sanitise interface titles set by Cisco CatOS CISCO-STACK-MIB.portName in the discover because some devices return odd characters.
23. Added "Max" Client Sessions column to the Juniper Trapeze AP report.
24. Added/updated compiled MIBs:
    • F5
    • HP
25. Supported MIB Object stats:
    • 228 Counters
    • 367 Gauges
    • 242 Enumerations
    • 95 Integer
    • 443 Other
    • 1375 Total
26. Compiled MIBs:
    • 3546 MIBs
    • 420534 Objects

Version 16.17   16th September 2016

1. Operating System: FreeBSD 10.3-p7
2. Fixed a database deadlock race condition between the syslog reporter and the 10 minute database syncer. This would cause the GUI to become unreachable.
3. Fixed a database locking issue when a large volume of syslog or trap data was requested by a user. The ping/snmp poller would pause waiting for a database lock until the syslog report completed and would cause a short gap in the time-series graphs.
4. Added scp/sftp compression option to the backup menu. Default value is off. In version 16.16, the backup switched to using scp/sftp compression by default. This sped up the backups for sites where the backup server is remote, but slowed down backups when the backup server was in the same location. Recommend setting this to 'on' if the backup server is remote.
5. Changed to the order of how the software is stopped (e.g. during upgrades). The web server is now stopped first so refreshing CGIs (e.g. dashboards) do not prolong the software shutdown.
6. Fixed an issue in the HTTP server where users could not access the GUI due to an internal CGI table being full. This was a race condition that is only triggered when users access the AKIPS GUI via a F5 load balancer.
7. Backup enhancements:

   The backup mechanism now keeps multiple historical copies of the data. This is achieved by applying a ZFS snapshot to the backup server at specific times or days. These times include:

   • After every 80 minute data processing and backup completes
   • Start of current day
   • Start of yesterday
   • Start of the last 2 Wednesdays
   Disk usage on the backup server will increase because it is storing multiple copies of the data. But, the ZFS snapshot feature means only the files which have changed will consume any extra disk space.

   NOTE: You must update your backup server to at least version 16.17 for the new backup mechanism to work. The upgrade needs to re-arrange the backed up data.

8. Set the default zero scale for temperature graphs:
   • Celsius - 15 degrees
   • Fahrenheit - 60 degrees
   If the actual data values drop below the zero scale, then the graphs are automatically rescaled accordingly.
9. Added ADVA laser reports:
   • Module
   • Class
   • Laser Tx Power
   • Laser Rx Power
10. Added ADVA temperature report:
    • Module
    • Class
    • Unit
    • Temperature
11. Added APC NetBotz reports:
    • Temperature
    • Temperature status
    • Humidity
    • Humidity Status
12. Added Liebert PDU report:
    • Model
    • Serial number
    • Firmware version
    • Wiring layout
    • Power
      • Real power
      • Apparent power
      • Power factor
    • Neutral current
13. Added Liebert PDU Input Phase report:
    • Phase number
    • Line to Neutral
      • Volts
      • Amps
      • Real power
      • Apparent power
      • Power factor
    • Line to Line
      • Volts
      • Real power
      • Apparent power
      • Power factor
14. Supported MIB Object stats:
    • 228 Counters
    • 342 Gauges
    • 234 Enumerations
    • 91 Integer
    • 420 Other
    • 1347 Total
15. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.16   7th September 2016

1. Operating System: FreeBSD 10.3-p7
2. Turned on scp/sftp compression in the backup script. This speeds up the transfer of various live database files which are not already compressed and therefore reduces the backup runtime when sending to a remote site.
3. Fixed a long standing issue in the SNMP library where a walk would never time out on a transmit failure to a local device (i.e. on the same subnet as the AKIPS server). This would cause the discover to never get past the snmp scan or walk stages. This issue has always been there, but difficult to replicate. It was tracked down when the NIC in one of our snmp simulators failed.
4. Fixed several serious race condition database deadlocks. This would cause many processes (e.g. poller, CGIs and nm-db) to spin waiting for a database lock.
5. Fixed a defect when saving a graph. The saved graph was using the default width of 800 pixels instead of the user selected width. All user selected parameters are now passed through to the PDF/PNG generator.
6. Added database validate functionality for the common strings and SNMPv3 LUK (localised user key) databases.
7. The HTTP server now closes idle CGIs when its persistent CGI table is full. The persistent CGI functionality is a unique feature of the AKIPS HTTP server which speeds up the execution of CGIs (e.g. reports/graphs) because they are started once and rarely exit.
8. Added/updated compiled MIBs:
   • Citix SDX-ROOT-MIB (fixed many syntax errors)
   • Dell IDRAC-MIB (changed various trap syntax from OCTET STRING to DisplayString)
9. Supported MIB Object stats:
   • 228 Counters
   • 342 Gauges
   • 234 Enumerations
   • 91 Integer
   • 420 Other
   • 1315 Total
10. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.15   26th August 2016

1. Updated the install OS version to FreeBSD 10.3p7. Refer to the following Errata Notices for Hyper-V installations:
   • Avoid using spin locks for channel message locks
   • Enable INQUIRY result check only on Windows 10 host systems
   • Register time counter early enough for TSC freq calibration
   • Disable incorrect callout in hv_storvsc(4)
   • Better handle the GPADL setup failure in Hyper-V
   • Fix SCSI INQUIRY checks and error handling
2. Updated various third party packages due to security issues.
3. Performance enhancements:
   • Increased the interval for flushing of debug logs from 10 to 30 seconds. This reduces noisy disk writing which can impact large sequential writes by other programs (e.g. database processing and compression).
   • Improvements to the 80 minute data processing algorithm to reduce the total number of disk read/write operations. This improves performance when using a SAN or NAS as the backend storage.
   • Improvements to the 10 minute database sync algorithm to alleviate performance issues with FreeBSD's system buffer cache and ZFS ARC incoherency.
   • Turned on ZFS LZ4 compression. Previously it was assumed that ZFS compression would not be of any benefit because the large database files are already highly compressed, which is correct. But... turning on ZFS LZ4 compression results in a large performance increase to the sync'ing of the live database files, which are not compressed. This results in a very large reduction of raw disk read/write operations in the 10 minute database sync.
   • Increased the ZFS ARC RAM restriction from 50% of available memory to total memory size minus 2 gigabytes. This allows ZFS to cache more data when necessary.
4. Added CISCO-ENTITY-SENSOR-MIB Voltage and Current reports. Alerting uses the CISCO-ENTITY-SENSOR-MIB.entSensorValue MIB object. Reports can be viewed under:
   • Device -> Sensor Voltage
   • Device -> Sensor Current
5. Added CISCO-ENTITY-SENSOR-MIB and CERENT-OPTICAL-MONITOR-MIB power dBm report. Report can be viewed under:
   • Device -> Entity Sensor Power (dBm)
6. Added ServerTech v4 reports:
   New reports:
   • Unit
   • Input
   • Line
   • Over-Current Protector
   • Phase
   Extensions to existing reports:
   • Sensor (Temperature/Humidity)
   • CDU
   • Unit
   • Outlet
7. Added help text for "no matching entities" warning in the Threshold Alert Settings.
8. Added number of request retries to the SNMP walk status line.
9. Added workaround for Windows negative disk size values.
10. Skip over the legacy UCD-SNMP-MIB during an SNMP walk.
11. Updated AS Number listing for BGP reports.
12. Fix critical file descriptor leak in nm-joatd. The nm-joatd process would leak one file descriptor every hour until it exceeded 1024 open files after approximately 42 days, which would cause nm-joatd to spin in an infinite loop.
13. Fix to rolling average calculations for last 8 hours to 30 days.
14. Fix incorrect skipping of empty IF-MIB.ifAlias values in the discover.
15. Fix to switch port mapper when a device is moved from one switch port to another. The switch port mapper would display the device on the old switch port until the cached data aged. The switch port mapper now displays the most recent switch port the device is detected on.
16. Fix event graph "month" navigation in the Availability reporter:
    • Load an events graph, zoom out to the month view, then click "prev". Data does not render in the correct location.
    • Load an events graph, zoom out to the month view, then drilldown on a weekday other than Sunday. The wrong day is displayed, and the data does not render in the correct location
17. Fix API mcalc command output for virtual Fahrenheit temperature objects.
18. Fix scale for graphs containing negative values. e.g. y-axis would incorrectly display -15000 mV instead of -15.0 V
19. Fix Platform resetting to Physical Hardware. On servers set for VMware guest, System Settings was incorrectly displaying "Physical Hardware" after an upgrade or reboot.
20. Added/updated compiled MIBs:
    • Alcatel DNS and DHCP MIBs
    • ARUBA-MIB
    • Avaya MIBs
    • EMC AM-MIB
    • LSI-MegaRAID-SAS-MIB
    • MIDSPAN-POE-MIB
21. Supported MIB Object stats:
    • 228 Counters
    • 342 Gauges
    • 234 Enumerations
    • 91 Integer
    • 420 Other
    • 1315 Total
22. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.14   27th July 2016

1. Operating System: FreeBSD 10.3-p3
2. Added functionality to automatically hide empty report table columns unless the column is selected for sorting. For example, if the switch port mapper is turned off, then there will be no "MACs" column displayed in the Interface Statistics report.
3. Added Strip Domain Names to the Admin -> Discover/Rewalk controls. Device names are created from the information retrieved from the SNMPv2-MIB.sysName MIB object with its domain name stripped. For example, a sysName of core1.its.foobar.com" will be added into the config as "core1". By defining a strip domain name value of foobar.com, the device will be added to the config as "core1.its".
4. Added Optional Features menu to the Admin -> Discover/Rewalk controls. Optional Features are MIB objects that discover does not add by default because it may have a significant impact to the size of the configuration.
5. Added EtherLike Pause Frames
   • Transmit Pause Frames
   • Received Pause Frames
   Note: Must be activated in the Optional Features section of the Admin -> Discover/Rewalk menu.
6. Added Cisco Stack Redundant Ring status report
   • Current state
   • Last change
7. Added Cisco Firewall Buffers report
   • Buffer size
   • Percent used
   • Used
   • Free
   • Total
8. Added Brocade reports for VDX platforms
   • CPU
   • Memory
   • Temperature
   • Fan
   • Power Supply
9. Added Juniper BFD state report
10. Added Ubiquiti EdgeSwitch reports
    • Memory
    • Temperature
    • Power Supply Status

11. Added workaround for broken Check Point MIB and SNMP agents. The Check Point MIB has errors from top to bottom. Many objects that should be defined as counters, gauges, integers or enumerated types are incorrectly defined as a plain DisplayString. The SNMP agent often returns a different object type than what is defined in the MIB.

    The SNMP agent also appears to get itself in a knot and loops when responding to an SNMP walk in the VSX section of the MIB if the VSX configuration has changed. The only solution is to restart the SNMP agent on the box. This was observed on version R77.30.

12. Added Check Point VSX summary report
    • System Name
    • System Type
    • Policy Name
    • Policy Type
    • CPU usage
    • Current Connections
    • Peak Connections
    • Connection Limit
    • Packet Total
    • Packets Dropped
    • Packets Accepted
    • Bytes Accepted
    • Bytes Dropped
    • Bytes Rejected
    • Logged
13. Added Syslog / Trap Reporter summary reports. A new table will show the number of syslog or traps received for each device. Drilling down on the device name will filter just on those syslog messages.
14. Added Inactive Memory to the system performance graphs.
15. Fixed a read deadlock race condition in the nm-httpd process where both the nm-httpd process and a CGI are deadlocked in a pipe read.
16. Fixed PDF output of the Unused Interfaces report where the table colours were not being rendered.
17. Added/updated compiled MIBs:
    • xCelor
18. Supported MIB Object stats:
    • 228 Counters
    • 335 Gauges
    • 214 Enumerations
    • 82 Integer
    • 392 Other
    • 1251 Total
19. Compiled MIBs:
    • 3511 MIBs
    • 410869 Objects

Version 16.13   1st July 2016

1. Operating System: FreeBSD 10.3-p3
2. Fixed a defect in snmp walk which would cause the nm-snmp process to crash due to a complex race condition during the request timeout/retry algorithm.
3. Abort the discover if snmp walk process exits incorrectly. If the nm-snmp process crashed during a discover/rewalk, this would result in partial and incomplete MIB table data being processed.
4. Changes introduced in v16.12 to fix threshold alerting introduced a regression issue into the time filter "check" command, which is used by Status Alerting.
5. Added/updated compiled MIBs:
   • Brocade

Version 16.12   23rd June 2016

1. Operating System: FreeBSD 10.3-p3
2. Added Efficient IP reports for:
   • DHCP
   • DHCP 6
   • DNS
3. Added Dell Force10 CPU/Memory/Temp for devices using M Series MIB.
4. Added a workaround for Cisco 3560 v4 hardware. The 3560 returns incorrect values for ENTITY-MIB.entLogicalCommunity. Fake up correct values so the collection of bridge forwarding tables work.
5. Added a watchdog script to make sure the nm-joatd (jack of all trades daemon) process always exists.
6. Added index numbers to the snmp trap reporter and alerting if the indexes are not massively long string indexes.
7. Fixed a race condition which caused a null pointer segmentation fault in nm-joatd.
8. Fixed value discrepancy in threshold alerting. The threshold alerting was triggering on the cached lastN value but reporting the real calculated value, which may not exceed the threshold, causing user confusion.
9. Fixed an infinite memory leak in the flow meter when defining port number 65535 as a custom site protocol.
10. Fixed a defect in the flow collector when handling flow exports from Cisco ASA devices. The ASA use special fields for in/out octet counts (FWD_FLOW_DELTA_BYTES and REV_FLOW_DELTA_BYTES). The REV_FLOW_DELTA_BYTES fields were not being handled correctly.
11. Skip parts of CISCO-SYSTEM-EXT-MIB.ciscoSystemExtMIB when doing snmp walks because the table can go on for a long time.
12. Added/updated compiled MIBs:
    • Bluecoat
    • Efficient IP
    • Sonus
13. Supported MIB Object stats:
    • 214 Counters
    • 326 Gauges
    • 207 Enumerations
    • 80 Integer
    • 377 Other
    • 1204 Total
14. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.11   20th May 2016

1. Upgraded the installation operating system to FreeBSD 10.3-p3.
   Refer to the following FreeBSD security and errata advisories
   
   • Incorrect argument handling in sendmsg(2)
   • Buffer overflow in keyboard driver
2. Enabled PDF export of the System Performance Graphs.
3. Added Syslog table to Device Dashboard. Number of syslog messages is limited to 1000.
4. Added missing good states for the ENTITY-MIB.entPhySensorOperStatus object.
5. Added swap usage checks. If more than 50% of swap has been consumed, shutdown the software into safe mode. AKIPS should never consume large amounts of swap space unless the server is significantly under resourced.
6. Skip hourly hardware storage diagnostic probing on Linux KVM/QEMU VMs as it appear to cause issues similar to Hyper-V VMs.
7. Fixed a serious issue with the message database that stores both syslog and SNMP traps. The message database files where not being correctly sync'ed to disk at software shutdown time. Also added message database validation checks.
8. Fixed an issue in the HTTP server to handle browsers/proxies that incorrectly insert blank lines before the HTTP GET request. This resulted in a "400 Bad Request" error message. The HTTP server now strips any leading blank lines.
9. Fixed an issue with the limit of "All" in the Event, Status, Syslog and SNMP Trap reporters. The "All" option was incorrectly limited to 1000.
10. Fixed an issue in the discover handling Netscaler Service Group descriptions that contained spaces.
11. Supported MIB Object stats:
    • 211 Counters
    • 323 Gauges
    • 208 Enumerations
    • 80 Integer
    • 373 Other
    • 1195 Total
12. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.10   11th May 2016

1. Upgraded the operating system to FreeBSD 10.3-p2.
   Refer to the following FreeBSD security and errata advisories
   
   • Multiple OpenSSL vulnerabilities
   • Multiple vulnerabilities of ntp
   • Memory leak in ZFS
2. Added "Used" column to the Unused Interfaces summary table.
3. Allow changing case of a device name in the Device Editor.
4. Store flow port range records under a single port number. If a custom protocol has a port range of 40000-40999, store all matching flow records under port 40000 instead of individual port numbers. Storing as individual port numbers consumes more memory/disk space, and the duplicate protocols output in the Flow Reporter is confusing.
5. Disabled hardware probing when running in a Hyper-V VM. The script which retrieves disk information for the Admin -> System -> System Info report crashes Hyper-V VMs since upgrading to FreeBSD 10.3.
6. Changed the age time for ARP table entries from 20 days to 1 day in the switch port mapper.
7. Removed Juniper VPN Tunnels report. JUNIPER-IPSEC-FLOW-MON-MIB jnxIkeTunnelMonTable is indexed off a unique identifier that changes each time a tunnel is re-established. This means a device rewalk needs to be performed each time the tunnel goes down/up, and the data for the previous tunnel index is lost, making this report fairly useless.
8. Fixed saving of mail server configuration. The latest version of postfix used in version 16.9 contains a new unsafe() check that exits if UID does not match EUID or GID does not match EGID. This breaks postfix reload in Admin -> System -> System Settings menu, which means the postfix config did not apply until after a reboot.
9. Fixed incorrect definition of Juniper Red/Yellow alarm states so 'off' is the normal good state.
10. Fixed a serious memory leak in the loading of flow protocol definitions. The flow meters would eventually consume all physical memory and cause the server to start swapping. This appears to be a long existing defect, but only highlighted in version 16.9 due to the addition of port range syntax in the Netflow Protocols menu.
11. Added/updated compiled MIBs:
    • Infinera
    • Meraki
    • Ubiquiti EdgeSwitch
12. Supported MIB Object stats:
    • 214 Counters
    • 323 Gauges
    • 210 Enumerations
    • 80 Integer
    • 374 Other
    • 1201 Total
13. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.9   26th April 2016

1. Operating System: FreeBSD 10.3-RELEASE
2. Added Juniper Alarm report:
   • Yellow alarm state
   • Yellow alarm count
   • Red alarm state
   • Red alarm count
3. Added PacketLight Fan Status report
4. Added PacketLight Power Supply Status report
5. Added 'Port Range' syntax to Netflow Protocols menu. This allows you to define a protocol which uses a port range (e.g. 44000-44999) instead of a single port number.
6. Update list of hidden reports after upgrade. This negates the requirement to do a full rewalk before new reports are hidden.
7. Update reports menu after a single device discovery/rewalk.
8. Discard noisy A10 Fan Status events. The fan states change as they spin up/down depending on internal temperature values.
9. Speedup to the 80 minute compression runtime processing. This is achieved by increasing the ZFS sequential read ahead distance from 8Mbytes to 64Mbytes. This performance increase only occurs in servers with greater than 4Gbytes of RAM.
10. Speedup for shutting down AKIPS software during upgrades and server reboots.
11. Increase the shutdown timeout when stopping AKIPS software in case long running processes need time to exit.
12. Added Backup Performance Graphs:
    • Start / End Times
    • Run time
    • Size
    • File Count
13. Bug fix to rolling average calculations at the end of the 80 minute database compression. This is an introduced regression in version 16.8 which affects some threshold alerting rules.
14. Supported MIB Object stats:
    • 218 Counters
    • 323 Gauges
    • 210 Enumerations
    • 80 Integer
    • 377 Other
    • 1208 Total
15. Compiled MIBs:
    • 3414 MIBs
    • 402476 Objects

Version 16.8   19th April 2016

1. Upgraded the operating system to FreeBSD 10.3-RELEASE.
   Refer to the FreeBSD 10.3 Release Notes.
2. Added a USB memstick image to the download options for new installs.
3. Added Cisco BGP Peer State report:
   • AS Number
   • AS Name
   • Local IPv4/v6 address
   • Remote IPv4/v6 address
   • Admin / Operation state
   • Last state change
   • Updates
   • Messages
4. Added Cisco BGP Prefix report:
   • Remote IP
   • Accepted
   • Denied
   • Advertised
   • Suppressed
   • Withdrawn
5. Added Juniper Trapeze Access Point report:
   • IP address
   • Netmask
   • VLAN
   • Model
   • RAM
   • Serial Number
   • Hardware Version
   • Software Version
   • Uptime
   • Client Sessions
6. Added Juniper Trapeze CPU to the generic device CPU report
7. Added H3C Temperature report
8. Added HP Sensor Status report
9. Added PacketLight Chassis report:
   • Status
   • Uptime
   • Product
   • Part Number
   • Hardware revision
   • Firmware revision
   • Serial Number
10. Added PacketLight Temperature report
11. Added PacketLight Power Supply status alerting
12. Added PacketLight Fan status alerting
13. Updated list of AS Numbers.
14. Added ability to defined Private AS Numbers in the "Admin->General->Private AS Numbers" menu.
15. Display "Upgrade Backup Server" if the software installed on the backup server is older than the production server.
16. Display "Backup is off" if a backup is not configured and more than 30 days data exists.
17. Display "Software stopped: Disk full" when out of disk space. All data collection is stopped when disk space reaches 95% full.
18. Increased operating system shutdown timeout from 120 to 300 seconds to give the OS time to stop all AKIPS processes which need to flush data to disk.
19. Changed 30 minute ifSpeed update so it does not attempt to walk unreachable devices.
20. Changed the ordering of the menus to be closer to alphabetic order.
21. Update ifSpeed groups after running any custom ifSpeed Site Scripts.
22. Switch Port Mapper:
    • Updated manufacturer codes.
    • Changed the algorithm so MAC addresses of network devices (e.g. switches and routers) are not discarded. The original intention of the switch port mapper was to identify end devices (i.e. PCs), but many customers also want to be able to search for a MAC of a switch/router to see what it is connected to.
    • Fixed the collection of bridge forwarding tables for Cisco Nexus switches. The changes applied in item 29 of version 16.5 did not work as expected.
23. Backup / Restore performance improvements:

    A performance issue with the incremental backup was reported when the backup server was located in a remote data centre and the data had to go through multiple firewalls. The latency of the network and firewalls caused the backup to run for a long period. This was because the backup script was invoking 1 to 3 ssh/scp commands for each file being backed up. The backup/restore transfer mechanism has been changed from ssh/scp to sftp in batch mode. This reduces the TCP socket connections to one, which as has resulted in a significant speedup of both the backup and restore.

24. Performance improvement when initially starting the software after an operating system upgrade. It was observed that servers with large configurations (e.g. 250,000+ interfaces) can take several minutes to fully start after upgrading to FreeBSD 10.3, leaving a larger than expected gap in the graphs. The cause was due to the painfully slow way the database files are mapped into memory. The startup script now forces all database files into memory before starting the poller and databases. The startup time for a server configured with 1.3 million interfaces was reduced from ~5 minutes to ~30 seconds.
25. Time filter changes:
    • Fixed a defect where a rule of "not mon to fri" was not correctly including Sunday.
    • Changed the behaviour to allow Sunday to be the start or end of the week. This now allows rules like "sat to sun". Traditionally, Sunday is day 0 (start of the week) and Saturday is day 6 (end of the week).
26. Fixed detecting duplicate devices:

    When a device was added using SNMPv2, and later discovered using SNMPv3, the duplicate entry was not being removed because SNMPv2 uses mac table checks, and SNMPv3 uses engine id. This was done due to a bug in IXIA devices which don't return valid MAC address entries. The algorithm was changed so devices with no valid MAC addresses are not checked for duplicate devices. SNMPv3 now also uses the mac address finger print checks too.

27. Fixed Events Dashboard profile filtering for Syslog and SNMP Traps
28. Fixed Dell Force10 report hiding.
29. Fixed several serious defects in the nm-joatd process which could cause it to exit on a signal 11 due to race conditions in an unsafe signal handler. Also moved non critical functionality out of the nm-joatd process.
30. Fixed discover so it can handle SNMP community names with '=' characters.
31. Fixed regression introduced in 16.7 where the SNMP scan would fail during a scheduled discover.
32. Added/updated compiled MIBs:
    • Liebert
33. Supported MIB Object stats:
    • 218 Counters
    • 321 Gauges
    • 208 Enumerations
    • 80 Integer
    • 377 Other
    • 1204 Total
34. Compiled MIBs:
    • 3414 MIBs
    • 402476 Objects

Version 16.7   24th March 2016

1. Upgraded the operating system to FreeBSD 10.2-p14.
   Refer to the following FreeBSD security and errata advisories
   
   • Incorrect argument validation in sysarch(2)
   • OpenSSH xauth(1) command injection
   • hv_netvsc(4) incorrect TCP/IP checksums
   • Hyper-V KVP (Key-Value Pair) daemon indefinite sleep
2. Added BridgeWave radio stats:
   • Model
   • Band
   • Utilisation
   • Receive signal level
   • Pre/Post FEC counts and status
   • Unit temperature
   • Radio temperature
3. Added Cisco ASA firewall connections report.
4. Added Dell Force10 reports for:
   • CPU
   • Memory
   • Temperature
5. Added Juniper Trapeze Wireless Controller reports for
   • CPU
   • Memory usage
6. Added Juniper BGP report for:
   • Identifier
   • AS Number
   • AS Name
   • Local IP (v4/v6)
   • Remote IP (v4/v6)
   • Admin State
   • Connection State
   • Last Change
   • Updates
   • Messages
7. Added PacketLight Pico wavelength column to the Optical Interfaces report.
8. Added functionality to override ifSpeed values returned by devices. Some vendors do not use the configured bandwidth value for IF-MIB.ifSpeed. The ifSpeed values for interfaces can be overridden using a simple Site Script. For site scripting assistance, email to [email protected].
9. Added "stop" action to the Status Alerting. This tells the alerting to stop processing alerting rules at the current line. This is useful if there is a catch-all rule at the bottom. In the following example, without the stop rule, Ping Status alerts will be sent immediately and after 5 minutes.

      wait 5m * * ping4 PING.icmpState = email NetEng
      * * ping4 PING.icmpState = stop
      * * * *                  = email NetEng
      

10. Changed the Juniper RPM child type to 'ipsla' so the RPM tests can be grouped using the IPSLA grouping controls.
11. Added child description for APC PDU Phase graphs.
12. Fixed a defect in nm-snmp where a incorrectly formatted SNMPv3 response packet would cause nm-snmp to exit.
13. Fixed a buffer overflow defect in the graphing which caused zero length files when saving as PDF or PNG.
14. Fixed a buffer overflow defect in the nm-joatd process which could cause nm-joatd to exit.
15. Fixed duplicate Juniper RPM graphs.
16. Fixed IPv6 addresses not being discovered in later scans. If a device is originally discovered via IPv4 and IPv6 address ranges are added to the discover later on, then IPv6 addresses were not being automatically populated for existing devices.
17. Added/updated compiled MIBs:
    • Force10 (Dell)
    • Meraki (Cisco)
18. Supported MIB Object stats:
    • 210 Counters
    • 317 Gauges
    • 201 Enumerations
    • 77 Integer
    • 350 Other
    • 1155 Total
19. Compiled MIBs:
    • 3411 MIBs
    • 400960 Objects

Version 16.6   15th March 2016

1. Operating System: FreeBSD 10.2-p13
2. Fixed several critical security issues where commands could be injected into certain URLs. This could expose sensitive data to unauthorised users.
3. Fixed various issues with the Scheduled PDF reporting functionality.
4. Added PDF button to the navbar to allow the user to create a PDF file of the current viewed report. This is a beta feature and will be enhanced over the next few releases.

Version 16.5   11th March 2016

1. Upgraded the operating system to FreeBSD 10.2-p13
   Refer to the following FreeBSD security advisory
   
   • Multiple OpenSSL vulnerabilities
2. Added APC PDU Report
   • Hardware version
   • Firmware version
   • Serial number
   • Manufacture date
   • Model number
   • Power Rating
   • Number of outlets
   • Number of phases
   • Supply status
   • Alarm status
3. Added APC PDU Phase report
   • Phase number
   • State
   • Voltage
   • Current
   • Power
4. Added APC PDU Outlet report
   • Outlet name
   • Phase
   • Bank
   • Config state
   • State
   • Command pending
   • Load (amps)
5. Added Cisco Netflow Cache report
   • Cache percent used
   • Learn failures
   • Engine Description
6. Added Cisco FRU Fan State report
7. Added Dell switch reports
   • Fan state/speed
   • Memory
   • Temperature
8. Added F5 Power Supply status report
9. Added Huawei Module Status report
   • CPU
   • Memory
   • Temperature
   • Voltage
10. Added Huawei power supply report
    • Status
    • Temperature
11. Added Ingrasys TopN Graphs
    • Temperature
    • Humidity
12. Added Juniper RPM report
    • Test name
    • Percentage Lost
    • Latency in microseconds
13. Added PacketLight Optical Interfaces report
    • Transmit power
    • Receive power
    • Title
    Note: Must select the ifType of opticalTransport in the Discover configuration settings.
14. Added initial/beta scheduled PDF reporting functionality in Admin -> Miscellaneous -> Scheduled Reports. Requires a valid licence key.
15. Added file attachment functionality to the Common.pm mail() function.
16. Added "Test" button to the threshold alerting rules. The test prints out each threshold rule along with the results of its "mget" command.
17. Reduced memory size of the discover process by up to 20%, depending on the type of devices being walked.
18. Changed the interface group listing so user generated groups are displayed before system generated groups. The ifspeed_xxxx, iftype_xxxx and vlan_xxx groups are now display at the bottom of the list.
19. Added functionality to inform the poller to collect data for certain interfaces which have an ifOperStatus of 'down'. Cisco switch interfaces which are used for interface mirroring, always report an ifOperStatus or down. Some customers what to graph the amount of traffic passing through the mirrored interfaces.
20. Fixed a defect in the SNMP library where invalid SNMPv3 localised user keys were being generated when the Auth or Priv password length was greater than 16 characters. This would cause walk failures for the device during the discover.
21. Added workaround for broken HP 5xxx switches which return incorrectly formatted SNMPv3 Report packets, which caused the engine discover phase of authenticated/encrypted SNMPv3 sessions to fail. A packet trace verified the invalid Report packets were occurring.
22. Fixed a possible loop situation in the SNMP library when a device keeps returning Report packets during SNMPv3 engine discovery stage. The effect was the SNMP walk process of the discover/rewalk would never exit. If the device returns more than three SNMP Report packets, the session to that device is skipped.
23. Fixed a defect in the discover/rewalk where the nm-snmp process would continue even if the browser tab was closed to terminate the discover. The discover script was not signalling the nm-snmp process to exit, so it would contine doing walks in the background until it completed.
24. Changed the memory usage of the nm-snmp process. Previously it would preallocate 65536 entries (i.e. 64k concurrent SNMP walks) at start up, which would unnecessarily waste memory when only walking a single device. The request array size is now dynamically increased to a maximum of 64k entries.
25. Added debug logging to the SNMP log each time an SNMP walk is run. The log data includes:
    • Current size of the request array (max 65536)
    • Number of used entries in the request array
    • Number of queued requests
    • Number of active requests
26. Added skip entry in the SNMP library for HUAWEI-XQoS-MIB because a walk contains a massive amount of useless MIB objects.
27. Set the ICMP identifier and sequence values to 255 in the ping poller packets. AKIPS does not use those fields, but some customers have configured their firewalls so they drop ICMP packets when those fields are set to zero.
28. Report error if devices is removed due to walk failure when using "Add SNMP Device. Previously, the status line would report success even if the device was removed during discover due to a failed SNMPv2-MIB or ifTable walk.
29. Enhanced the switch port mapper so it handles collecting MAC address information from Cisco Nexus switches. The data is collected by using SNMPv2 Community Name addressing or SNMPv3 Contexts, but NX-OS does not support the ENTITY-MIB.entLogicalCommunity and ENTITY-MIB.entLogicalContextName MIB objects. A workaround has been applied by faking up these MIB objects.
30. Added missing device controls to various reports.
31. Enhanced the database validate checks.
32. Removed the Cisco TCAM report because it returns bogus/misleading information.
33. Fixed an uninitialised value in the Availability perl module which would cause the single device dashboard to fail randomly.
34. Fixed renaming Aruba APs if their name changes.
35. Fixed the sorting of device and interface names. For example, fastether2/3 was being sorted ahead of fastether1/10.
36. Fixed hiding of UPS Battery and UPC Sensors reports.
37. Fix to Site Scripting wrapper scripts which could not be killed because they were blocking signals.
38. Fixed a defect in the IPv6 ping scan.
39. Fix to email profile validation. Previously only the first user profile was being validated after the email action.
40. Fix to allow spaces in user passwords.
41. Display an error if an invalid licence key is entered in the Software Activation menu.
42. Added workaround when ntpdate fails with a timeout when a server boots and its server/switch interface takes a long time to start forwarding traffic. The start up script now does up to 20 ntpdate attempts.
43. Added/updated compiled MIBs:
    • Adva
    • Aruba Airwave
    • Bridgewave
    • EndRun Tempus
    • Radware
    • Trapeze (now Juniper)
44. Supported MIB Object stats:
    • 203 Counters
    • 306 Gauges
    • 196 Enumerations
    • 74 Integer
    • 332 Other
    • 1111 Total
45. Compiled MIBs:
    • 3401 MIBs
    • 399848 Objects

Version 16.4   5th February 2016

1. Upgraded the operating system to FreeBSD 10.2-p12
   Refer to the following FreeBSD security advisories
   
   • OpenSSL SSLv2 ciphersuite downgrade vulnerability
   • Multiple vulnerabilities of ntp
   FreeBSD 10.3 is currently in BETA. Refer to the 10.3 release schedule. Once released, we will perform testing for a few weeks before switching to the 10.3 RELENG security branch.
2. Enhanced the Netflow collector so it can now handle multiple Domain IDs for Netflow v9 templates coming from the same exporter. This appears to occur in a multi chassis virtual switch arrangement.
3. Added interface duplex status to the Interface Statistics report. A value is only printed if the device supports the EtherLike-MIB.
4. Added support in the Admin -> System -> System Settings for configuring multiple network interfaces. This is required in some customer sites where their AKIPS server needs to be multi-homed onto separate networks/VLANs.
5. Speedup to the Tune Interface State processing. On a 250,000 interface configuration, the tune interface state processing was taking many seconds each minute. This has been reduced to ~700ms.
6. Updated the Site.pm perl module so Discover.pm is always included. Customers who previously needed to include Discover.pm in their Admin->API->Site Scripting no longer need to so.
7. Added a workaround for IXIA devices which only return MAC addresses of 000000000000 in IF-MIB.ifTable. The defect has been reported to IXIA. The discover uses the list of IF-MIB.ifPhysAddress values in each device to finger print the device, which is then used to detect and remove duplicate devices. The discover also performs duplicate device checking using SNMPv3 Engine IDs because it is mandatory that Engine IDs are unique. The discover now skips the MAC finger print for SNMPv3 devices. The workaround for IXIA devices is to use SNMPv3.
8. Changed the discover so it prints one dot per 10 devices when creating its configuration. This is to avoid proxy/browser timeout issues if it takes a while to create the configuration for large numbers of devices.
9. Fix to the 30 minute ifSpeed update. The script was not updating the ifspeed_xxx groups after updating the ifSpeed in the configuration. This meant that the ifspeed_xxx interface groups were not always 100% correct.
10. Fixed a buffer overflow in the HTTP server when handling error logging of long URLs. The HTTP daemon would exit with a SIGBUS or SIGSEG error and be automatically restarted.
11. Fix a regression introduced in 16.2 where page headings were missing for the following screens:
    • Discover / Rewalk (when running)
    • Discover Log Viewer
    • System Log Viewer
    • Manual Grouping
12. Fixed hiding of Eaton UPS reports when "Hide Unused Reports" was selected from the right drop down menu.
13. Database deadlock issues.

    Several customers have experienced database deadlocks issues when discovering SNMPv3 devices. The AKIPS database comprises of multiple underlying databases (e.g. time-series, events, configuration, etc). One of these databases is the SNMPv3 LUK (Localised User Key) database which holds things like the SNMPv3 SHA/MD5 generated LUK, Engine ID, Engine Boot time, Engine Boot Count, etc. Refer to the Deploying SNMPv3 blog for a detailed description of SNMPv3.

    The deadlock issues were able to be reliably reproduced in our lab network by running the discover against a large number of SNMPv3 devices. Several race conditions in the underlying database locking have been rectified.

14. Fixed handling of large jumps in time. Time is always meant to go forwards at a constant rate! The time-series database stores all data in 30 day blocks. If a server is shutdown and rebooted with a wildly different time (e.g. out by several years), the time-series database processing immediately starts pruning data blocks which are not within the storage time period.

    Additional time sanity checks have been added so if the software detects that time has jumped, either at boot time or while it is running, then the software drops into read only mode and an error message is displayed in the GUI to contact AKIPS tech support.

15. Added/updated compiled MIBs:
    • Informant
16. Supported MIB Object stats:
    • 199 Counters
    • 291 Gauges
    • 183 Enumerations
    • 67 Integer
    • 318 Other
    • 1058 Total
17. Compiled MIBs:
    • 3365 MIBs
    • 388038 Objects

Version 16.3   20th January 2016

1. Operating System: FreeBSD 10.2-p10
2. Fix to mailer configuration.

   In version 16.2, the Postfix package was updated as part of the operating system upgrade. It appears the FreeBSD ports team made an unannounced change to the Postfix package. In their wisdom, they have suddenly decided not to update /etc/mail/mailer.conf to point to Postfix instead of Sendmail.

   Due to this change, AKIPS servers running 16.2 will attempt to send mail using the default Sendmail program instead of Postfix. All of the mail settings in Admin->System->System Settings are reliant on Postfix, and will not work with Sendmail. For sites which are reliant on these settings (e.g. "Email Domain"), mail may not be delivered.

Version 16.2   19th January 2016

1. Upgraded the operating system to FreeBSD 10.2-p10
   Refer to the following FreeBSD security advisories
   
   • SCTP ICMPv6 error message vulnerability
   • ntp panic threshold bypass vulnerability
   • TCP MD5 signature denial of service
2. Added ability to alert by Total value over a LastN period. The threshold rules can be slightly confusing....

   For example the following rule means the average multicast packets exceeds 1000 per minute over the last 5 minutes.
   last5m avg above 1000 * * * IF-MIB.ifHCInMulticastPkts = email [email protected]

   Whereas the following rule means the total multicast packets exceeds 5000 for the last 5 minutes.
   last5m total above 5000 * * * IF-MIB.ifHCInMulticastPkts = email [email protected]

3. Availability Reporter:
   • Added ability to save graphs
   • Added "{start} to {end}" dates when saving graphs
   • Increased report resolution to 2 decimal places
4. Added availability graph to the single Device Dashboard.
5. Dynamically increase the size of the text box in the Auto Grouping depending on the browser size.
6. Added interval to the graph legends so it shows avg/{interval}.
7. Added support for legacy/deprecated RFC1213 non unicast packets (ifOutNUcastPkts and ifInNUcastPkts). Most modern devices support IF-MIB.ifXTable, which includes 32bit and 64bit counters for multicasts/broadcasts. If a device only supports the historic ifTable, then the discover will fall back to using ifOutNUcastPkts and ifInNUcastPkts. The data will appear in the multicast column of the interface statistics reports.
8. Supported MIB Object stats:
   • 199 Counters
   • 291 Gauges
   • 183 Enumerations
   • 67 Integer
   • 318 Other
   • 1058 Total
9. Compiled MIBs:
   • 3363 MIBs
   • 386910 Objects

Version 16.1   12th January 2016

1. Operating System: FreeBSD 10.2-p8
2. Added packet capture duration options to the Ping/SNMP Walk/Packet Capture tool.
3. Added a work around for Cisco Nexus boxes which randomly return garbage 64bit counter values. This appears to be a race condition in the Nexus box where the counter is being updated while an SNMP Get request operation is being performed on that counter, which means the counter update is not an atomic operation. The AKIPS poller now discards its internal state machine for two polling cycles (i.e. 120 seconds) for that counter when this issue is detected.
4. Added navigation/save controls to the Graph Reporter and Interface Graph Reporter tools.
5. Added ability to apply an event flag to a threshold rule. Refer to the Threshold Alert help syntax.
6. Added monitoring of CISCO-ENVMON-MIB.ciscoEnvMonSupplySource. Updated the Cisco Power Supply report to display Source and Status columns.
7. Added a width option to the graphing controls. This allows you to manually widen the graphs to get finer detail. The maximum width of a SVG graph has been increased to 1 million data points. This allows you to display a 1 year graph at 1 minute resolution. The only issue is your browser may be slightly sluggish when scrolling on such a wide SVG image.
8. Changed the layout of various reports so the Device Filter is above the Device List.
9. Availability report changes:
   • Added drilldown from summary graph to a new per-device graph/table.
   • Added drilldown from the new per-device table to the outage table.
   • Changed default report to "IPv4 Ping Availability".
   • Added separate icons for Table and Events.
10. Added interface name to the Cisco NBAR report.
11. Added Aerohive AP Radio report:
    • Radio Utilisation
    • Radio Transmit Power
12. Added Ingrasys reports:
    • Temperature
    • Temperature Status
    • Humidity
    • Humidity Status
13. Added ServerTech reports:
    • Temperature
    • Humidity
    • CDU
      • Version
      • Serial Number
      • Power
    • Tower
      • ID
      • Name
      • Model
      • Serial Number
      • Status
      • Power Watts
      • Power VA
      • Power Factor
    • Infeed
      • Name
      • Line
      • Line to Line
      • Phase
      • Number of Outlets
      • Load Status
      • Voltage
      • Current
      • Power Watts
      • Power VA
      • Phase Voltage
      • Phase Current
    • Outlets
      • Name
      • Config State
      • Control State
      • Load State
      • Voltage
      • Current
      • Power Watts
      • Power VA
      • Power Factor
14. AKIPS now runs 'zpool scrub' every Tuesday at 2am (localtime) to ensure data integrity.
15. Fixed a serious memory leak issue in the main joatd process (Jack Of All Trades Daemon). This memory leak slowly consumes virtual memory until it is exhausted, then the kernel will terminate the joatd process.
16. Fixed duplicate alert messages for wait rules in the Status Alerting.
17. Fixed an issue downloading an OIDs Walk in the SNMP Walk tool when parameters are entered manually. The file was zero bytes in length.
18. Added/updated compiled MIBs:
    • Ingrasys
    • NetApp
19. Supported MIB Object stats:
    • 197 Counters
    • 291 Gauges
    • 183 Enumerations
    • 67 Integer
    • 318 Other
    • 1056 Total
20. Compiled MIBs:
    • 3363 MIBs
    • 386910 Objects

Version 15.40   24th December 2015

1. Operating System: FreeBSD 10.2-p8
2. Added Ixia Segment report:
   • Util%
   • Bytes
   • Packets
   • Broadcast
   • Dropped
3. Added Dell Switch Stack Status report:
   • Model/Description
   • Serial Number
   • Software Version
   • Role
   • Status
4. Added Dell iDRAC Fan report:
   • Fan Speed
   • Fan Status
5. Added Dell iDRAC Temperature Sensor report:
   • Sensor Description
   • Temperature
   • Status
6. Added Dell iDRAC Power Supply report:
   • Description
   • Voltage
   • Status
7. Added Dell iDRAC Global Status report:
   • iDRAC Model
   • Version
   • Serial Number Tag
   • OS Type
   • Server Model
   • System/Storage Status
8. Added Dell iDRAC Physical Disk report:
   • Manufacturer
   • Identifier
   • Serial No
   • Revision
   • Rev
   • Capacity
   • Status
9. Added Meru Wireless Controller CPU report.
10. Added Meru Wireless Controller Memory report:
    • Util %
    • Total
    • Used
    • Free
11. Added Meru Wireless Controller Statistics report:
    • Model
    • Software Version
    • Tx / Rx Bytes
    • Access Points
      • Online
      • Offline
      • Rogue
    • Stations
      • Total
      • 2.4G
      • 5G
      • Rogue
12. Added Meru Wireless Controller Stations report:
    • 802.11b
    • 802.11b/g
    • 802.11an
    • 802.11gn
    • 802.11ac
13. Added phase number to APC ATS report.
14. Added phase number to Eaton UPS Phases graphs.
15. Added Network/Netmask to Infoblox DHCP Subnet graphs.
16. Added FPC slot number to Juniper SPU description.
17. Added ifAdminStatus to interface configuration report.
18. Added support for Radware multiprocessor CPU/Memory reports. Radware appear to keep single and multi processor statistics in different MIB objects.
19. Split the interface name and title filtering into separate controls in the Interface Reporter/Grapher.
20. Moved the graph legends from the right side to the bottom of the graphs. Added Average and Total values to the graph legends.
21. Fixed an issue with A10 sessions configuration. The A10 MIB previously incorrectly defined the session objects as counters instead of gauges. A10 rectified the MIB.
22. Fixed a database deadlock issue which can occur if a device is deleted at the same time the hourly database validate has a database lock.
23. Fixed a race condition in the discover when creating the etc/ip2name.cfg file. This file maps all the IP addresses found on each device to a device name. The SNMP Trap and Syslog reporters use this mapping to determine where traps/syslog message come from. The race condition would cause the persistent reporting CGIs to load an empty ip2name.cfg file, and therefore were not able to resolve the device name.
24. Fixed an issue with F5 load balancers which do not report all the IP addresses it is using via the standard IP-MIB tables. The IP mappings now also uses the F5-BIGIP-SYSTEM-MIB.sysSelfIpAddr objects when creating the ip2name.cfg mappings.
25. Fixed an issue when an evaluation licence key expires and the alerting continues until the software is restarted.
26. Fixed an issue in the backup/restore where AKIPS web users were not being saved/restored.
27. Added/updated compiled MIBs:
    • A10
    • Aerohive
    • Avocent
    • Cyclades
    • Ingrasys
    • Dell Compellent
    • Packet Light
    • Palo Alto
    • Sensatronics
    • Servtech
28. Supported MIB Object stats:
    • 195 Counters
    • 272 Gauges
    • 171 Enumerations
    • 65 Integer
    • 297 Other
    • 1000 Total
29. Compiled MIBs:
    • 3359 MIBs
    • 385509 Objects

Version 15.39   11th December 2015

1. Upgraded the operating system to FreeBSD 10.2-p8
   Refer to the following FreeBSD errata and security advisory
   
   • Multiple OpenSSL vulnerabilities
2. Change the /drilldown parameter syntax for shorter URLs. These changes include:
   • Change graph= so that the list of graphs can be specified as comma separated values, e.g. graph=util,bit_rate,packet_rate;
   • For interface drilldowns, removed descr= and title= parameters as these will be set to the appropriate defaults to include interface description and speed in the title.
3. Enhanced the Admin -> General > Switch Port Mapper Settings.

   Previously the ping sweep option would use the ping range rules from the discover. Those range rules would typically be used to find network devices, not edge devices (e.g. PCs, Printers, etc). The new ping range rules in the Switch Port Mapper Settings allows you to ping sweep the the edge devices, therefore priming the IP ARP tables of routers and the bridge forwarding tables of switches.

4. Added the ability to remove the control panel on the Interface Dashboard by removing the controls=interface; from the URL.
5. Renamed the Juniper Stack Modules report to Virtual Chassis Members.
6. Fixed a defect in the alerting module which was not handling SIGHUP interrupts. This would cause invalid or missing alerts.
7. Fixed Netflow zoom out which was stuck on "Hour". Drill down on any Netflow report, then zoom into a 10 minute period, then use the calendar zoom out "hour". Instead of the button changing to "Day" "Week" etc it is locked at "Hour".
8. Fixed Dell EqualLogic Memory Reports. Each EqualLogic device reports statistics in the EQLMEMBER-MIB for other member devices, which results in duplicate entries.
9. Fixed the "Save Graph" option for calendar graphs. The saved graph was not in calendar format as displayed on the screen.
10. Fixed threshold alerts so the values are in human readable format.
11. Fixed a signal 11 segmentation fault due to a NULL pointer reference in the main joatd (Jack Of All Trades Daemon) process.
12. Fixed a defect where the Hide Unused Reports option incorrectly hid the Device Chassis report.
13. Added/updated compiled MIBs:
    • Tegile
14. Supported MIB Object stats:
    • 209 Counters
    • 237 Gauges
    • 154 Enumerations
    • 58 Integer
    • 273 Other
    • 931 Total
15. Compiled MIBs:
    • 3314 MIBs
    • 382394 Objects

Version 15.38   3rd December 2015

1. Operating System: FreeBSD 10.2-p7
2. Added Dell EqualLogic Controller:
   • Controller Name
   • Model
   • Software Version
   • Serial Number
   • Battery Status
   • NVRAM Battery Status
3. Added Dell EqualLogic Disk Config:
   • Model
   • Serial Number
   • ID Number
   • Slot Number
   • Type (SAS/SATA)
   • RPM
   • Size
   • Status
   • Errors
4. Added Dell EqualLogic Disk Stats:
   • Serial Number
   • Transfers
   • Failed Transfers
   • Read/Write Bytes
   • Operations Pending
   • Queue Depth
   • Disk Errors
5. Added Dell EqualLogic Member Config:
   • Name
   • Status
   • Health
   • Raid Status
   • Lost Blocks
   • Spare Disks
   • Model
   • Serial Number
6. Added Dell EqualLogic Member Storage:
   • Name
   • Utilisation
   • Used
   • Free
   • Total
7. Added Dell EqualLogic Member Stats:
   • Name
   • Connections
   • Transmit Data
   • Receive Data
   • Read Operations/sec
   • Write Operations/sec
   • Read/Write Latency
8. Added Dell EqualLogic Pool Stats:
   • Pool Name
   • Storage Util
   • Storage Used
   • Storage Free
   • Storage Total
   • Volumes In Use
   • Volumes Online
   • Volumes Total
   • Connections
9. Added Dell EqualLogic Temperature Stats:
   • Sensor Name
   • Status
   • Temperature
10. Added interface filters to the interface flapping report.
11. Added link to interface dashboard in the Ciena Laser Interfaces report.
12. Reduce the event noise from Juniper Fan state changes.
13. Fixed duplicate alerts due to case sensitive rules. Alert rules containing profiles or email addresses with different case would cause duplicate alerts to be sent, or mute rules to fail.
14. Fixed a regression in the 'Hide Unused Reports' control.
15. Added/updated compiled MIBs:
    • Dell
    • Net-SNMP
    • ServerTech Sentry4
16. Supported MIB Object stats:
    • 209 Counters
    • 237 Gauges
    • 154 Enumerations
    • 56 Integer
    • 273 Other
    • 929 Total
17. Compiled MIBs:
    • 3313 MIBs
    • 382019 Objects

Version 15.37   25th November 2015

1. Operating System: FreeBSD 10.2-p7
2. Added Interface Flapping report
3. Added Liebert Humidity report
4. Added ENTITY-SENSOR-MIB voltsAC
5. Added SSL certificate chain support to the HTTP server.
6. Added "Hide Unused Reports" option to the Admin -> General -> Miscellaneous menu.
7. Added OSPF Neighbour Table report:
   • IP Address
   • Router ID
   • State and Last Change
   • Status and Last Change
   • Permanence
   • Number of Events
8. Increased the number of rows strip graphs created for in report tables from 100 to 500 rows.
9. All Reporting Tools: Only display the objects found during the discover/rewalk.
10. Device Dashboard
    • Hide the interface table for ping only devices
    • Highlight when device is unreachable
11. Device Reporter:
    • Only display the reports the user has access to
12. Event Reporter:
    • Increased the number of LastN options in the drop down select list.
    • Moved the Ping, SNMP and Interface Status to the top of the select list.
13. Threshold Alerting:
    • Decreased the run time interval from 5 minutes to 1 minute
    • Changed 'exceeds' keyword to 'above'
    • Added 'below' threshold option
14. Netflow Reporter:
    • Added more 'Limit' options
    • Removed checkbox selection for Packets, Bytes and Flows. These are now always displayed.
    • Added strip graphs for Packets, Bytes and Flows.
    • Increased the number of rows strip graphs are display from 50 to 500 rows.
15. Preserve the following across OS upgrades:
    • /etc/syslog.conf
    • /etc/hosts.allow
    • /etc/rc.firewall
    • /etc/ipfw.rules
16. Performance speedup to the database validate. In large configurations, the database validate would take over 20 seconds to complete. This would cause the GUI to stall once an hour because the validate takes an exclusive lock on the database. A refactor of the validate algorithm reduces this time to less than 1 second.
17. Fixed a race condition in the database which can cause a database locking deadlock between two processes. The race condition can sometimes occur if the automatic database validate is running when a device is deleted.
18. Added/updated compiled MIBs:
    • Dell EqualLogic
    • Tripplite
    • APC PowerNet MIB to 4.1.6
19. Supported MIB Object stats:
    • 197 Counters
    • 227 Gauges
    • 142 Enumerations
    • 51 Integer
    • 255 Other
    • 872 Total
20. Compiled MIBs:
    • 3304 MIBs
    • 380593 Objects

Version 15.36   17th November 2015

1. Operating System: FreeBSD 10.2-p7
2. Added Ixia reports for:
   • Port segment stats
   • Temperature
   • Power Supply status
3. Added ENTITY-SENSOR-MIB reports for:
   • Current
   • Voltage
   • Power
4. Added Ubiquiti AirMax reports for:
   • SSID
   • AP MAC
   • Signal
   • RSSI
   • CCQ
   • Noise Floor
   • Tx Rate
   • Rx Rate
   • WDS State
   • Repeater State
   • Station Count
5. Added support in the switch port mapper for legacy Cisco switches that only implement the deprecated MIB object vmMembershipSummaryMemberPorts instead of the newer vmMembershipSummaryMember2kPorts object, which meant VLAN data was not available.
6. Added Use HTTPS only option in the Admin -> General -> Miscellaneous menu.
7. Changed the toggle buttons in the Admin -> General > Miscellaneous menu so it is more obvious if they are on/off.
8. Changed the Interface Grapher so the drilldown opens in a new tab. The "zoom" mode causes an issue where the URL gets replaced with the drilldown cgi. If the user then types into a regex filter, the select lists get populated with HTML rubbish because the drilldown cgi can't handle the request.
9. Rearranged and split out the alerting code to make it more robust.
10. Fixed an edge condition in the alerting wait rules where duplicate alerts are generated if the event occurred on the minute boundary.
11. Fixed an issue in the the time filter which would cause alerts to be incorrectly generated. For example, a rule with a time filter of "mon to fri 06:00 to 22:00" would incorrectly return true on Saturday, and alerts were being sent.
12. Fixed grouping issue when ifSpeed is updated. The ifSpeed of an interface is updated when its ifOperStatus changes from down to up, but the ifspeed_xxx group for the interface was not being updated. A similar defect was in the 30 minute ifSpeed update run across all interfaces.
13. Fixed an issue when defining site specific service names in the Admin -> General -> Netflow Protocols menu. The flow reporters were expecting a protocol/server name with the format of 'protocol.server' (e.g. tcp.mylocalapp). A format of "udp.mylocalapp-10.1-net" was not being correctly handled by the reporting parser and was causing issues rendering report tables.
14. Added JUNIPER-COS-MIB.jnxCosIfqStatsTable to the SNMP walk skip list because the walk times out in that table due to very slow responses.
15. Added/updated compiled MIBs:
    • Avtech
    • PulseSecure
    • Ubiquiti
16. Supported MIB Object stats:
    • 196 Counters
    • 226 Gauges
    • 139 Enumerations
    • 51 Integer
    • 250 Other
    • 862 Total
17. Compiled MIBs:
    • 3281 MIBs
    • 376391 Objects

Version 15.35   6th November 2015

1. Upgraded the operating system to FreeBSD 10.2-p7
   Refer to the following FreeBSD errata and security advisory
   
   • Multiple vulnerabilities of ntp (revised)
   • Applications exiting due to segmentation violation on a correct memory address
   • kqueue write events for files greater 2GB would never fire
2. Added A10 reports for:
   • CPU
   • Memory
   • Temperature
   • Fan
   • Power Supply
3. Added A10 Sessions report:
   • Connections Active
   • Connections Freed
   • TCP Sessions
   • TCP Half Open Sessions
   • UDP Sessions
   • IP Sessions (non TCP/UDP)
   • Non IP sessions
   • Reverse NAT TCP Sessions
   • Reverse NAT UDP Sessions
4. Added Riverbed reports for:
   • CPU
   • Memory
   • Temperature
   • System Health
   • Service Status
5. Added vintage (early 2000) Extreme Networks switch reports:
   • CPU
   • Temperature
6. Changed the command line program nm-flow-reporter so it now takes additional sort options of src and dst.
7. Changed the Netflow reporter so the tables can be sorted by source and destination IP addresses. Previously the sort only worked on Packets, Bytes and Flows.
8. Switch Port Mapper Report changes:
   • When doing a search for a MAC or IP address, the report now displays the VLANs the interface is assigned to.
   • The IP address history search now contains additional fields of Vendor, Switch, Port, VLANs and interface description.
   • The MAC address history search now contains the additional field of VLANs.
9. Sort the switch port mapper CSV output files in the data/spm directory.
10. Added a switch port to VLAN output file data/spm/sp2vlan.
11. Changed the Admin -> System -> Systems Settings so the mail server password is not sent to the browser.
12. Performance speedup to the Syslog alerting module. It was noticed on a customer's server that the syslog alerting module was using more than 20% of a CPU core. This was caused by a constant stream of ~450 syslog messages per second and having to process each message through ~150 alerting rules. A small change to the alerting module reduces the CPU load to ~6% of a CPU core.
13. Added a workaround for vendor devices which do not return valid values for IF-MIB.ifSpeed (e.g. Riorey and Ixia). If an interface speed is greater than ifSpeed max (2^32) then the standard requires IF-MIB.ifSpeed to be set to 4,294,967,295 (2^32 - 1) and ifHighSpeed set appropriately. Some vendors are just counter wrapping ifSpeed multiple times and leaving it at some random value.
14. Fixed a bug in the SNMP library which would cause some network devices to time out / fail on an SNMP walk. The request packets used an unsigned 32bit value for Request ID instead of a signed 32bit value. The walk would time out after 32768 packets.
15. Fixed a bug in the SNMP adaptive polling algorithm. Under specific conditions, the poller would incorrectly skip its 60 second polling for MIB objects on a device.
16. Fixed a bug in the alerting where the mute rules were not being applied.
17. Fixed an incorrect configuration definition for Ciena temperatures sensors. This would stop the discover from adding Ciena temperature sensors.
18. Fixed an issue in the discover when the "IP Address" naming scheme is used. If a device is renamed in the Device Editor and a discover by IP range is performed, a duplicate device is added to the configuration because of a missing device finger print check.
19. Fixed an issue where the email alerting does not stop when an eval licence key expires. Email alerts would continue to be sent, but the user can not access the Admin -> Alerting menus.
20. Added compiled MIBs:
    • Citrix Netscaler SDX-ROOT-MIB
    • EndRun Technologies SONOMA-MIB
21. Supported MIB Object stats:
    • 182 Counters
    • 216 Gauges
    • 134 Enumerations
    • 48 Integer
    • 240 Other
    • 820 Total
22. Compiled MIBs:
    • 3276 MIBs
    • 376035 Objects

Version 15.34   31th October 2015

1. Operating System: FreeBSD 10.2-p6
2. Fixed an issue when saving a graph as a PNG/PDF file. A zero length file would be created. This is caused by a missing package on the installation ISO due to a new package dependency. NOTE: The graph save functionality is only available with a valid licence key.

Version 15.33   30th October 2015

1. Upgraded the operating system to FreeBSD 10.2-p6
   Refer to the following FreeBSD security advisory
   
   • Multiple vulnerabilities of ntp
   • Updated PCRE to version pcre-8.37_4 due to a security advisory.
2. Added Ciena Laser Interfaces report:
   • Transmit Power
   • Receive Power
   • Laser Temperature
3. Added Cisco Voice reports:
   • Voice Calls
   • Voice Interfaces
4. Added missing interface dashboard drilldown to:
   • Juniper Laser Interfaces
   • Extreme Flow Limit
5. Added/Updated compiled MIBs for:
   • A10
   • Cisco Cerent
   • Radware
6. Updated vendor code list for the switch port mapper reports.
7. Pass through the current LastN time filter from the Top N graphs to the drill down graphs.
8. Added a default maximum number of database compression processes to fire off (default 4). The number of processes is normally calculated at half the number of CPU cores, but some customers are using servers with 12 to 24 CPU cores. 4 compression processes is more than enough for large sites (e.g. 10000+ devices and 250000+ interfaces).
9. Fixed database validate command so skips over attribute values which have not been set. This would occur if the hourly auto database validate ran while the discover was adding new devices.
10. Fixed missing good state values for CISCO-ENTITY-SENSOR-MIB entSensorStatus object.
11. Fixed the Interface Dashboard drill down in the Switch Port Mapper reports.
12. Fixed an issue with the Save Graph function in the Interface drill downs.
13. Fixed a issue where the discover ping scan program never exits. This issue was only noticed when the AKIPS server was configured with dual homed network interfaces.
14. Fixed an issue in the SNMP Trap alerting if the IP address of the device can not be resolved to a name.
15. Fixed an issue where the software needed to be restarted after a licence key is installed for the alerting to start working.
16. Supported MIB Object stats:
    • 173 Counters
    • 206 Gauges
    • 127 Enumerations
    • 46 Integer
    • 227 Other
    • 779 Total
17. Compiled MIBs:
    • 3275 MIBs
    • 375736 Objects

Version 15.32   22nd October 2015

1. Operating System: FreeBSD 10.2-p3
2. Added Ciena reports:
   • CPU
   • Memory
   • Chassis Temperature
   • Power Supply Status
   • Fan Status
3. Added temperature status columns to:
   • Arista
   • Cisco
   • Extreme
   • HP
   • Palo Alto
4. Added initial Alert scripting functionality so a Site Script can run instead of sending an email or syslog message.
   Note: This functionality has not been documented yet. Site Scripting requires a valid licence key.
5. Added a prototype TCP socket daemon that allows multiple incoming raw socket connnections to interact with AKIPS command line programs. This is a customer requested feature so their remote tools can communicate with the AKIPS API via sockets.
   Note this is currently undocumented.
6. Enable serial console on AKIPS server and set for 115200 bps.
7. Fixed the ping scan and ping poller to allow dual homed network interfaces. Previously the pinger would only listen for echo responses on the first ethernet interface.
8. Fixed an issue in the Device Editor where a device can be renamed to an existing device (ie. user error), which would clobber the configuration of that existing device. The fix prevents the user from doing this.
9. Fixed an issue with the switch port mapper algorithm if only a portion of the network is being monitored. The algorithm would attempt to resolve the location of MAC addresses that do not appear on an edge port by tagging some trunk ports as edge ports. This may have resulted in a MAC appearing on random trunk ports.
10. Added/Updated compiled MIBs for:
    • Ixia
    • Cisco UCS
    • Netgear
    • Riverbed
11. Supported MIB Object stats:
    • 173 Counters
    • 200 Gauges
    • 126 Enumerations
    • 46 Integer
    • 226 Other
    • 771 Total
12. Compiled MIBs:
    • 3260 MIBs
    • 371052 Objects

Version 15.31   16th October 2015

1. Operating System: FreeBSD 10.2-p3
2. Added more columns to the BGP Peer State report
   • Identifier
   • AS Number
   • AS Network Name
   • Updates
   • Messages
3. Added Cisco Netflow statistics
   • Flows
   • Packets
   • Failed
   • Dropped
4. Added Cisco Netflow Exporter report
   (Moved from Tools -> Netflow)
   • Router
   • Destination IP
   • Destination Port
5. Added AKCP temperature status
6. Added AKCP humidity status
7. Added Juniper Firewall report
   • Connections
   • Denied packets
   • TCP SYN Attack
   • TCP Sequence
   • Illegal packets
   • No route
8. Added BlueCat DHCP Subnet stats
   • Subnet IP
   • Netmask
   • Size
   • Used
   • Free
   • Util
9. Added 'Group Selector' to the 'Add Ping Device' control.
10. Fixed a problem saving Netflow graphs to PNG/PDF.
11. Added compiled MIBs for:
    • AudioCodes
12. Supported MIB Object stats:
    • 173 Counters
    • 195 Gauges
    • 123 Enumerations
    • 45 Integer
    • 225 Other
    • 761 Total
13. Compiled MIBs:
    • 3191 MIBs
    • 358005 Objects

Version 15.30   9th October 2015

1. Operating System: FreeBSD 10.2-p3
2. Added Cisco TCAM reports:
   • Pool Name
   • Total
   • Used
   • Utilisation
3. Added AKCP sensor reports:
   • Temperature Sensors
   • Humidity Sensors
4. Added Infoblox DHCP Subnet report:
   • Network Address
   • Subnet Mask
   • Percent Used
5. Added Infoblox DNS query rate report
6. Added BlueCat DHCP Pool report:
   • Start IP
   • End IP
   • Pool Size
   • Pool Used
   • Pool Util
7. Added compiled MIBs for:
   • BlueCat
8. Added the following MIB tables to skip over during an SNMP walk:
   • BlueCat ADONIS-DNS-MIB.dhcpLeaseTable
   • BlueCat BCN-DHCPV4-MIB.bcnDhcpv4LeaseTable
9. Added a "Hide Unused Reports" option for the admin user. It is located in the drop down menu on the right hand side of the navbar. This is a licensed feature only.
10. Supported MIB Object stats:
    • 159 Counters
    • 194 Gauges
    • 123 Enumerations
    • 42 Integer
    • 220 Other
    • 738 Total
11. Compiled MIBs:
    • 3166 MIBs
    • 350752 Objects

Version 15.29   2nd October 2015

1. Operating System: FreeBSD 10.2-p3
2. Added Infoblox DHCP report:
   • Discovers
   • Requests
   • Releases
   • Offers
   • ACKs
   • NACKs
   • Declines
   • Informs
   • Others
3. Added APC Battery Remaining Time.
4. Added workaround in the SNMP library for devices which return a TimeTick instead of a Gauge (e.g APC Battery Remaining Time).
5. Added support in the switch port mapper for the CISCO-IETF-IP-MIB because Cisco IOS does not appear to support the IP-MIB.ipAddressTable.
6. Enhanced the API assign command to allow assignment of multiple groups in the one command. Refer to the API guide.
7. Speedup to the Admin -> General -> Switch Port Mapper controls when excluding a large number of VLANs for grouping (eg. 1000+).
8. Refactored the discover ping scan algorithm to handle a large number of IP range rules. Previously it took one hour to process and scan 600 range rules, and now it takes less than 2 minutes.
9. Refactored the API commands clear and prune due to performance issues when dealing with a very large number of interface VLAN groups. This resulted in a significant performance speedup.
10. Added Admin -> Grouping -> Settings controls. New options include:
    • Prune Device Groups
    • Prune Interface Groups
11. Renamed Cisco -> VPN Sessions to Cisco -> SSL VPN Client Sessions.
12. The switch port mapper collector now does interface VLAN grouping once an hour if turned on in Admin -> General -> Switch Port Mapper Settings.
13. Fixed an issue with the Interface Dashboard layout.
14. Fixed duplicate 'Per X Per X' title in saved PNG/PDF graphs.
15. Fixed an issue in the discover when reindexing Aruba Access Point Radios after the AP has been replaced.
16. Fixed several manual grouping issues:
    • Editing a Netflow group would not display any flow meters
    • Could not remove interfaces from an interface group
17. Added compiled MIBs for:
    • AKCP
    • Cambium networks
    • Force 10
    • Midspan
    • Radlan
    • Watchguard
18. Supported MIB Object stats:
    • 159 Counters
    • 188 Gauges
    • 121 Enumerations
    • 40 Integer
    • 207 Other
    • 715 Total
19. Compiled MIBs:
    • 3152 MIBs
    • 350327 Objects

Version 15.28   25th September 2015

1. Operating System: FreeBSD 10.2-p3
2. Fixed a serious race condition defect introduced in version 15.27 that can cause database corruption. This can occur if a large number of groups are created (eg. via the switch port mapper settings) while the discover is adding new devices. Additional checks have been added to the database validate and repair functionality.
3. Fixed a slow memory leak in the HTTP server when serving static documents.
4. Redesigned the Switch Port Mapper Settings controls to make it faster and simpler to create VLAN interface groups. VLAN interface groups are now automatically created for all selected VLANs and no need to run the auto grouping or discover rewalk.
   Note: There is a known performance issue when selecting large numbers of VLANS to be excluded. This performance issue will be addressed in 15.29.
5. Added Status Alert Wait functionality. Refer to the help syntax in the Admin -> Alerting -> Status Alerts.
   This feature can be used for the following use cases:
   • Alert suppression if a status transitions from good -> bad -> good states within the wait period. e.g. set a wait time of 5m to suppress Ping Status alerts if a device is unreachable for less than 5 minutes.
   • Delayed alerts to only send an alert if an exception status occurs for longer than a defined period. e.g. set a wait time of 5m to get a Ping Status alert if a device is down for longer than 5 minutes.
   • Escalation to send an alert if an exception status occurs for longer than a defined period.
6. Added new time filter syntax keywords:
   • startoflastminute
   • startofthisminute
7. Added "Device Groups" table on the Device Dashboard.
8. Added "Interface Groups" table on the Interface Dashboard.
9. Added MAC count to the interface reports.
10. Added page titles to dashboards to stop confusion.
11. Added compiled MIBS for:
    • Aruba Clearpass
    • Infoblox
12. Added Cisco Wide Area Application Services reports:
    Application Optimizer
    • Name
    • Config Status
    • License Status
    • Operational Status
    • Handled Connections
    • Optimized Connections
    • Handed Off Connections
    • Dropped Connections
    • Active Optimized Connections
    • Pending Connections
    • Load Status
    • Bandwidth Optimized
    Application Statistics
    • Name
    • Original Bytes
    • Optimized Bytes
    • Passed Through Bytes
    Policy Map Statistics
    • Name
    • Description
    • Total Connections
    • Total Bytes
    • Total Passed Through Connections
    • Total Passed Throuhh Bytes
    Class Map Statistics
    • Name
    • Description
    • Total Connections
    • Total Bytes
    • Total Passed Through Connections
    • Total Passed Through Bytes
13. Added Aruba ClearPass Authentication Server:
    Radius Server
    • Success
    • Failure
    • Count
    • Policy Eval Latency
    • Request Latency
    Radius Authentication
    • Source Name
    • Success
    • Failure
    • Count
    • Latency
    Tacacs Server
    • Success
    • Failure
    • Count
    • Latency
    Tacacs Authentication
    • Success
    • Failure
    • Count
    • Latency
    Web Authenication
    • Protocol Name
    • Success
    • Failure
    • Count
    • Latency

Version 15.27   18th September 2015

1. Updated install ISO to FreeBSD to 10.2-p3.
2. Drop down menu enhancements:
   • Due to the large number of supported vendors, the Reports drop down menu was going off the screen on small devices (eg. tablets and laptops with low resolution). All drop down menus are now scrollable, which means the sub menus have also been repacked.
   • Added a 200ms delay when hovering off the menu.
   • Moved the Device Editor into the Tools menu.
   • Created a separate Users / Profile menu under the Admin drop down.
3. Switch Port Mapper enhancements:
   • Added new configuration menu Admin -> General -> Switch Port Mapper
   • Added ability to individually turn off ARP, Bridge and VLAN data collection.
   • Added support for collecting VLAN names and which interfaces are configured for each VLAN
   • Added ability to do a history search on either a IPv4 or IPv6 address.
4. Alerting configuration enhancements:
   • Muting fix: Previously the code was reading rules in a random order. The intention was that mute rules would come after the corresponding email rule, so that the mute rule overrides it.
   • Allow optional profiles/email addresses to be specified for mute action.
   • Allow multiple profiles/email addresses in email/mute actions.
5. Single Device Dashboard enhancements:
   • Added a table of device groups the device belongs to.
   • Added hover over tool tip on temperature strip graphs to display both Celsius and Fahrenheit.
   • Pass through selected time filter for Vitals strip graph drill down for consistency.
6. Events Dashboard enhancement:
   Many customers want to log all IF-MIB.ifOperStatus events but not report them on the dashboard. The Events Dashboard now only displays "warning" events in Events Graph.
7. Added Device -> Chassis report. The discover will populate the AKIPS database with information from the ENTITY-MIB.
   The new chassis report includes:
   • Model
   • Chassis serial number
   • Software version
   • Hardware version
   • Firmware version
   • Chassis description
8. Added initial VMware Host report:
   • CPU
   • Memory
   • Storage
   • Host
     • Product
     • Version
     • Update number
     • Patch number
     • Build number
9. Added Cisco Airespace reports:
   • CPU
   • Memory
10. Added Avaya (Nortel) states for:
    • Power Supply
    • Temperature
    • Fan
11. Added new compiled MIBs for:
    • Arbor Networks
    • IBM
    • Informant
12. Added "negate" functionality to the AKIPS regex syntax by using a "!" character at the start of the regex. For example:
    • Match everything with a "-ro" /-ro/
    • Do not match anything with a "-ro" /!-ro/
13. Added "Critical" and "Warning" checkbox options to the Event Report Controls.
14. Added validation to the "Device Name" field in the Admin -> Discover -> Add Ping Device controls.
15. Added an "Allow Password Changes" option to the Admin -> Users/Profiles -> User Settings controls.
16. Speedup when rewalking a single device (e.g. from the Device Editor). It now skips the Ping and SNMP scan steps.
17. Changed the Unreachable Devices report to display an empty table if no devices are currently unreachable.
18. Changed Cisco cefcFRUPowerOperStatus alias to include "FRU" to distinguish between CISCO-ENTITY-FRU-CONTROL-MIB.cefcFRUPowerOperStatus and CISCO-ENVMON-MIB.ciscoEnvMonSupplyState.

Version 15.26   4th September 2015

1. Upgraded the operating system to FreeBSD 10.2-p2.
   Refer to the following FreeBSD security advisory
   
   • OpenSSH multiple vulnerabilities
   • Updated PCRE to version pcre-8.37_4 due to a buffer over security advisory.
2. Added Geist internal sensor reporting:
   • Temperature
   • Humidity
   • Dew Point
3. Added functionality in the discover/rewalk to reindex Aruba APs/Radios which have been replaced due to hardware failure. Aruba index the APs/Radios in the controller via their MAC address, which obviously changes when it is replaced.
4. Added functionality in the discover/rewalk to expire old Aruba APs and Radios that no longer exist on the controller.
5. Added support for CISCO-ENHANCED-MEMPOOL-MIB. Some, but not all, Cisco Nexus boxes use this MIB for memory statistics.
6. Allow Performance Graphs in the Admin Section to be assigned to a user profile.
7. Allow Discover Summary report in the Admin Section to be assigned to a user profile.
8. Moved Altiga SSL under the Cisco reports menu.
9. Renamed Check Point UDP/ICMP "Connections" to "Sessions". The MIB is misleading because UDP/ICMP are not connection orientated protocols like TCP.
10. Added CHECKPOINT-MIB.fwNumConn back in. This object was removed in 15.25 because the MIB and SNMP response said it was a Counter, but the actual value returned is a Gauge. A workaround has been applied to the SNMP library to support Counter32BasedGauge32. This is similar to the hack the IEFT created in the HCNUM-TC MIB for CounterBasedGauge64 because there is no ASN.1 type for Gauge64.
11. Added Netflow ports 2055 and 9995 to the flow collector.
12. Applied workaround for Cisco PIX firewalls because they can only handle small SNMP requests.
13. Skip calculating discover statistics when adding a single device. This speeds up the discover.
14. Fixed a defect in the Events Dashboard where the Status Exceptions were not performing profile filtering.
15. Fixed a race condition between the Discover/Rewalk and the Tune Interface State script.
16. Performance speedups to various API commands that were affecting the Events Dashboard render time in large configurations.
17. Prevent the Enter Key in the Manual Grouping device regex from submitting the form.
18. Reverted the HPET timer change in version 15.25 because emulated ACPI-Fast in some VM environments timers appear to be worse than the original HPET issue. When the HPET timer gets stuck, it is only for 128 second, whereas the emulated ACPI-Fast timer gets stuck forever.
19. Fixed the one second watchdog signal introduced in 15.25. The interrupt signal was not being delivered because the process was blocking all interrupt signals during the usleep().

Version 15.25   19th August 2015

1. Upgraded the operating system to FreeBSD 10.2-p1
   
   • Refer to the FreeBSD 10.2 release announcement.
   • Refer to the following security advisories
     
     • Multiple integer overflows in expat (libbsdxml) XML parser
     • CVE-2015-1283
2. Removed monitoring of CHECKPOINT-MIB.fwNumConn OID because it returns invalid data. fwNumConn is defined in the MIB as a counter, and the snmp response says it is a counter, but it isn't a counter.
3. Added Checkpoint firewall report:
   • TCP Connections
   • UDP Connections
   • ICMP Connections
   • Packets Accepted
   • Packets Rejected
   • Packets Dropped
   • Packets Logged
4. Speedup to the ping scan algorithm when handling single IP addresses. Some customers define many (eg. 10000+) individual IPs instead of IP ranges. Previously the rules in the discover were processed sequentially, and single address rules were handled the same as IP ranges, which was not optimal. Single IP rules are now loaded into an array and processed after all IP range rules. This change has reduced the ping scan run time for 10000+ individual IP addresses from 1 hour to around 30 seconds.

5. Syslog and SNMP Trap Reporter speedup. Some customers are constantly sending up to 500 syslog messages per second to their AKIPS server. The syslog collector and forwarder (ie. fanout) easly handled that amount of workload. In comparison, the reporting tool in prior versions was a bit sluggish.

   The syslog and trap messages are stored in 10 megabyte lumps, which are compressed and appended to daily data files. Due to a design error, the nm-msg-reporter tool was retrieving and uncompressing significantly more data than it actually needed to. Testing has shown an approximate 4 times speedup in reporting performance.

6. Fixed several issues with the database validate which may cause the backup not to run. A database validate is now run once per day. If any issues are detected, a warning message will appear in the navbar.
7. Added ability to turn off top navbar. Some customers want to insert an AKIPS URL (eg. a table or graph) into a dashboard which is made up of iframes. The navbar can be removed by simply adding ';navbar=off' onto the end of the URL.
8. Site Scripting enhancements:
   1. Changed the drop down menu selection so individual functions can be run instead of every function in each category.
   2. Added the 'custom_' function category. These functions are only executed when the Run button is clicked.
9. Allow the Tools -> Regex Checker to be assigned to a user profile.
10. Moved Tools -> Command Console to Admin -> API -> Command Console
11. Fixed a defect in the 'mdelete device *' API command.
12. Fixed a problem when saving syslog/trap graphs where the saved graph did not match the original because the trim/mute rules were not being passed through when generating the png/pdf graphs.

13. HPET clock issues on various older platforms.

    It would appear that some platforms have a broken HPET (High Precision Event Timer). We have observed a breakage with the HPET timer in this simple bit of pseudo code in our test lab:

       while (....) {
          gettimeofday (....);
          usleep (10000);
          ....
       }
    

    The usleep(10000) is only suppose to be 10ms long, but very intermittently it gets stuck in there for 128 seconds, which is fairly fatal for a real time monitoring system.

    Several customers have reported false device outages where every device is reported down at the same time. The cause appears to be due to a very intermittent HPET failure. Apparently the HPET design is prone to intermittent race conditions. Refer to page 9 of this VMware document: Time Keeping in a Virtual Machine

    The following work arounds have been applied:

    1. If an alternate event timer is available (eg. TSC, ACPI-Fast), then HPET is disabled and the alternate is used.
    2. A one second watchdog signal is generated to interrupt any stuck usleep() calls.

Version 15.24   5th August 2015

1. Operating System: FreeBSD 10.1-p16
2. Fixed a discover regression introduced in version 15.23 where devices with an SNMPv2-MIB.sysName that contain a fully qualified domain name are reported as duplicate. The problem does not show up if a /home/akips/etc/domains.cfg configuration file has been created. This issue only affects a full discover, not a rewalk.
3. Fixed a problem in the Syslog Alerting rules to allow the equals character in a regex rule.

Version 15.23   4th August 2015

1. Upgraded the operating system to FreeBSD 10.1-p16.
   Refer to the following FreeBSD security advisories
   
   • Resource exhaustion due to sessions stuck in LAST_ACK state
   • shell injection vulnerability in patch(1)
   • Resource exhaustion in TCP reassembly
   • OpenSSH multiple vulnerabilities
2. Added HP Proliant Blade MIBs
3. Added HP blade CPU statistics
4. Added functionality to the SNMP Walk tool so it skips useless parts of the MIB tree. For example:
   • RMON (and friends)
   • Q-BRIDGE-MIB.dot1qVlanCurrentTable
   • OLD-CISCO-SYSTEM-MIB to OLD-CISCO-CHASSIS-MIB
   • CISCO-FLASH-MIB
   This speeds up the SNMP walk and significantly reduces the CPU impact to the end device.
5. Added CISCO-ENTITY-SENSOR-MIB. Deprecate CISCO-ENVMON-MIB and ENTITY-SENSOR-MIB temperature sensors when duplicate with the CISCO-ENTITY-SENSOR-MIB.
6. Updated the CISCO-PRODUCTS-MIB and CISCO-ENTITY-VENDORTYPE-OID-MIB.
7. Added validation to the System Settings "Email Domain" and "Test Email" fields.
8. Added F5 Node Status.
9. Added "Device Group" filter to the Events Dashboard.
10. Added ASN.1 encoding type to the output of the Tools -> Ping/SNMP Walk -> SNMP OIDs. The fields now printed include:
    • v4/v6 IP Address
    • MIB
    • Object
    • Index
    • Object type returned in the packet
    • Object type looked up in the MIB
    • Returned value
    • OID number (i.e. 1.3.6.1.....)
    This helps when comparing what the MIB defines versus what the device actually returns.
11. Syslog Alerting: Added forwarding specific messages to another syslog collector.
12. Added the 'warn_event' group for additional Status Exceptions flexibility.
13. Added fake sysName entry in the configuration database for Aruba APs.
14. Added disk fragmentation information to Admin -> System Information.
15. Added nm-timed-watcher. It has been observed that in some VM environments the system clock can sometimes stall or behave oddly. This program constantly checks to see if time is marching on correctly. If it detects time stalled or went backwards, it logs a message in the fatal log.
16. Added workaround for a defect in Cisco WAAS (Wide Area Application Services) which incorrectly returns a 17 character text string for IF-MIB.ifPhysAddress instead of a correctly encoded 6 byte field. The discover generates a unique fingerprint of each device by using the IF-MIB.ifPhysAddress table. Since the WAAS devices return invalid ifPhysAddress encoding, all WAAS devices were being tagged as duplicate devices and only one could be added. The defect has been reported to Cisco.
17. Changed the Password field in Admin > Backup controls to conceal the typed in password. The password is not saved as it is only used to setup the initial SSH authentication to the backup server.

18. Performance speedup to the Event and Device dashboards when processing large volumes of Syslog and SNMP Trap data.

    Some customers are constantly pushing 300+ syslog/trap packets per second to their AKIPS server. This data is stored in 10MB compressed lumps. Each time the Event or Device dashboard refreshed, it had to uncompress and filter large amounts of raw data to generate the syslog/trap graphs. For a last 30 minute report, that would be in excess of 500,000 syslog/trap messages to uncompress/process.

    A new message database has been added that stores the number of syslog/trap messages received each minute for each IP address. The Event and Device dashboards have switched to use this new database to generate the syslog/trap graphs.

19. Fixed a performance issue processing alert rules which contained weekday syntax. For example: mon to fri 09:00 to 17:00. This would cause high CPU load when processing large volumes of Syslog and SNMP Traps.
20. Fixed a defect where saving a temperature graph would create a zero length file.
21. Fixed a defect in the Admin -> SNMP Traps configuration where it could not handle community names with percent characters.
22. Fixed a defect in the dashboard graphs where you could not drill down on the left hand side of the syslog/traps/event/threshold graphs.
23. Fixed a race condition with the HTTP server when handling persistent TCP connections and the AKIPS persistent CGI architecture. This issue resulted in mobile Apple devices (iPhone, iPad) being slow to load web page content.

Version 15.22   17th July 2015

1. Operating System: FreeBSD 10.1-p12
2. Added Citrix NetScaler Service Group Status.
3. Syslog / Trap Alerting - Added syntax to match any device, even those not being monitored by AKIPS.
4. Added a default parent group of spm_exclude to exclude devices in the switch port mapper data collection. The switch port mapper collects address and bridge tables from all monitored devices. Walking very large MIB tables can have a serious CPU impact to some devices. The switch port map data collector now skips all devices which have been assigned to the spm_exclude group.
5. Updated Aruba MIBs to version 6.4.2.9.
6. Aruba unprovisioned APs
   The discover would previously add unprovisioned APs as a device, but they would appear as unreachable. These devices were never being removed when they were later provisioned.
   • The upgrade will remove all unprovisioned APs.
   • Unprovisioned APs no longer get added as a device.
   • The rewalk will count the number of unprovisioned APs and display the value in the Reports -> Aruba -> Controller

Version 15.21   16th July 2015

1. Operating System: FreeBSD 10.1-p12
2. Added Cisco CPU descriptions from the ENTITY-MIB
3. Added cancel button to the Ping/SNMP Walk tool
4. Added new time-filter syntax to allow things like
   • "yesterday; 8:00 to 17:00"
   • "today; 7:00 to 12:00"
5. The alerting configuration can now take either a profile name or a single email address. For example:
   • time "mon to fri 07:00 to 18:00" * * ping4 PING.icmpState = email TechSupport
   • time "mon to fri 07:00 to 18:00" * * ping4 PING.icmpState = email [email protected]
6. Added F5 admin and operational status enumerations
   • Virtual Server Status
   • Pool Status
   • Pool Member Status
7. Ignore useless Cisco PSU State (cefcFRUPowerOperStatus) of offEnvOther.
8. Added Ubiquiti Radio Bits Per Second to Radio Statistics table and graphs.
9. Performance speedup to the poller on large sites (e.g. 10,000 devices, 200000 interfaces). At the start of every minute, the poller saves all its time-series and status values to the underlying database. Typical performance in a VM is approximately 3 million database insertions per second. If it takes longer than one second to save all the values, the poller would not send any pings in that second. The poller has now been split into two separate processes - one that does the polling and another that does the one minute database dump.
10. Performance speedup to the AKIPS configuration build. Each time the save button in the device editor is clicked, a build command is sent to the config database. The build now only occurs once per minute and has little CPU impact to the server.
11. Fixed a problem in the switch port mapper where a Cisco formatted MAC address of xxxx.xxxx.xxxx worked for the Search, but not the History.
12. Fix to the discover for devices with interfaces that contain duplicate ifName values. The discover was not processing the interfaces in the same order each time so the results were inconsistent.

Version 15.20   10th July 2015

1. Operating System: FreeBSD 10.1-p12
2. Updated the openssl port to version 1.0.2d - Alternative chains certificate forgery (CVE-2015-1793)
3. Added Geolocation option to the Netflow reporter. Selecting this option will display a two letter country code of origin. Hovering over the country code will show the full country name.
4. Added Power supply status CISCO-ENTITY-FRU-CONTROL-MIB.cefcFRUPowerOperStatus for Cisco Nexus fabric extenders.
5. Added more Check Point firewall reporting
6. Changed the Interface Errors and Discards TopN graphs to sort by either Tx or Rx.
7. Changed the TopN selections from 10,20,100,1000,5000 to 10,25,50,100,250,500,1000,5000.
8. Changed the Status Reporter and drilldowns from the events dashboard, to display child descriptions instead of child name.index. This is required for those vendors who abuse SNMP string indexing.
9. Threshold alerting - email the value that triggered the threshold.
10. In the Tools section, the control panels now have many more options when the 'LastN' option is set for 'For'. This allows you to set a start date/time and a useful 'for' period.
11. Added a child type for Cisco IPSLA. This allows IPSLA grouping.
12. Allow calling a URL remotely by adding 'username=' and 'password=' options to the URL.
13. Added Ubiquiti Radio speed graphs
14. Added Ubiquiti Radio Local/Remote graphs.
15. Added a mail() function to the Perl Common.pm library to simplify sending emails from within Perl. Refer to the AKIPS API documentation.
16. Added support for historic Cisco CatOS CISCO-STACK-MIB.portName so it sets the interface title. CatOS does not seem to set IF-MIB.ifAlias.
17. Added missing Top N graphs for:
    • Aruba ESSID Bits Per Second
    • Aruba ESSID Packets
    • Aruba ESSID Packets Dropped
    • Aruba ESSID Packets Retried
    • Aruba ESSID Tx Packet Errors
    • Aruba ESSID Wired Bytes
    • Eaton UPS Output Load
    • Juniper Laser Current Tx
    • Juniper Laser Temperature
    • NetScaler TCP Active Connections
    • NetScaler TCP Opened Connections
    • NetScaler TCP Byte Volume
    • NetScaler TCP Packet Volume
18. Added functionality to log the upgrade output.
19. Speedup to the Unused Interfaces report.
20. Changed the Admin -> Add SNMP Device controls so if an IP address is specified but the SNMP parameters are left blank, the SNMP parameters from Discover / Rewalk settings are used.
21. Changed default limit in the Unreachable Devices report to 100.
22. Fix an issue with the snmp walk that sometimes used identical snmp Request IDs in consecutive GetBulkRequest packets. This causes issues with Cisco Nexus boxes. The situation is difficult to replicate or repeat.
23. Fixed an issue when quickly adding multiple new devices via the Add Ping Device or Add SNMP Device which would cause the poller to reorder its ping requests to cater for the new devices. A problem with the algorithm would cause a large burst of pings to occur.
24. Remove devices which have the same MAC address fingerprint. The discover fingerprints each device using its MAC address table. This fingerprint is automatically updated once an hour. In the situation where a config change is done to a device (e.g. add a new line card with new MACs) and a discovery is performed before the hourly fingerprint update, a duplicate device may be added to the AKIPS config. The hourly fingerprint update now automatically removes the newly added duplicate device.
25. Fixed a regression introduced in 15.18 where the strip graphs in the flow reporter tables did not match the drill down graphs. The strip graphs were incorrect.
26. Fixed sorting in the Status Reporter tables. When the count was identical, aliases were being sorted in reverse.
27. Fixed percent usage scale in the Disk Usage Performance Graphs. Percent scale was displayed half of what it should be due to incorrect usage of the df(1) command.
28. Fixed a problem when doing a restore to a newer version of AKIPS from data created on versions earlier than 15.20. The upgrade functions where not being called to perform any data/config upgrades.
29. Fixed the usage messages in the command line tools as they did not correctly match the actual functionality.

Version 15.19   26th June 2015

1. Operating System: FreeBSD 10.1-p12
2. Recompiled the postfix mail package so it includes SASL/TLS functionality.
3. Implemented SASL/TLS for SMTP authentication.
4. A workaround for the FreeBSD OS upgrade where the backup GPT partition table does not always get updated on some platforms, therefore it is reported as 'corrupt' at boot time.
5. Implemented resizing of virtual disks. This allows a VM to be shutdown and its virtual disk expanded. On reboot, the startup script will automatically update the partition table and file system to use the extra capacity.
6. Added GPT Status info to the server report.
7. Added rule to filter out duplicate Cisco fabric MACs.
8. Added warning messages to the Threshold Alert Settings when a rule is added that does not match any entities.
9. Fixed graph legend on Firefox and exporting to PDF/PNG.
10. Fixed a problem in the HTTP server when a HTTP client does not send all HTTP headers. The HTTP server would exit and restart.
11. Changed the way the discover handles failed IF-MIB SNMP walks of devices.
12. Changed the SNMP error handling for 'repeated oid'. On v1 devices it is treated as 'end of walk', while on v2/v3 devices it is now treated as a walk failure and considered a defect in the device's SNMP agent.

Version 15.18   19th June 2015

1. Upgraded the operating system to FreeBSD 10.1-p12.
   Refer to the following FreeBSD security advisories and errata notices
   
   • Multiple OpenSSL vulnerabilities
   • Version and security update of file(1) and libmagic(3)
   • ZFS Reliability Improvements
2. Updated third party ports pcre and freetype due to security advisories.
3. Updated Perl from 5.16 to 5.22.
4. Added Perl syntax highlighting to the Admin -> Site Scripting control. This will be extended to other HTML textareas in the future.
5. Restart ntpd when settings changed in the Admin -> System Settings.
6. Added ntpd security restrictions to /etc/ntp.conf.
7. Added a 'Added' column to the Device Summary report. This will show the date the device was initially added by the discover.
8. Added Bit/sec graph to the Netflow report graphs.
9. Additional checking to threshold rules to catch syntax errors.
10. Changed the use of 'Regex' labels to 'Filter' as some customers are shy of regex syntax complexity.
11. Updated Check Point MIBs.
12. Added Calix MIBs
13. Added Check Point IPSO (NOKIA-IPSO) MIBs.
14. Added Check Point IPSO reports:
    • CPU
    • Fan status
    • PSU status
    • Temperature status
15. Performance improvements to the way AKIPS databases are sync'ed to disk every 10 minutes.
16. Added missing threshold aliases for Ping Lost/Duplicate.
17. Ignore Foundry Fan Status of 'other'.
18. Fixed a serious issue in the SNMP library when doing an SNMP walk of a device on the same subnet as the AKIPS server and the device becomes unreachable. The SNMP command would spin at 100% CPU.
19. Fixed UPS Output Source so 'none' is not reported as a fault.
20. Fixed APC UPS Output Status where 'online' was being reported as a fault.
21. Fixed AKIPS API for aggregate commands when no entries are found.

Version 15.17   29th May 2015

1. Operating System: FreeBSD 10.1-p9
2. Added Fortigate VPN Tunnels report.
3. Added Cisco ASR QFP report:
   • CPU Load
   • Total Pkts/sec
   • Priority Pkts/sec
   • Non Priority Pkts/sec
   • Total Bit/sec
   • Priority Bit/sec
   • Non Priority Bit/sec
4. Added Ping/SNMP Walk button to the Single Device Dashboard and the Admin -> Device Editor control.
5. Added a safety check to ensure the /home file system does not fill up. The AKIPS software is stopped when it hits 95% full. This check is performed once per minute.
6. Added missing threshold definitions for many monitored MIB objects. All objects which can be defined in the threshold alerting are now displayed in the help text in Admin -> Threshold Alerts.
7. Changed the way AKIPS logs internal performance statistics about itself. Previously stats were logged to disk every second which would cause an approximate constant two percent disk usage. The stats are now written to disk once every 10 seconds.
8. When testing local scripts in the Admin -> Site Scripting control, script errors were being written to the CGI error log. These errors are now displayed in the browser when the Test button it clicked.
9. Fixed a problem renaming devices and groups to the same name but with different case. Device and group names are case insensitive, which meant they could not be renamed with a different case (e.g. the command "rename device router1 Router1" did not work.
10. Fixed various column titles in reports.
11. Fixed a problem in the AKIPS HTTP server when handling very long URLs. The HTTP server will now handle GET requests up to 128 KB.

Version 15.16   19th May 2015

1. Operating System: FreeBSD 10.1-p9
2. Added Eaton UPS reports
   • Model
   • Software Version
   • Input Source
   • Output Source
   • Output Load
   • Battery Voltage
   • Battery Current
   • Battery Capacity
   • Battery Status
   • Phase Input Voltage
   • Phase Input Current
   • Phase Input Power
   • Phase Output Voltage
   • Phase Output Current
   • Phase Output Power
   • Temperature
   • Humidity
3. Added APC UPS objects
   • Model
   • Firmware Version
   • Output Status
4. Fixed a defect in the Site Scripting where the daily schedule was being called once per second. This causes the number of forked processes to be ~200 per minute instead of less than 10. The number of forked processes can be displayed in the Admin -> Performance Graphs -> System.
5. Fixed a defect when selecting large numbers of interfaces in the Interface Graphing tool. The number of URL key/value pairs was exhausting a maximum value that was set too low. This resulted in the zoom out functionality of an aggregated graph to fail.
6. Fixed a defect in the AKIPS error logging library when logging long error messages. This would cause the http server to exit and restart.

Version 15.15   15th May 2015

   nm-discover-device {ip address or range}
   [version 2 community {community}]

   nm-discover-device {ip address or range}
   [version 3 user {snmp user}
   md5|sha {authpasswd}
   des|3des|aes128|aes192|aes256 {cryptpasswd} ]