Download   Installation & Upgrade Guide   Request Evaluation Key   License Agreement   Product Brochure  

Bare Minimum Requirements

  • Virtual Machine
  • 64-bit CPU
  • 4 GB RAM
  • 100 GB Fixed Disk Space

Refer to Virtual Machine and Hardware Deployment for information on sizing an appropriate VM for your environment.


Software Installation and Upgrade

There are two types of AKIPS CDROM ISO images:

  1. Full OS installation/upgrade ISO or USB Memstick image:
    This ISO can be used for either a full clean installation, or an upgrade of an existing installation. An upgrade of the OS on a running system only takes a few minutes to complete.
  2. AKIPS software upgrade only ISO:
    This ISO can be used to upgrade an existing installation which is already running the latest OS version.

To upgrade an existing system:

  1. Download the appropriate ISO to your PC
  2. Login to your AKIPS server as admin
  3. Go to the Admin -> System -> Update menu
  4. Choose the ISO image to upload
  5. Click Start Upgrade

Release Notes

Version 17.12   14th September 2017

  1. Reduced the memory usage of the flow collector and flow meter processes.
  2. Updated the AS numbers for BGP reports.
  3. Performance speedup for Syslog/Trap queries on a single device (e.g. Device Dashboard) for last N days.
  4. Interface Percentile Reporter
    • Added 98th percentile option to the controls.
    • Fixed report styling when the URL is copy/pasted into a new browser window, or the report is generated via Scheduled Reporting.
  5. Availability Reporter
    • Added sort by name or percent availability
    • Added ability to display only devices/interfaces that failed to reach the availability target
  6. Discover
    • Allow the discover to add SNMPv3 devices which do not support IF-MIB. The discover uses SNMPv3 engine IDs for device fingerprinting, so it's not critical if devices running SNMPv3 don't support IF-MIB (e.g. Cisco APIC devices).
    • Fixed the discover so it skips duplicate device checking using MAC tables if running SNMPv3. This fixes the discovery of Cisco virtual ASA contexts.
  7. Alerting
    • Fix an issue where alerts do not trigger due to a site script locking issue when using 'call' actions with wait rules.
    • Fix an issue where alerts do not trigger when mixing 'call' and 'email' actions with the same wait time.
    • Allow multiline regex matches in the trap alerting. Previously, a regex would only match if all the text was on the same line. Changed the regex syntax so that "." (dot) will match newlines.
    • Clear 'wait' threshold groups due to a bug in a previous release. The old status wait alerting code was unreliably clearing entities from their respective wait groups. The alerting code has been fixed, but entities are still present in these internal groups after the upgrade to 17.10. Clear the wait groups when upgrading to 17.12. This may mean that some wait alerts don't trigger immediately after the 17.12 upgrade.
    • Performance improvements to the threshold alerting syntax. Changed help text examples to recommend specifying the correct entity type instead of '*'. This can double the performance of internal 'mget' queries. Changed threshold rule validation to warn if an unnecessary attribute regex is being used, which degrades performance.
  8. API / Site Scripting
    • Added config_delete_device() and config_rename_device() API functions to provide code consistency across the product, and enable users to use these functions in Site Scripting.
    • Added optional hostname field to the custom_discover_import_csv site script.
  9. Fixed an issue where the nm-graph process would spin forever when processing a large number of data points. For example, a 12 month graph for syslog at 1 minute resolution.
  10. Added/updated compiled MIBs:
    • Haivision
    • Mirth
    • ServerTech
    • Tufin
  11. Supported MIB Objects:
    • 263 Counters
    • 287 Enumerations
    • 425 Gauges
    • 118 Integers
    • 539 Other
    • TOTAL: 1632
  12. Compiled MIBs:
    • 4412 MIBs
    • 513792 Objects
  13. ISO Image MD5 checksums
    • 15788880ab1412a005ef15bccc1e4462   Install/Upgrade ISO
    • 1fbcf2184c065498ab0d0dfb76642a98   Upgrade only ISO
    • 4e6cc47a6fd6aaa6f96c020b7073af99   Memstick Image

Version 17.11   23rd August 2017

  1. Fixed "Save Graph" not working.
    The FreeBSD ports team recently merged several graphics ports into a single port mesa-libs. This package was missing from 17.10, which broke the "Save Graph" functionality. This release requires a full OS upgrade to install the missing package.
  2. Fixed "Email Domain" setting being ignored in 17.10.
  3. Graph Reporter: fixed issue with some graphs not being listed.
  4. Alerting: added help text examples for sending alerts to multiple email addresses.
  5. Netflow Reporter: display number of results at the top of the table.

Version 17.10   17th August 2017

  1. Upgraded the operating system to FreeBSD 11.1-p1:
  2. Removed the text string "(AKIPS Network Monitor)" in the email alert sender's address to simplify processing by other systems. The sender address is now 'akips@yourdomainname'.
  3. Added MAC and IP Address columns to the interface config report. These are the MAC/IP addresses of the interfaces themselves, not of attached devices.
  4. Added "Tools->Device to IP Mapping" report with links to the device editor.
  5. Allow optional 'zone' name in the System Settings IPv6 Gateway field. (e.g. fe80::1%bce0).
  6. Availability Report:
    • Added display count in the outage graph subtitle.
    • Fixed natural sorting of device groups
  7. Unreachable Devices:
    • Allow hiding of the controls by removing 'controls=device;' from the URL.
  8. Syslog/SNMP Trap Reporters - Removed default refresh.

    Previously, the Syslog and Trap Reporters would start a 30 second refresh timer no matter what filter options were selected. This can make the reporters frustrating to use when doing queries over long periods of time and/or with a lot of syslog/trap data. To start a 60 second refresh timer on a LastN report, click the "Reload" button in the graph.

  9. Manual Grouping:
    • Changed to used natural sorting of groups
  10. Added Discover SNMP Walk Statistics Report to identify slow devices.
    • Device
    • RunTime
    • Total Walks
    • Successful Walks
    • Failed Walks
    • Total Objects
  11. Added Midspan global PoE report
    • Power Backup Type
    • Internal State
    • External State
    • Power Utilisation
    • Power Maximum Rating
  12. Added Sonus Call Stats report:
    Global Calls:
    • Current
    • Total
    • Connected
    • Refused
    • Errored
    Egress Calls:
    • Attempts
    • Accepted
    • Completed
    • Rejected
    Ingress Calls:
    • Attempts
    • Accepted
    • Completed
    • Rejected
  13. Added Sonus Power Supply report
    • Present State
    • Input State
    • Input Type
    • Input Power
    • Input Voltage
    • Input Current
    • Output Power
    • Output Voltage
    • Output Current
    • Temperature
  14. Fixed missing data while the 80 minute data processing is running. This problem has been tracked down to long running persistent CGIs that are not signaled to close/reopen the time-series database when the 80 minute data processing/compression occurs. Programs like nm-graph were pointing at the wrong compressed database files.
  15. Status Alerting:
    Fixed the following issues with Status Alerting 'wait' rules:
    • Fix wait rules which may generate an "up" alerts with no corresponding "down" alert.
    • Fix issue of alert only triggering once when 'value' filter is applied to a rule, (i.e. parent child attribute). For example, the rule will only trigger the first time a device goes down.
    • Trigger an alert if the status changes between several error conditions in a row and the wait time has elapsed for the first event, e.g. 'ok' -> 'degraded' -> 'failed' will alert on 'degraded' after N minutes. Previously, the 'failed' event would reset the wait interval. If the status was constantly changing between error states then the alert would never trigger.
    • Fix potential issue where wait rules get confused by multiple 'up' -> 'down' -> 'up' -> 'down' changes within the wait period.
    • Fix issue where "up" alert is not triggered for a 'call' action.
    • Fix issue where alerts may not be bundled correctly.
  16. Device Editor:

    Fixed missing IPv4/v6 ping poller configuration when an IPv6 address is set in the device editor. The editor now adds the ping6 child and all appropriate attributes for the ping poller to start polling it. Previously it was only possible to add IPv6 ping polling to a device via a full discover.

  17. Fixed profile validation in the 'email:' field. Specifying a profile in the 'email:' field in combination with email addresses or other profiles did not work due to a defect in the config validation.
  18. Display error message for the 'add group' command if the group already exists as another type. A customer reported an Auto Grouping issue where nothing was being assigned to a device group. The problem was the target group already existed as a super group but no error message was being displayed when attempting to add the group as a device group, so it was confusing why the command failed to work as expected.
  19. Fixed IPv6 Ping (Echo Request) packets generated by the poller so the 'identifier' and 'sequence' fields are set to 0xff. The AKIPS poller does not use those fields because they are only 16 bit fields, which are far too small. Some network devices and firewalls do not like those fields being set to '0', so they drop/block them.
  20. Fixed a defect in the poller which may cause the poller to crash and restart.
  21. Fixed an introduced regression in version 17.9 where the discover was not stripping sysName correctly if a fully qualified host.domain name was set in the devices.
  22. FreeBSD 11.1 also included an upgrade of the clang/llvm C compiler to version 4.0.0. The compiler highlighted a number of runtime programming errors which have been fixed (e.g. buffer overruns).
  23. Added/updated compiled MIBs:
    • Sonus UX MIBs
  24. Supported MIB Objects:
    • 263 Counters
    • 287 Enumerations
    • 425 Gauges
    • 118 Integers
    • 535 Other
    • TOTAL: 1628
  25. Compiled MIBs:
    • 4407 MIBs
    • 512592 Objects

Version 17.9   26th July 2017

  1. Backed out changes to the nm-graph program as it caused a database lock up, making the GUI unresponsive. This means the fix for item 1 in 17.8 needs to be re-assessed.

Version 17.8   26th July 2017

  1. Critical bug fix to the all statistics reports which affects every installation. Multiple customers reported a defect where the strip graphs in all reports are missing data while the 80 minute database processing is running. The data is still there in the time-series database, but wasn't being graphed. The problem was tracked down to a defect in graphing program.
  2. Critical bug fix to the auto/manual grouping. Due to a lack of locking around the grouping code, two instances of the auto grouping could occur at the same time, causing grouping rules to fail. If this occurs, this could incorrectly delete manual grouping rules.
  3. Added 'Delete Broken Rules' button to the manual grouping controls.
  4. Fixed a regression from 17.7 in the Site Scripting controls where site scripts could not be saved.

Version 17.7   25th July 2017

  1. Critical bug fix to the nm-ping-scan program. The ping scan is used in both the discover and optionally in the switch port mapper data collector. A problem was found where nm-ping-scan would crash due to insufficient memory if 148 or more ping rules were defined. The discover would then fail and no devices would be added.
  2. Added support in the discover for vendor devices which do not support the SNMPv2-MIB.sysName MIB object. If no sysName is found, then the following process occurs to determine a device name:
    1. IPv4 reverse DNS lookup
    2. IPv6 reverse DNS lookup
    3. Use the IPv4 address
    4. Use the IPv6 address
  3. Added Strip Domains On/Off control. The discover normally strips off the domain name (i.e. everything after the first '.') before adding the device to the configuration. In some sites where they monitor multiple sub domains, this can lead to duplicate sysNames. Turning the Strip Domain option off means all new devices will be added to the configuration with their fully qualified {host name}.{domain name}.
  4. Changed the auto grouping so it does not suppress the 'add group' commands.
  5. Added/updated compiled MIBs:
    • ForcePoint
  6. Supported MIB Objects:
    • 251 Counters
    • 281 Enumerations
    • 445 Gauges
    • 117 Integers
    • 500 Other
    • TOTAL: 1594
  7. Compiled MIBs:
    • 4407 MIBs
    • 512592 Objects

Version 17.6   13th July 2017

  1. Added Cisco 3G Cell/GSM report
    • Connection Status
    • Modem Status
    • Network Name
    • RSSI
    • ECIO
    • RSRP
    • RSRQ
    • SNR
    • SINR
  2. Added support FORTIWEB (FORTINET) appliance:
    • CPU
    • Memory
    • Disk Usage
  3. Added McAfee Web Gateway report:
    • Legitimate
    • Blocked
    • Anti-Malware
    • Media Filter
    • URL Filter
    • HTTP Requests
    • HTTPS Requests
  4. Added McAfee Web Gateway Version report:
    • Product
    • Anti-Malware
    • Engine
    • DAT
    • TrustedSource
  5. Added SafeNet Storage report
  6. Added SafeNet Total Requests report
    • Current
    • Successful
    • Failed
  7. Added SafeNet Total Connections report
    • Current
    • Open
    • Total
  8. Added SafeNet SSL Connections report
    • Current
    • Open
    • Total
  9. Added SafeNet SSL Handshakes report
    • Current
    • Total
    • Failed Current
    • Failed Total
  10. Added SafeNet SSL Resumes report
    • Current
    • Total
  11. Added SafeNet Authenticate Requests report
    • Current
    • Successful
    • Failed
  12. Added SafeNet Cryptographic Requests report
    • Current
    • Successful
    • Failed
  13. Implemented "call" action for status alerting wait rules.
  14. Fixed SNMP library and GUI controls for SNMPv3 auth/priv configuration. The LUK (localised user key) database would be corrupted if a SNMPv3 configuration of "priv" but no "auth" was used. "auth" must be defined if "priv" is defined.
  15. Fixed Aruba ClearPass Latency units
  16. Fixed incorrect status event reporting of interface duplex.
  17. Fix truncated output when printing or exporting to PDF due to result div being constrained by overflow setting emulating a normal browser window instead of flowing over multiple pages.
  18. Added/updated compiled MIBs:
    • AMX SVSI MIB
    • FORTINET-FORTIWEB-MIB
  19. Supported MIB Objects:
    • 251 Counters
    • 281 Enumerations
    • 445 Gauges
    • 117 Integers
    • 500 Other
    • TOTAL: 1594
  20. Compiled MIBs:
    • 4403 MIBs
    • 512412 Objects

Version 17.5   15th June 2017

  1. Interface Dashboard:
    • Fix issue where the result disappears if the browser window is too narrow.
  2. Status Reporter:
    • Added device and description to the "History" drill down report title.
  3. Backup:
    • Display server disk space for "List Local Backups".
    • Check for sufficient free disk space on backup server before starting the backup.
  4. Added Aruba wired OperState and ifSpeed.
  5. Unused Interfaces:
    • Added 270 days and 12 months to drop down list.
  6. Switch Port Mapper:
    • Fix "unknown vendor" always displayed in Address Locator history
    • Fix for Junos
    • Display ARP Table VLANs one per line
  7. Added Geist Climate Monitor
    • Temperature
    • Humidity
    • Dew Point
  8. Added Gemalto Safenet reports back in
  9. Added battery remaining column to the Eaton UPS Battery report
  10. Added UPS battery capacity graph for generic UPS-MIB, APC and Eaton.
  11. Fixed incorrectly hiding of columns with no values.
  12. Fix segmentation fault for the message reporter due to insufficient locking when the ip2name binary file was being updated.
  13. Dropped HTTPS support for IE10 and earlier to improve security.
  14. Added/updated compiled MIBs:
    • 3Com
    • Aruba
    • Brother
    • Cisco
    • Geist
    • HP
    • MRV
    • McAfee
  15. Supported MIB Objects:
    • 234 Counters
    • 279 Enumerations
    • 428 Gauges
    • 115 Integers
    • 492 Other
    • 1548 Total
  16. Compiled MIBs:
    • 4392 MIBs
    • 510841 Objects

Version 17.4   4th May 2017

  1. Upgrade the operating system from FreeBSD 10.3-p17 to 11.0-p9.
  2. Fixed numerous "cross site scripting" security issues.
  3. Added UCD Disk performance report
    • Bytes Transferred
    • I/O Transactions
  4. Added Fireeye reports
    • Appliance Status
    • Chassis
    • Temperature value and status
  5. Added Ciena WaveServer Laser Temperature support.
  6. Added sysUptime column to the Device Dashboard.
  7. Added a 'max' column to the Cisco Voice Calls report.
  8. Removed Gemalto Safenet reports which were added in version 17.3 due to a defect in the Safenet devices. sysName is apparently hard coded to be 'localhost', which causes the discover to report them all as duplicate devices. The defect has been reported to Gemalto.
  9. Added missing 'Device' column in the Switch Port Mapper ARP table. The switch's ARP table can display entries for devices on other switches on the same subnet.
  10. Added zoom option to the PDF button in the navbar.
  11. Added expert only IPFW Rules configuration tool - Admin -> General -> IPFW Rules.
  12. Updated MAC vendor codes for Switch Port Mapper.
  13. Updated AS numbers for BGP reporting.
  14. Print dots ...... when SNMP Walks are being queued in very large sites because FireFox can timeout and close the connection, therefore stopping the discover.
  15. Fix to the discover ping scan for servers that are multi homed. The ping scan was not always reading responses from each network interface, therefore the discover would fail to add devices.
  16. Fix to reduced the Interface Dashboard memory usage due to large switch port mapper data files.
  17. Fixed a race condition in the backup/restore setttings when restoring locally. The "Save Settings" incorrectly displayed "ok: Saved Authentication" when it actually failed.
  18. Fixed a backup database inconsistency when using the manual "Run Backup" button.
  19. Fixed the nm-socket CPU usage. When nm-socket was idle (i.e. no connections) it was chewing up approx 0.5% CPU unncessarily.
  20. Fixed an issue in the chassis report where old cards/slots were not being expired from the configuration. For example, a card moved from one slot to another would show up twice (old and new slots).
  21. Regression introduced in v16.17 with the introduction of backup snapshots. If a backup runs while a restore from the "latest" snapshot occurs, then the restore will fail.
  22. Restricted access to various reports if there is no valid licence key (e.g. unlicensed or free versions).
  23. Added/updated compiled MIBs:
    • Agent++
    • Ciena
    • Isilon
    • Polycom
  24. Supported MIB Object stats:
    • 234 Counters
    • 277 Enumerations
    • 392 Gauges
    • 115 Integer
    • 522 Other
    • 1540 Total
  25. Compiled MIBs:
    • 3883 MIBs
    • 468769 Objects

Version 17.3   22nd March 2017

  1. Upgraded the installation operating system to FreeBSD 10.3-p17.
    Refer to the following FreeBSD security advisory:
  2. Added Brocade per slot CPU statistics
  3. Added Brocade Module report:
    • Description
    • Serial Number
    • Number of Ports
    • Status
    • Redundant Status
  4. Added Cisco ISIS Neighbour report:
    • Neighbour ID
    • Status
    • 3Way Status
    • Sys ID
    • Adjacent Type
    • Usage
    • IPv4/v6 Address
  5. Added APC Netbotz Fluid report:
    • Sensor
    • Status
    • Severity
    • Comms Status
  6. Added Eaton PDU reports:
    PDU
    • Product Description
    • Part Number
    • Serial Number
    • Firmware Version
    • Unit Name
    • Status
    • Inputs
    • Outputs
    Inputs
    • Voltage
    • Current
    • Power (Watts & VA)
    • Phase Type
    Outlets
    • Name
    • Type
    • Current
    • Power (Watts & VA)
  7. Added Gigamon Chassis report:
    • Model
    • Description
    • Software version
    • Chassis
    • Blades
    • Firmware version
    • Hardware version
  8. Added Ingate Config report
    • Serial Number
    • Software Version
  9. Added Ingate CPU report
  10. Added Ingate SIP Sessions report:
    • Current Sessions
    • Util% Sessions
    • Limit Sessions (Maximum)
  11. Added SafeNet reports:
    • Config
    • CPU
    • Memory
    • Storage
    • Requests
  12. Changed the PDF button in navbar to prompt for PDF title and filename.
  13. Fixed an issue in the web APIs where child processes where not being reaped, therefore leaving a large number of zombie processes until the http server killed idle web API CGIs.
  14. nm-http (http/https client)
    • Added TLS v1 and v1.1 support for older devices.
    • Implemented HTTP Basic Auth
  15. API changes:
    • Changed http_send() http_result() parameter from 'insecure' to 'secure'.
  16. Backup Settings: Fixed per-backup disk usage info. Use ZFS command to get actual disk used by each backup. Previous command was only reporting the disk used by each current backup, not including ZFS snapshots.
  17. Discover: Fixed writing out the discover deleted devices file. If a single device is attempted to be discovered, but it fails the duplicate mac address check, the discover exits without logging why the device failed to get added.
  18. Graph Reporter: Added "Aggregate" button similar to the Interface Grapher.
  19. Interface Dashboard: Rearranged the dashboard so it renders correctly when created as a PDF.
  20. Restore: Fixed a regression introduced in version 17.1. Don't remove local ZFS snapshots before doing a restore because the user may be using the local snapshot as the restore data.
  21. Security: Disable sshd TCP forwarding.
  22. Site Scripting: Added site script log file. Log STDERR and STDOUT from site scripts to /home/akips/log/script for debugging purposes. The log file can be viewed using the System Log Viewer.
  23. Syslog Alerting: Change "syslog" action to "forward". Renamed the program 'nm-syslog' to 'nm-syslog-fwd'.
  24. Threshold Alerting: Fix % value in alerts for non-ifutil objects.
  25. Unused Interfaces: Limit the number of printed VLANs to 10 otherwise the report is too wide.
  26. Added/updated compiled MIBs:
    • APC PowerNet-MIB to version 4.2.1
    • H3C
    • Ingate
    • Palo Alto to PANOS8
    • Safenet INGRIAN-MIB
    • Synology
    • Tripplite
    • VMware
  27. Supported MIB Object stats:
    • 230 Counters
    • 269 Enumerations
    • 392 Gauges
    • 111 Integer
    • 513 Other
    • 1515 Total
  28. Compiled MIBs:
    • 3839 MIBs
    • 465305 Objects

Version 17.2   3rd February 2017

  1. Unreachable Device Report: fixed regression in v17.1 where selecting a group would not display any results.
    This also affected the drilldown from the 'Impact Assessment' table on the Events Dashboard.
  2. Added nm-http 'insecure' option for connecting to hosts with self-signed SSL certificates.
  3. QNAP NAS HDD report: fixed default sort.

Version 17.1   2nd February 2017

  1. Upgraded the OpenSSL port to version openssl-1.0.2k. All AKIPS compiled software links against the OpenSSL port library rather than the default version in the base of FreeBSD.
  2. Added nm-http, a http/https client (i.e. similar to curl, but simpler and not full of weekly security notices). nm-http can be used to perform GET/POST requests to other systems/devices. For example, this can be used in the Site Scripting for sending alerts to other systems. Contact support@akips.com for assistance on using the nm-http in an alerting site script. Examples will be added to our support page once we have a few practical site script implementations.
  3. Added new Web API to access Site Scripts remotely. Refer to the help text in the Web API Settings menu.
  4. Updated the help text for each section in the Web API Settings menu.
  5. Enhanced the Web Config and Events API so the nm-db error messages are passed through to the remote agent.
  6. Added new Admin -> Miscellaneous -> SSL Settings menu for installing a SSL certificate.
  7. Added Cisco IPSLA columns for voice tests:
    • MOS Score
    • CODEC Type
  8. Added QNAP NAS HDD Report. Note: More research is required to do other QNAP reports.
  9. Added splitter bar to various controls:
    • Device Reporter
    • Event Reporter
    • Graph Reporter
    • Status Reporter
    • Syslog/Trap Reporter
    • Ping/SNMP Walk Tool
    • Switch Port Mapper Reporter
    • Unused Interfaces Reporter
  10. Profile Settings: Added 'All Groups' and 'All Reports' controls.
  11. Profile Settings: Added time zone support to user profiles. Assign a time zone to a profile in Profile Settings to display graphs and reports in that time zone.
    Note: time zone functionality has not been added to the alerting yet. It will be completed in a later release.
  12. Speed up to all reports with strip graphs if a long time period (e.g. 3 months) was selected. The resolution of the strip graph was too fine, therefore producing very large SVG output (e.g. 10Mbytes per strip graph instead of ~10Kbytes). This had a significant effect to browser rendering performance.
  13. Syslog/Trap Reporter: Fixed saving of mute/trim state per user.
  14. Fix an internal overflow when compiling extremely large IPv6 address ranges for the ping scan.
  15. Fix an issue where Status Alerting wait alerts don't get sent. For example, if a device goes down for a long time, and Auto Grouping gets run while the device is still down, then the 'up' alert was not being sent.
  16. Changed various CGIs to use a POST request instead of a GET. This is required because some customers still use old OS/Browsers that have a small GET buffer size (e.g. 2k to 4k) which truncates the HTTP GET request data.
  17. Restore: Remove any local ZFS snapshots before starting a restore.
  18. Syslog Alerting: Fix if multiple rules contain "syslog" (forwarding) actions then the facility/priority weren't being passed to the nm-syslog forwarding program, screwing up the messages.
  19. Interface Flapping Report: Fixed first blank entry not appearing in the device dropdown list
  20. Interface Flapping Report: Added 30 second refresh timer.
  21. Unreachable Device Report: Display reachable state. Previously, if ping or SNMP state was "up", this report would instead display "n/a" in the state column. Fixed to display "up" and the corresponding IP address instead of "n/a".
  22. Unreachable Devices Report: Fix refresh timer when sorting on a different column.
  23. Status Reporter: Pass through refresh timer parameters so reports can be set to refresh.
  24. Site Scripting: Fix an error in custom_export_device where sysUpTime was not being printed.
  25. Status Reporter: Fix APC Sensor Probe Status "disconnected" not appearing.
  26. Auto Grouping: Fix to clear all devices from spm_exclude group before running the auto grouping rules. Previously, devices assigned to spm_exclude group never got cleared from the group.
  27. Updated Perl to version 5.24.
  28. Added/updated compiled MIBs:
    • Alcatel
    • Eaton
    • Gigamon
    • Juniper
  29. Supported MIB Object stats:
    • 228 Counters
    • 255 Enumerations
    • 376 Gauges
    • 106 Integer
    • 482 Other
    • 1447 Total
  30. Compiled MIBs:
    • 3803 MIBs
    • 460069 Objects

Version 16.22   23rd December 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p15.
    Refer to the following FreeBSD security advisory:

Version 16.21   22nd December 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p14.
  2. Added Web (http/https) API for access to the following programs and data files:
    1. nm-db (configuration and events)
    2. nm-msg-reporter (i.e. syslog and traps)
    3. nm-flow-reporter (netflow tables)
    4. nm-flow-timeseries (netflow time-series data)
    5. Switch Port Mapper data files
    6. Unused Interfaces data files
    Notes:
    • Web API services requires a valid licence key.
    • There is a new Admin->API->Web API Settings menu to turn on/off each of the Web API services.
    • Access to the Web APIs requires two new user accounts with passwords to be created: api-rw and api-ro. The api-rw user is required for access to the nm-db program (Configuration and Events) Web API. Refer the API Programming Guide.
    • Refer to the help text and examples in the Web API Settings menu for URL specifications.
  3. Added Admin->API->TCP Socket Settings menu for configuring the start up parameters for the nm-socket program. nm-socket can be configured to connect directly to the following:
    • nm-db
    • nm-msg-reporter
    Notes:
    • The TCP socket settings and nm-socket requires a valid licence.
    • There is NO authentication method in nm-socket, so it should only ever be used in a closed secure environment.
  4. Added maintenance mode for devices so all events and alerts are suppressed. To put a device in maintenance mode, add a device group called maintenance_mode to the auto grouping rules and place each of the devices into that device group. This can be achieved by using either:
    • Auto grouping
    • Manual grouping
    • Web API
    • TCP Socket API
  5. Added VLAN data to the switch port mapper reports
    • VLAN column to the ARP table
    • VLAN column to the Address Location table
    • New Interface to VLAN table
    A list of VLANs for each device and further switch port mapper reporting enhancements will be added in early 2017 releases.
  6. Discover Perl Module changes (Discover.pm)
    • Changed the calling parameters of discover_scan() to make site scripting easier. It now takes an array of ping rules.
    • Changed discover_device_rewalk() to make sysObjectID and sysDescr parameters optional so it is easier to script. If not specified, the System table will be walked.
    • Added comments to all exported functions.
  7. Added VLAN column to the Unused Interfaces report.
  8. The discover now rejects sysNames that match reserved ADB keywords and user accounts.
  9. Updated AS Numbers for BGP reporting.
  10. Updated vendor codes used in the Switch Port Mapper.
  11. Added initial Huawei NQA summary report. More Huawei reports will be added in 2017 builds.
  12. Added Dell iDRAC6 objects to Dell iDRAC System Status report. However, iDRAC6 devices do not support IF-MIB and will not get added by the Discover. The iDRAC6 Site Script is required to add these devices, available from our Site Scripts page.
  13. Added vlan2sp and sp2vlan files to the drop down list in the system log viewer.
  14. Added location field to Juniper Virtual Chassis report.
  15. Added Juniper VirtualChassis Port report.
  16. Display an error if Start/End dates not selected in the Interface Percentile Reporter.
  17. Only send gzipped output if the http client requests it. Previously all HTTP output was gzipped as all browsers support it. This may not be the case when using Curl for Web API access if the --compressed option has not been specified.
  18. Reduce the volume of logging that occurs in the discover/rewalk log, in particular all the manual grouping commands to assign reports to profiles.
    • Don't print Manual Grouping output in the discover/rewalk
    • Don't print Auto Grouping "add" commands in the discover/rewalk
    • The full output still gets displayed in the Auto Grouping screen
  19. Fix interfaces being added to the wrong ifType group. For example, mplsTunnel was incorrectly being added to iftype_mpls group because the code was doing a regex /mpls/ instead of an exact match.
  20. Fix for RLE Technologies temp/humidity. Customers need to set text strings in their configuration for "temperature" and "humidity", and units of "Degrees C", for the discover to be able to handle them. There are no enumerated objects in the MIB to tell what the sensor is.
  21. Fix to SNMP library when no Auth/Priv mode is configured, but a password was. In the Device Editor, it is possible to set SNMPv3 Auth or Priv to "none" but leave the password field filled out. This was causing the poller to crash.
  22. Fixed an academic cross site scripting security issue reported by automated security scanners which incorrectly fill in the HTTP HOST field with the URL and the AKIPS http server was not sanitising the HOST field. It is entirely academic because the browser and/or OS would already need to be compromised.
  23. Various fixes for IE11 broken Javascript issues. IE11 is not recommended for sites with a large number of devices and/or interfaces because its Javascript performance for populating large select lists is extremely poor. Current Firefox versions appears to have the fastest Javascript engine.
  24. Added/updated compiled MIBs:
    • Cisco
    • Gigamon
  25. Supported MIB Object stats:
    • 228 Counters
    • 252 Enumerations
    • 374 Gauges
    • 105 Integer
    • 479 Other
    • 1438 Total
  26. Compiled MIBs:
    • 3651 MIBs
    • 436003 Objects

Version 16.20   28th November 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p12
    Refer to the following FreeBSD security advisories:
  2. Added APC PDU Load report
    • Utilisation
    • Amps
    • Max Rating
    • Status
  3. Added APC NetBotz Humidity and Temperature TopN Graphs.
  4. Added current utilisation and max rating to the APC PDU Phases report.
  5. Added AudioCodes Config report
    • Model
    • Serial number
    • Software version
  6. Added Liebert agent report
    • Model
    • Serial number
    • Agent software version
  7. Added generic WiFi Interface Config report for vendors that support IEEE802dot11-MIB (e.g. Ubiquiti).
    • Station ID
    • Channel
    • Product Name
    • Product Version
  8. Added Cisco FEX (Fabric Extender) module status report
    • Device
    • Module
    • Status
  9. Added Cisco Cable Modem report
    • Total modems
    • Offline modems
    • Title
  10. Add Huawei reports
    • CPU
    • Memory
  11. Added Ingrasys Temperature report
  12. Added RLE Technologies environment reports
    • Humidity
    • Temperature
  13. Added initial 95th Percentile Interface Reporter.
    • Transmit 95th percentile
    • Receive 95th percentile
    • Sum (Transmit, Receive)
    • Max (Transmit, Receive)

    The algorithm calculates transmit and receive 95th percentile of five minute averages. Different telcos reportedly bill on either Sum or Max, so both columns are calculated and displayed in the report.

    Added a new From/To datepicker because a Telco billing period typically starts on a given day of the month.

    You can not sort on Sum or Max columns because the backend database does not support that functionality.

    NOTE: 95th percentile is mainly used in the USA for billing purposes by telcos and ISPs. It is just a '95th median' value and has no useful purpose for any type of capacity analysis. Links with vastly different traffic profiles can end up having the same 95th percentile.

  14. Speedup to the device filtering in control panels where the server has 10000+ devices in its configuration. This was purely a browser javascript performance issue when clearing the current long select list.
  15. Added splitter bar to the Interface Dashboards. This enables the control panel to be resized so that long device names or interface descriptions can be viewed.
  16. Added interval keyword to API time-series syntax. Changed the topN/calc/series commands so that the aggregate interval parameter has an explicit 'interval' keyword. This is to allow the interface 95th percentile reporter to run commands with both an interval (e.g. 5 minute average) and calculate a median. For example:

    calc interval avg 300 median 95 time "last30d" ...

  17. Added last 2 hour system performance graphs to server report to aid in tech support analysis.
  18. Added "Delete Local Backups" button to the Admin->System->Backup control panel. This button appears if there is backup data located on the current server and is useful to delete backup data which is no longer required.
  19. Backup performance increases for high latency links.
    • Increased the backup sftp socket buffer size to 128k. Across high latency links, this gave a modest speedup (approx 10%). On a LAN this makes no difference.
    • Increased TCP sendbuf and recvbuf increments to improve backup performance. Across high latency links, increasing the sysctl variables gave between 25% and 50% speedup. Setting recvbuf_inc to 1MB gave an even better performance improvement over 512k, but set it to 512k for now in case there are unintended consequences.
  20. Added backup graphs to the Admin -> Performance graphs.
  21. Added warnings if backup disk is >75% full, don't backup if >90% full.
  22. Fixed the SNMP Walk Tool from consuming too much browser memory. After 100,000 lines, don't send walk output to the browser behind a hidden tag because it still consumes heaps of memory in the browser, eventually causing it to hang.
  23. Fixed Ingrasys TopN Humidity Graphs menu item which was incorrectly displaying temperature graphs.
  24. Fixed aggregate command when time filter includes next 30 day data block (i.e. time-series database blocks in the future. When using the Interface Graph Reporter to aggregate Bits Per Second graphs, if the time filter includes the next 30 day block (e.g. displaying a graph that includes the end of the current month, and the time series database hasn't rolled over to a new 30 day block yet), then the Y scale for the graph is incorrectly calculated.
  25. Prevent 'wait' rules applying to uptime objects in the status alerting. A customer tried applying a wait rule to sysUpTime, and it generated two alerts:
    • At the time of the uptime reset, contained correct uptime value in alert.
    • Five minutes later, the alert reported the device was previously up since epoch time (1st Jan 1970).

    The 'wait' logic was intended for enumerations with good/bad states. If an enumeration flips good -> bad -> good within the wait time window then no alert is generated. An uptime only has a 'reset' event, so the same logic cannot be applied. So it doesn't make sense to apply 'wait' rules to uptime objects.

  26. Added/updated compiled MIBs:
    • RLE Technologies RLE-FALCON-EM-MIB
    • Ruckus
    • NUTANIX-MIB
  27. Supported MIB Object stats:
    • 228 Counters
    • 247 Enumerations
    • 374 Gauges
    • 105 Integer
    • 471 Other
    • 1425 Total
  28. Compiled MIBs:
    • 3563 MIBs
    • 426909 Objects

Version 16.19   27th October 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p11
    Refer to the following FreeBSD errata advisory:
  2. Added Ubiquiti AirMax Radio Config report
    • SSID
    • MAC
    • Security
    • WDS state
    • Repeater state
    • Channel width
  3. Added APC ATS Config report
    • Model
    • Serial number
    • Firmware
    • Output status
    • Selected source
    • Redundancy status
  4. Palo Alto Config report
    • Serial number
    • Software version
    • Hardware version
    • Application definition version
    • Antivirus version
    • Threat definition version
  5. Added Cisco VSS Chassis report
    • Chassis ID
    • Role status
    • Uptime
  6. Added Brocade/Foundry snChasPwrSupply2Table report.
  7. Added "splitter bar" to the Tools->Interface Reporter/Grapher. This allows the control panel to be resized so that long device names or interface descriptions can be viewed.
  8. Added interface name to switch port mapper ARP table.
  9. Enhanced the switch port mapper so it handles collecting MAC address information from Cisco CatOS switches. The data is collected by using SNMPv2 Community Name addressing or SNMPv3 Contexts, but CatOS does not support the ENTITY-MIB.entLogicalCommunity and ENTITY-MIB.entLogicalContextName MIB objects. A workaround has been applied by faking up these MIB objects.
  10. Limit the browser output in the SNMP Walk tool to 100000 lines.
  11. Added the ability to send syslog messages instead of emails in the alerting. Requires a simple Site Script.
  12. Updated help text and examples in the alerting configuration menus.
  13. Fixed walking of APC devices during a discover/rewalk.
  14. Fixed a defect in the poller when a device was unreachable. Under certain circumstances, time-series values were being incorrectly inserted when a device was unreachable and not responding to requests.
  15. Skip broken hrSystemUptime for Windows servers. TimeTicks are meant to represent 10ms increments, but Windows servers increment HOST-RESOURCES-MIB.hrSystemUptime at 10x the rate (i.e. 1ms increments). This makes polling hrSystemUptime for Windows servers completely useless, as we attempt to generate events and alerts with every polling cycle.
  16. Added DISMAN-EVENT-MIB is required to decode some traps, but commented out sysUpTimeInstance because it is trying to define an object at SNMPv2-MIB.sysUpTime.0, which is silly and pointless.
  17. Added/updated compiled MIBs:
    • Palo Alto PAN-TRAPS-MIB
    • Cisco Product MIBs
    • DPS Telecom MIBs
  18. Supported MIB Object stats:
    • 228 Counters
    • 245 Enumerations
    • 368 Gauges
    • 99 Integer
    • 452 Other
    • 1392 Total
  19. Compiled MIBs:
    • 3555 MIBs
    • 425438 Objects

Version 16.18   6th October 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p9
    Refer to the following FreeBSD security advisory:
  2. Updated various third party packages due to security issues.
  3. Added "Tune Interface Titles": rewalk IF-MIB.ifAlias on all devices to update interface titles every 30 minutes. This is enabled by default and can be turned off in Miscellaneous Settings.
  4. Changed the Unreachable Devices report to allow multiple devices to be deleted.
  5. Fixed a defect in the flow collector where a corrupt packet could cause nm-flow-collector to spin at 100% CPU.
  6. Removed devfs and procfs file systems from Server Storage report. These file systems always report 100% full.
  7. Added generic Device Storage report. This is a combined report for all server and vendor specific disk and file system utilisation reports.
  8. Added disk utilisation stats to the Device Dashboard report.
  9. Fixed a race condition in the message database locking.
  10. Added "unknown" protocols to the protocol selector in the Netflow Reporter (e.g. "tcp unknown").
  11. Added HP CPU/Memory/Temperature for devices using HP-STACK-MIB.
  12. Added HP Fan Status report for devices using HP-FAN-MIB.
  13. Added HP Power Supply report:
    • Status
    • Power Utilisation
    • Power (Watts)
    • Power Rating
    • Temperature
  14. Fixed missing Device Temperature TopN Graphs report.
  15. Added "Current Status" column to the Interface Flapping report.
  16. Added "Replaced Date" column to the Eaton UPS Battery report.
  17. Added help text for alert scripting parameters to Site Scripting. This details the various parameters passed through to Site Scripting functions via the Alerting call syntax.
  18. Added initial Device NAT report for devices using NAT-MIB.
  19. Added initial Cisco NAT Entries report. According to Cisco ASA Release Notes, this value corresponds with the "show xlate count" IOS command.
  20. Added initial Cisco NAT Sessions report.
  21. Fixed swap usage check not shutting down the software into safe mode when the server consumes 50% of swap.
  22. Sanitise interface titles set by Cisco CatOS CISCO-STACK-MIB.portName in the discover because some devices return odd characters.
  23. Added "Max" Client Sessions column to the Juniper Trapeze AP report.
  24. Added/updated compiled MIBs:
    • F5
    • HP
  25. Supported MIB Object stats:
    • 228 Counters
    • 367 Gauges
    • 242 Enumerations
    • 95 Integer
    • 443 Other
    • 1375 Total
  26. Compiled MIBs:
    • 3546 MIBs
    • 420534 Objects

Version 16.17   16th September 2016

  1. Operating System: FreeBSD 10.3-p7
  2. Fixed a database deadlock race condition between the syslog reporter and the 10 minute database syncer. This would cause the GUI to become unreachable.
  3. Fixed a database locking issue when a large volume of syslog or trap data was requested by a user. The ping/snmp poller would pause waiting for a database lock until the syslog report completed and would cause a short gap in the time-series graphs.
  4. Added scp/sftp compression option to the backup menu. Default value is off. In version 16.16, the backup switched to using scp/sftp compression by default. This sped up the backups for sites where the backup server is remote, but slowed down backups when the backup server was in the same location. Recommend setting this to 'on' if the backup server is remote.
  5. Changed to the order of how the software is stopped (e.g. during upgrades). The web server is now stopped first so refreshing CGIs (e.g. dashboards) do not prolong the software shutdown.
  6. Fixed an issue in the HTTP server where users could not access the GUI due to an internal CGI table being full. This was a race condition that is only triggered when users access the AKIPS GUI via a F5 load balancer.
  7. Backup enhancements:

    The backup mechanism now keeps multiple historical copies of the data. This is achieved by applying a ZFS snapshot to the backup server at specific times or days. These times include:

    • After every 80 minute data processing and backup completes
    • Start of current day
    • Start of yesterday
    • Start of the last 2 Wednesdays
    Disk usage on the backup server will increase because it is storing multiple copies of the data. But, the ZFS snapshot feature means only the files which have changed will consume any extra disk space.

    NOTE: You must update your backup server to at least version 16.17 for the new backup mechanism to work. The upgrade needs to re-arrange the backed up data.

  8. Set the default zero scale for temperature graphs:
    • Celsius - 15 degrees
    • Fahrenheit - 60 degrees
    If the actual data values drop below the zero scale, then the graphs are automatically rescaled accordingly.
  9. Added ADVA laser reports:
    • Module
    • Class
    • Laser Tx Power
    • Laser Rx Power
  10. Added ADVA temperature report:
    • Module
    • Class
    • Unit
    • Temperature
  11. Added APC NetBotz reports:
    • Temperature
    • Temperature status
    • Humidity
    • Humidity Status
  12. Added Liebert PDU report:
    • Model
    • Serial number
    • Firmware version
    • Wiring layout
    • Power
      • Real power
      • Apparent power
      • Power factor
    • Neutral current
  13. Added Liebert PDU Input Phase report:
    • Phase number
    • Line to Neutral
      • Volts
      • Amps
      • Real power
      • Apparent power
      • Power factor
    • Line to Line
      • Volts
      • Real power
      • Apparent power
      • Power factor
  14. Supported MIB Object stats:
    • 228 Counters
    • 342 Gauges
    • 234 Enumerations
    • 91 Integer
    • 420 Other
    • 1347 Total
  15. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.16   7th September 2016

  1. Operating System: FreeBSD 10.3-p7
  2. Turned on scp/sftp compression in the backup script. This speeds up the transfer of various live database files which are not already compressed and therefore reduces the backup runtime when sending to a remote site.
  3. Fixed a long standing issue in the SNMP library where a walk would never time out on a transmit failure to a local device (i.e. on the same subnet as the AKIPS server). This would cause the discover to never get past the snmp scan or walk stages. This issue has always been there, but difficult to replicate. It was tracked down when the NIC in one of our snmp simulators failed.
  4. Fixed several serious race condition database deadlocks. This would cause many processes (e.g. poller, CGIs and nm-db) to spin waiting for a database lock.
  5. Fixed a defect when saving a graph. The saved graph was using the default width of 800 pixels instead of the user selected width. All user selected parameters are now passed through to the PDF/PNG generator.
  6. Added database validate functionality for the common strings and SNMPv3 LUK (localised user key) databases.
  7. The HTTP server now closes idle CGIs when its persistent CGI table is full. The persistent CGI functionality is a unique feature of the AKIPS HTTP server which speeds up the execution of CGIs (e.g. reports/graphs) because they are started once and rarely exit.
  8. Added/updated compiled MIBs:
    • Citix SDX-ROOT-MIB (fixed many syntax errors)
    • Dell IDRAC-MIB (changed various trap syntax from OCTET STRING to DisplayString)
  9. Supported MIB Object stats:
    • 228 Counters
    • 342 Gauges
    • 234 Enumerations
    • 91 Integer
    • 420 Other
    • 1315 Total
  10. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.15   26th August 2016

  1. Updated the install OS version to FreeBSD 10.3p7. Refer to the following Errata Notices for Hyper-V installations:
  2. Updated various third party packages due to security issues.
  3. Performance enhancements:
    • Increased the interval for flushing of debug logs from 10 to 30 seconds. This reduces noisy disk writing which can impact large sequential writes by other programs (e.g. database processing and compression).
    • Improvements to the 80 minute data processing algorithm to reduce the total number of disk read/write operations. This improves performance when using a SAN or NAS as the backend storage.
    • Improvements to the 10 minute database sync algorithm to alleviate performance issues with FreeBSD's system buffer cache and ZFS ARC incoherency.
    • Turned on ZFS LZ4 compression. Previously it was assumed that ZFS compression would not be of any benefit because the large database files are already highly compressed, which is correct. But... turning on ZFS LZ4 compression results in a large performance increase to the sync'ing of the live database files, which are not compressed. This results in a very large reduction of raw disk read/write operations in the 10 minute database sync.
    • Increased the ZFS ARC RAM restriction from 50% of available memory to total memory size minus 2 gigabytes. This allows ZFS to cache more data when necessary.
  4. Added CISCO-ENTITY-SENSOR-MIB Voltage and Current reports. Alerting uses the CISCO-ENTITY-SENSOR-MIB.entSensorValue MIB object. Reports can be viewed under:
    • Device -> Sensor Voltage
    • Device -> Sensor Current
  5. Added CISCO-ENTITY-SENSOR-MIB and CERENT-OPTICAL-MONITOR-MIB power dBm report. Report can be viewed under:
    • Device -> Entity Sensor Power (dBm)
  6. Added ServerTech v4 reports:
    New reports:
    • Unit
    • Input
    • Line
    • Over-Current Protector
    • Phase
    Extensions to existing reports:
    • Sensor (Temperature/Humidity)
    • CDU
    • Unit
    • Outlet
  7. Added help text for "no matching entities" warning in the Threshold Alert Settings.
  8. Added number of request retries to the SNMP walk status line.
  9. Added workaround for Windows negative disk size values.
  10. Skip over the legacy UCD-SNMP-MIB during a SNMP walk.
  11. Updated AS Number listing for BGP reports.
  12. Fix critical file descriptor leak in nm-joatd. The nm-joatd process would leak one file descriptor every hour until it exceeded 1024 open files after approximately 42 days, which would cause nm-joatd to spin in an infinite loop.
  13. Fix to rolling average calculations for last 8 hours to 30 days.
  14. Fix incorrect skipping of empty IF-MIB.ifAlias values in the discover.
  15. Fix to switch port mapper when a device is moved from one switch port to another. The switch port mapper would display the device on the old switch port until the cached data aged. The switch port mapper now displays the most recent switch port the device is detected on.
  16. Fix event graph "month" navigation in the Availability reporter:
    • Load an events graph, zoom out to the month view, then click "prev". Data does not render in the correct location.
    • Load an events graph, zoom out to the month view, then drilldown on a weekday other than Sunday. The wrong day is displayed, and the data does not render in the correct location
  17. Fix API mcalc command output for virtual Fahrenheit temperature objects.
  18. Fix scale for graphs containing negative values. e.g. y-axis would incorrectly display -15000 mV instead of -15.0 V
  19. Fix Platform resetting to Physical Hardware. On servers set for VMWare guest, System Settings was incorrectly displaying "Physical Hardware" after an upgrade or reboot.
  20. Added/updated compiled MIBs:
    • Alcatel DNS and DHCP MIBs
    • ARUBA-MIB
    • Avaya MIBs
    • EMC AM-MIB
    • LSI-MegaRAID-SAS-MIB
    • MIDSPAN-POE-MIB
  21. Supported MIB Object stats:
    • 228 Counters
    • 342 Gauges
    • 234 Enumerations
    • 91 Integer
    • 420 Other
    • 1315 Total
  22. Compiled MIBs:
    • 3525 MIBs
    • 418083 Objects

Version 16.14   27th July 2016

  1. Operating System: FreeBSD 10.3-p3
  2. Added functionality to automatically hide empty report table columns unless the column is selected for sorting. For example, if the switch port mapper is turned off, then there will be no "MACs" column displayed in the Interface Statistics report.
  3. Added Strip Domain Names to the Admin -> Discover/Rewalk controls. Device names are created from the information retrieved from the SNMPv2-MIB.sysName MIB object with its domain name stripped. For example, a sysName of core1.its.foobar.com" will be added into the config as "core1". By defining a strip domain name value of foobar.com, the device will be added to the config as "core1.its".
  4. Added Optional Features menu to the Admin -> Discover/Rewalk controls. Optional Features are MIB objects that discover does not add by default because it may have a significant impact to the size of the configuration.
  5. Added EtherLike Pause Frames
    • Transmit Pause Frames
    • Received Pause Frames
    Note: Must be activated in the Optional Features section of the Admin -> Discover/Rewalk menu.
  6. Added Cisco Stack Redundant Ring status report
    • Current state
    • Last change
  7. Added Cisco Firewall Buffers report
    • Buffer size
    • Percent used
    • Used
    • Free
    • Total
  8. Added Brocade reports for VDX platforms
    • CPU
    • Memory
    • Temperature
    • Fan
    • Power Supply
  9. Added Juniper BFD state report
  10. Added Ubiquiti EdgeSwitch reports
    • Memory
    • Temperature
    • Power Supply Status
  11. Added workaround for broken Check Point MIB and SNMP agents. The Check Point MIB has errors from top to bottom. Many objects that should be defined as counters, gauges, integers or enumerated types are incorrectly defined as a plain DisplayString. The SNMP agent often returns a different object type than what is defined in the MIB.

    The SNMP agent also appears to get itself in a knot and loops when responding to a SNMP walk in the VSX section of the MIB if the VSX configuration has changed. The only solution is to restart the SNMP agent on the box. This was observed on version R77.30.

  12. Added Check Point VSX summary report
    • System Name
    • System Type
    • Policy Name
    • Policy Type
    • CPU usage
    • Current Connections
    • Peak Connections
    • Connection Limit
    • Packet Total
    • Packets Dropped
    • Packets Accepted
    • Bytes Accepted
    • Bytes Dropped
    • Bytes Rejected
    • Logged
  13. Added Syslog / Trap Reporter summary reports. A new table will show the number of syslog or traps received for each device. Drilling down on the device name will filter just on those syslog messages.
  14. Added Inactive Memory to the system performance graphs.
  15. Fixed a read deadlock race condition in the nm-httpd process where both the nm-httpd process and a CGI are deadlocked in a pipe read.
  16. Fixed PDF output of the Unused Interfaces report where the table colours were not being rendered.
  17. Added/updated compiled MIBs:
    • xCelor
  18. Supported MIB Object stats:
    • 228 Counters
    • 335 Gauges
    • 214 Enumerations
    • 82 Integer
    • 392 Other
    • 1251 Total
  19. Compiled MIBs:
    • 3511 MIBs
    • 410869 Objects

Version 16.13   1st July 2016

  1. Operating System: FreeBSD 10.3-p3
  2. Fixed a defect in snmp walk which would cause the nm-snmp process to crash due to a complex race condition during the request timeout/retry algorithm.
  3. Abort the discover if snmp walk process exits incorrectly. If the nm-snmp process crashed during a discover/rewalk, this would result in partial and incomplete MIB table data being processed.
  4. Changes introduced in v16.12 to fix threshold alerting introduced a regression issue into the time filter "check" command, which is used by Status Alerting.
  5. Added/updated compiled MIBs:
    • Brocade

Version 16.12   23rd June 2016

  1. Operating System: FreeBSD 10.3-p3
  2. Added Efficient IP reports for:
    • DHCP
    • DHCP 6
    • DNS
  3. Added Dell Force10 CPU/Memory/Temp for devices using M Series MIB.
  4. Added a workaround for Cisco 3560 v4 hardware. The 3560 returns incorrect values for ENTITY-MIB.entLogicalCommunity. Fake up correct values so the collection of bridge forwarding tables work.
  5. Added a watchdog script to make sure the nm-joatd (jack of all trades daemon) process always exists.
  6. Added index numbers to the snmp trap reporter and alerting if the indexes are not massively long string indexes.
  7. Fixed a race condition which caused a null pointer segmentation fault in nm-joatd.
  8. Fixed value discrepancy in threshold alerting. The threshold alerting was triggering on the cached lastN value but reporting the real calculated value, which may not exceed the threshold, causing user confusion.
  9. Fixed an infinite memory leak in the flow meter when defining port number 65535 as a custom site protocol.
  10. Fixed a defect in the flow collector when handling flow exports from Cisco ASA devices. The ASA use special fields for in/out octet counts (FWD_FLOW_DELTA_BYTES and REV_FLOW_DELTA_BYTES). The REV_FLOW_DELTA_BYTES fields were not being handled correctly.
  11. Skip parts of CISCO-SYSTEM-EXT-MIB.ciscoSystemExtMIB when doing snmp walks because the table can go on for a long time.
  12. Added/updated compiled MIBs:
    • Bluecoat
    • Efficient IP
    • Sonus
  13. Supported MIB Object stats:
    • 214 Counters
    • 326 Gauges
    • 207 Enumerations
    • 80 Integer
    • 377 Other
    • 1204 Total
  14. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.11   20th May 2016

  1. Upgraded the installation operating system to FreeBSD 10.3-p3.
    Refer to the following FreeBSD security and errata advisories
  2. Enabled PDF export of the System Performance Graphs.
  3. Added Syslog table to Device Dashboard. Number of syslog messages is limited to 1000.
  4. Added missing good states for the ENTITY-MIB.entPhySensorOperStatus object.
  5. Added swap usage checks. If more than 50% of swap has been consumed, shutdown the software into safe mode. AKIPS should never consume large amounts of swap space unless the server is significantly under resourced.
  6. Skip hourly hardware storage diagnostic probing on Linux KVM/QEMU VMs as it appear to cause issues similar to Hyper-V VMs.
  7. Fixed a serious issue with the message database that stores both syslog and SNMP traps. The message database files where not being correctly sync'ed to disk at software shutdown time. Also added message database validation checks.
  8. Fixed an issue in the HTTP server to handle browsers/proxies that incorrectly insert blank lines before the HTTP GET request. This resulted in a "400 Bad Request" error message. The HTTP server now strips any leading blank lines.
  9. Fixed an issue with the limit of "All" in the Event, Status, Syslog and SNMP Trap reporters. The "All" option was incorrectly limited to 1000.
  10. Fixed an issue in the discover handling Netscaler Service Group descriptions that contained spaces.
  11. Supported MIB Object stats:
    • 211 Counters
    • 323 Gauges
    • 208 Enumerations
    • 80 Integer
    • 373 Other
    • 1195 Total
  12. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.10   11th May 2016

  1. Upgraded the operating system to FreeBSD 10.3-p2.
    Refer to the following FreeBSD security and errata advisories
  2. Added "Used" column to the Unused Interfaces summary table.
  3. Allow changing case of a device name in the Device Editor.
  4. Store flow port range records under a single port number. If a custom protocol has a port range of 40000-40999, store all matching flow records under port 40000 instead of individual port numbers. Storing as individual port numbers consumes more memory/disk space, and the duplicate protocols output in the Flow Reporter is confusing.
  5. Disabled hardware probing when running in a Hyper-V VM. The script which retrieves disk information for the Admin -> System -> System Info report crashes Hyper-V VMs since upgrading to FreeBSD 10.3.
  6. Changed the age time for ARP table entries from 20 days to 1 day in the switch port mapper.
  7. Removed Juniper VPN Tunnels report. JUNIPER-IPSEC-FLOW-MON-MIB jnxIkeTunnelMonTable is indexed off a unique identifier that changes each time a tunnel is re-established. This means a device rewalk needs to be performed each time the tunnel goes down/up, and the data for the previous tunnel index is lost, making this report fairly useless.
  8. Fixed saving of mail server configuration. The latest version of postfix used in version 16.9 contains a new unsafe() check that exits if UID does not match EUID or GID does not match EGID. This breaks postfix reload in Admin -> System -> System Settings menu, which means the postfix config did not apply until after a reboot.
  9. Fixed incorrect definition of Juniper Red/Yellow alarm states so 'off' is the normal good state.
  10. Fixed a serious memory leak in the loading of flow protocol definitions. The flow meters would eventually consume all physical memory and cause the server to start swapping. This appears to be a long existing defect, but only highlighted in version 16.9 due to the addition of port range syntax in the Netflow Protocols menu.
  11. Added/updated compiled MIBs:
    • Infinera
    • Meraki
    • Ubiquiti EdgeSwitch
  12. Supported MIB Object stats:
    • 214 Counters
    • 323 Gauges
    • 210 Enumerations
    • 80 Integer
    • 374 Other
    • 1201 Total
  13. Compiled MIBs:
    • 3471 MIBs
    • 406351 Objects

Version 16.9   26th April 2016

  1. Operating System: FreeBSD 10.3-RELEASE
  2. Added Juniper Alarm report:
    • Yellow alarm state
    • Yellow alarm count
    • Red alarm state
    • Red alarm count
  3. Added PacketLight Fan Status report
  4. Added PacketLight Power Supply Status report
  5. Added 'Port Range' syntax to Netflow Protocols menu. This allows you to define a protocol which uses a port range (e.g. 44000-44999) instead of a single port number.
  6. Update list of hidden reports after upgrade. This negates the requirement to do a full rewalk before new reports are hidden.
  7. Update reports menu after a single device discovery/rewalk.
  8. Discard noisy A10 Fan Status events. The fan states change as they spin up/down depending on internal temperature values.
  9. Speedup to the 80 minute compression runtime processing. This is achived by increasing the ZFS sequential read ahead distance from 8Mbytes to 64Mbytes. This performance increase only occurs in servers with greater than 4Gbytes of RAM.
  10. Speedup for shutting down AKIPS software during upgrades and server reboots.
  11. Increase the shutdown timeout when stopping AKIPS software in case long running processes need time to exit.
  12. Added Backup Performance Graphs:
    • Start / End Times
    • Run time
    • Size
    • File Count
  13. Bug fix to rolling average calculations at the end of the 80 minute database compression. This is an introduced regression in version 16.8 which affects some threshold alerting rules.
  14. Supported MIB Object stats:
    • 218 Counters
    • 323 Gauges
    • 210 Enumerations
    • 80 Integer
    • 377 Other
    • 1208 Total
  15. Compiled MIBs:
    • 3414 MIBs
    • 402476 Objects

Version 16.8   19th April 2016

  1. Upgraded the operating system to FreeBSD 10.3-RELEASE.
    Refer to the FreeBSD 10.3 Release Notes.
  2. Added a USB memstick image to the download options for new installs.
  3. Added Cisco BGP Peer State report:
    • AS Number
    • AS Name
    • Local IPv4/v6 address
    • Remote IPv4/v6 address
    • Admin / Operation state
    • Last state change
    • Updates
    • Messages
  4. Added Cisco BGP Prefix report:
    • Remote IP
    • Accepted
    • Denied
    • Advertised
    • Suppressed
    • Withdrawn
  5. Added Juniper Trapeze Access Point report:
    • IP address
    • Netmask
    • VLAN
    • Model
    • RAM
    • Serial Number
    • Hardware Version
    • Software Version
    • Uptime
    • Client Sessions
  6. Added Juniper Trapeze CPU to the generic device CPU report
  7. Added H3C Temperature report
  8. Added HP Sensor Status report
  9. Added PacketLight Chassis report:
    • Status
    • Uptime
    • Product
    • Part Number
    • Hardware revision
    • Firmware revision
    • Serial Number
  10. Added PacketLight Temperature report
  11. Added PacketLight Power Supply status alerting
  12. Added PacketLight Fan status alerting
  13. Updated list of AS Numbers.
  14. Added ability to defined Private AS Numbers in the "Admin->General->Private AS Numbers" menu.
  15. Display "Upgrade Backup Server" if the software installed on the backup server is older than the production server.
  16. Display "Backup is off" if a backup is not configured and more than 30 days data exists.
  17. Display "Software stopped: Disk full" when out of disk space. All data collection is stopped when disk space reaches 95% full.
  18. Increased operating system shutdown timeout from 120 to 300 seconds to give the OS time to stop all AKIPS processes which need to flush data to disk.
  19. Changed 30 minute ifSpeed update so it does not attempt to walk unreachable devices.
  20. Changed the ordering of the menus to be closer to alphabetic order.
  21. Update ifSpeed groups after running any custom ifSpeed Site Scripts.
  22. Switch Port Mapper:
    • Updated manufacturer codes.
    • Changed the algorithm so MAC addresses of network devices (e.g. switches and routers) are not discarded. The original intention of the switch port mapper was to identify end devices (i.e. PCs), but many customers also want to be able to search for a MAC of a switch/router to see what it is connected to.
    • Fixed the collection of bridge forwarding tables for Cisco Nexus switches. The changes applied in item 29 of version 16.5 did not work as expected.
  23. Backup / Restore performance improvements:

    A performance issue with the incremental backup was reported when the backup server was located in a remote data centre and the data had to go through multiple firewalls. The latency of the network and firewalls caused the backup to run for a long period. This was because the backup script was invoking 1 to 3 ssh/scp commands for each file being backed up. The backup/restore transfer mechanism has been changed from ssh/scp to sftp in batch mode. This reduces the TCP socket connections to one, which as has resulted in a significant speedup of both the backup and restore.

  24. Performance improvement when initially starting the software after an operating system upgrade. It was observed that servers with large configurations (e.g. 250,000+ interfaces) can take several minutes to fully start after upgrading to FreeBSD 10.3, leaving a larger than expected gap in the graphs. The cause was due to the painfully slow way the database files are mapped into memory. The startup script now forces all database files into memory before starting the poller and databases. The startup time for a server configured with 1.3 million interfaces was reduced from ~5 minutes to ~30 seconds.
  25. Time filter changes:
    • Fixed a defect where a rule of "not mon to fri" was not correctly including Sunday.
    • Changed the behaviour to allow Sunday to be the start or end of the week. This now allows rules like "sat to sun". Traditionally, Sunday is day 0 (start of the week) and Saturday is day 6 (end of the week).
  26. Fixed detecting duplicate devices:

    When a device was added using SNMPv2, and later discovered using SNMPv3, the duplicate entry was not being removed because SNMPv2 uses mac table checks, and SNMPv3 uses engine id. This was done due to a bug in IXIA devices which don't return valid MAC address entries. The algorithm was changed so devices with no valid MAC addresses are not checked for duplicate devices. SNMPv3 now also uses the mac address finger print checks too.

  27. Fixed Events Dashboard profile filtering for Syslog and SNMP Traps
  28. Fixed Dell Force10 report hiding.
  29. Fixed several serious defects in the nm-joatd process which could cause it to exit on a signal 11 due to race conditions in an unsafe signal handler. Also moved non critical functionality out of the nm-joatd process.
  30. Fixed discover so it can handle SNMP community names with '=' characters.
  31. Fixed regression introduced in 16.7 where the SNMP scan would fail during a scheduled discover.
  32. Added/updated compiled MIBs:
    • Liebert
  33. Supported MIB Object stats:
    • 218 Counters
    • 321 Gauges
    • 208 Enumerations
    • 80 Integer
    • 377 Other
    • 1204 Total
  34. Compiled MIBs:
    • 3414 MIBs
    • 402476 Objects

Version 16.7   24th March 2016

  1. Upgraded the operating system to FreeBSD 10.2-p14.
    Refer to the following FreeBSD security and errata advisories
  2. Added BridgeWave radio stats:
    • Model
    • Band
    • Utilisation
    • Receive signal level
    • Pre/Post FEC counts and status
    • Unit temperature
    • Radio temperature
  3. Added Cisco ASA firewall connections report.
  4. Added Dell Force10 reports for:
    • CPU
    • Memory
    • Temperature
  5. Added Juniper Trapeze Wireless Controller reports for
    • CPU
    • Memory usage
  6. Added Juniper BGP report for:
    • Identifier
    • AS Number
    • AS Name
    • Local IP (v4/v6)
    • Remote IP (v4/v6)
    • Admin State
    • Connection State
    • Last Change
    • Updates
    • Messages
  7. Added PacketLight Pico wavelength column to the Optical Interfaces report.
  8. Added functionality to override ifSpeed values returned by devices. Some vendors do not use the configured bandwidth value for IF-MIB.ifSpeed. The ifSpeed values for interfaces can be overridden using a simple Site Script. For site scripting assistance, email to support@akips.com.
  9. Added "stop" action to the Status Alerting. This tells the alerting to stop processing alerting rules at the current line. This is useful if there is a catch-all rule at the bottom. In the following example, without the stop rule, Ping Status alerts will be sent immediately and after 5 minutes.
    wait 5m * * ping4 PING.icmpState = email NetEng
            * * ping4 PING.icmpState = stop
            * * * *                  = email NetEng
                     
  10. Changed the Juniper RPM child type to 'ipsla' so the RPM tests can be grouped using the IPSLA grouping controls.
  11. Added child description for APC PDU Phase graphs.
  12. Fixed a defect in nm-snmp where a incorrectly formatted SNMPv3 response packet would cause nm-snmp to exit.
  13. Fixed a buffer overflow defect in the graphing which caused zero length files when saving as PDF or PNG.
  14. Fixed a buffer overflow defect in the nm-joatd process which could cause nm-joatd to exit.
  15. Fixed duplicate Juniper RPM graphs.
  16. Fixed IPv6 addresses not being discovered in later scans. If a device is originally discovered via IPv4 and IPv6 address ranges are added to the discover later on, then IPv6 addresses were not being automatically populated for existing devices.
  17. Added/updated compiled MIBs:
    • Force10 (Dell)
    • Meraki (Cisco)
  18. Supported MIB Object stats:
    • 210 Counters
    • 317 Gauges
    • 201 Enumerations
    • 77 Integer
    • 350 Other
    • 1155 Total
  19. Compiled MIBs:
    • 3411 MIBs
    • 400960 Objects

Version 16.6   15th March 2016

  1. Operating System: FreeBSD 10.2-p13
  2. Fixed several critical security issues where commands could be injected into certain URLs. This could expose sensitive data to unauthorised users.
  3. Fixed various issues with the Scheduled PDF reporting functionality.
  4. Added PDF button to the navbar to allow the user to create a PDF file of the current viewed report. This is a beta feature and will be enhanced over the next few releases.

Version 16.5   11th March 2016

  1. Upgraded the operating system to FreeBSD 10.2-p13
    Refer to the following FreeBSD security advisory
  2. Added APC PDU Report
    • Hardware version
    • Firmware version
    • Serial number
    • Manufacture date
    • Model number
    • Power Rating
    • Number of outlets
    • Number of phases
    • Supply status
    • Alarm status
  3. Added APC PDU Phase report
    • Phase number
    • State
    • Voltage
    • Current
    • Power
  4. Added APC PDU Outlet report
    • Outlet name
    • Phase
    • Bank
    • Config state
    • State
    • Command pending
    • Load (amps)
  5. Added Cisco Netflow Cache report
    • Cache percent used
    • Learn failures
    • Engine Description
  6. Added Cisco FRU Fan State report
  7. Added Dell switch reports
    • Fan state/speed
    • Memory
    • Temperature
  8. Added F5 Power Supply status report
  9. Added Huawei Module Status report
    • CPU
    • Memory
    • Temperature
    • Voltage
  10. Added Huawei power supply report
    • Status
    • Temperature
  11. Added Ingrasys TopN Graphs
    • Temperature
    • Humidity
  12. Added Juniper RPM report
    • Test name
    • Percentage Lost
    • Latency in microseconds
  13. Added PacketLight Optical Interfaces report
    • Transmit power
    • Receive power
    • Title
    Note: Must select the ifType of opticalTransport in the Discover configuration settings.
  14. Added initial/beta scheduled PDF reporting functionality in Admin -> Miscellaneous -> Scheduled Reports. Requires a valid licence key.
  15. Added file attachment functionality to the Common.pm mail() function.
  16. Added "Test" button to the threshold alerting rules. The test prints out each threshold rule along with the results of its "mget" command.
  17. Reduced memory size of the discover process by up to 20%, depending on the type of devices being walked.
  18. Changed the interface group listing so user generated groups are displayed before system generated groups. The ifspeed_xxxx, iftype_xxxx and vlan_xxx groups are now display at the bottom of the list.
  19. Added functionality to inform the poller to collect data for certain interfaces which have an ifOperStatus of 'down'. Cisco switch interfaces which are used for interface mirroring, always report an ifOperStatus or down. Some customers what to graph the amount of traffic passing through the mirrored interfaces.
  20. Fixed a defect in the SNMP library where invalid SNMPv3 localised user keys were being generated when the Auth or Priv password length was greater than 16 characters. This would cause walk failures for the device during the discover.
  21. Added workaround for broken HP 5xxx switches which return incorrectly formatted SNMPv3 Report packets, which caused the engine discover phase of authenticated/encrypted SNMPv3 sessions to fail. A packet trace verified the invalid Report packets were occurring.
  22. Fixed a possible loop situation in the SNMP library when a device keeps returning Report packets during SNMPv3 engine discovery stage. The effect was the SNMP walk process of the discover/rewalk would never exit. If the device returns more than three SNMP Report packets, the session to that device is skipped.
  23. Fixed a defect in the discover/rewalk where the nm-snmp process would continue even if the browser tab was closed to terminate the discover. The discover script was not signalling the nm-snmp process to exit, so it would contine doing walks in the background until it completed.
  24. Changed the memory usage of the nm-snmp process. Previously it would preallocate 65536 entries (i.e. 64k concurrent SNMP walks) at start up, which would unnecessarily waste memory when only walking a single device. The request array size is now dynamically increased to a maximum of 64k entries.
  25. Added debug logging to the SNMP log each time a SNMP walk is run. The log data includes:
    • Current size of the request array (max 65536)
    • Number of used entries in the request array
    • Number of queued requests
    • Number of active requests
  26. Added skip entry in the SNMP library for HUAWEI-XQoS-MIB because a walk contains a massive amount of useless MIB objects.
  27. Set the ICMP identifier and sequence values to 255 in the ping poller packets. AKIPS does not use those fields, but some customers have configured their firewalls so they drop ICMP packets when those fields are set to zero.
  28. Report error if devices is removed due to walk failure when using "Add SNMP Device. Previously, the status line would report success even if the device was removed during discover due to a failed SNMPv2-MIB or ifTable walk.
  29. Enhanced the switch port mapper so it handles collecting MAC address information from Cisco Nexus switches. The data is collected by using SNMPv2 Community Name addressing or SNMPv3 Contexts, but NX-OS does not support the ENTITY-MIB.entLogicalCommunity and ENTITY-MIB.entLogicalContextName MIB objects. A workaround has been applied by faking up these MIB objects.
  30. Added missing device controls to various reports.
  31. Enhanced the database validate checks.
  32. Removed the Cisco TCAM report because it returns bogus/misleading information.
  33. Fixed an uninitialised value in the Availability perl module which would cause the single device dashboard to fail randomly.
  34. Fixed renaming Aruba APs if their name changes.
  35. Fixed the sorting of device and interface names. For example, fastether2/3 was being sorted ahead of fastether1/10.
  36. Fixed hiding of UPS Battery and UPC Sensors reports.
  37. Fix to Site Scripting wrapper scripts which could not be killed because they were blocking signals.
  38. Fixed a defect in the IPv6 ping scan.
  39. Fix to email profile validation. Previously only the first user profile was being validated after the email action.
  40. Fix to allow spaces in user passwords.
  41. Display an error if an invalid licence key is entered in the Software Activation menu.
  42. Added workaround when ntpdate fails with a timeout when a server boots and its server/switch interface takes a long time to start forwarding traffic. The start up script now does up to 20 ntpdate attempts.
  43. Added/updated compiled MIBs:
    • Adva
    • Aruba Airwave
    • Bridgewave
    • EndRun Tempus
    • Radware
    • Trapeze (now Juniper)
  44. Supported MIB Object stats:
    • 203 Counters
    • 306 Gauges
    • 196 Enumerations
    • 74 Integer
    • 332 Other
    • 1111 Total
  45. Compiled MIBs:
    • 3401 MIBs
    • 399848 Objects

Version 16.4   5th February 2016

  1. Upgraded the operating system to FreeBSD 10.2-p12
    Refer to the following FreeBSD security advisories
    FreeBSD 10.3 is currently in BETA. Refer to the 10.3 release schedule. Once released, we will perform testing for a few weeks before switching to the 10.3 RELENG security branch.
  2. Enhanced the Netflow collector so it can now handle multiple Domain IDs for Netflow v9 templates coming from the same exporter. This appears to occur in a multi chassis virtual switch arrangement.
  3. Added interface duplex status to the Interface Statistics report. A value is only printed if the device supports the EtherLike-MIB.
  4. Added support in the Admin -> System -> System Settings for configuring multiple network interfaces. This is required in some customer sites where their AKIPS server needs to be multi-homed onto seperate networks/VLANs.
  5. Speed up to the Tune Interface State processing. On a 250,000 interface configuration, the tune interface state processing was taking many seconds each minute. This has been reduced to ~700ms.
  6. Updated the Site.pm perl module so Discover.pm is always included. Customers who previously needed to include Discover.pm in their Admin->API->Site Scripting no longer need to so.
  7. Added a workaround for IXIA devices which only return MAC addresses of 000000000000 in IF-MIB.ifTable. The defect has been reported to IXIA. The discover uses the list of IF-MIB.ifPhysAddress values in each device to finger print the device, which is then used to detect and remove duplicate devices. The discover also performs duplicate device checking using SNMPv3 Engine IDs because it is mandatory that Engine IDs are unique. The discover now skips the MAC finger print for SNMPv3 devices. The workaround for IXIA devices is to use SNMPv3.
  8. Changed the discover so it prints one dot per 10 devices when creating its configuration. This is to avoid proxy/browser timeout issues if it takes a while to create the configuration for large numbers of devices.
  9. Fix to the 30 minute ifSpeed update. The script was not updating the ifspeed_xxx groups after updating the ifSpeed in the configuration. This meant that the ifspeed_xxx interface groups were not always 100% correct.
  10. Fixed a buffer overflow in the HTTP server when handling error logging of long URLs. The HTTP daemon would exit with a SIGBUS or SIGSEG error and be automatically restarted.
  11. Fix a regression introduced in 16.2 where page headings were missing for the following screens:
    • Discover / Rewalk (when running)
    • Discover Log Viewer
    • System Log Viewer
    • Manual Grouping
  12. Fixed hiding of Eaton UPS reports when "Hide Unused Reports" was selected from the right drop down menu.
  13. Database deadlock issues.

    Several customers have experienced database deadlocks issues when discovering SNMPv3 devices. The AKIPS database comprises of multiple underlying databases (e.g. time-series, events, configuration, etc). One of these databases is the SNMPv3 LUK (Localised User Key) database which holds things like the SNMPv3 SHA/MD5 generated LUK, Engine ID, Engine Boot time, Engine Boot Count, etc. Refer to the Deploying SNMPv3 blog for a detailed description of SNMPv3.

    The deadlock issues were able to be reliably reproduced in our lab network by running the discover against a large number of SNMPv3 devices. Several race conditions in the underlying database locking have been rectified.

  14. Fixed handling of large jumps in time. Time is always meant to go forwards at a constant rate! The time-series database stores all data in 30 day blocks. If a server is shutdown and rebooted with a wildly different time (e.g. out by several years), the time-series database processing immediately starts pruning data blocks which are not within the storage time period.

    Additional time sanity checks have been added so if the software detects that time has jumped, either at boot time or while it is running, then the software drops into read only mode and an error message is displayed in the GUI to contact AKIPS tech support.

  15. Added/updated compiled MIBs:
    • Informant
  16. Supported MIB Object stats:
    • 199 Counters
    • 291 Gauges
    • 183 Enumerations
    • 67 Integer
    • 318 Other
    • 1058 Total
  17. Compiled MIBs:
    • 3365 MIBs
    • 388038 Objects

Version 16.3   20th January 2016

  1. Operating System: FreeBSD 10.2-p10
  2. Fix to mailer configuration.

    In version 16.2, the Postfix package was updated as part of the operating system upgrade. It appears the FreeBSD ports team made an unannounced change to the Postfix package. In their wisdom, they have suddenly decided not to update /etc/mail/mailer.conf to point to Postfix instead of Sendmail.

    Due to this change, AKIPS servers running 16.2 will attempt to send mail using the default Sendmail program instead of Postfix. All of the mail settings in Admin->System->System Settings are reliant on Postfix, and will not work with Sendmail. For sites which are reliant on these settings (e.g. "Email Domain"), mail may not be delivered.

Version 16.2   19th January 2016

  1. Upgraded the operating system to FreeBSD 10.2-p10
    Refer to the following FreeBSD security advisories
  2. Added ability to alert by Total value over a LastN period. The threshold rules can be slightly confusing....

    For example the following rule means the average multicast packets exceeds 1000 per minute over the last 5 minutes.
    last5m avg above 1000 * * * IF-MIB.ifHCInMulticastPkts = email foo@bar.com

    Whereas the following rule means the total multicast packets exceeds 5000 for the last 5 minutes.
    last5m total above 5000 * * * IF-MIB.ifHCInMulticastPkts = email foo@bar.com

  3. Availability Reporter:
    • Added ability to save graphs
    • Added "{start} to {end}" dates when saving graphs
    • Increased report resolution to 2 decimal places
  4. Added availability graph to the single Device Dashboard.
  5. Dynamically increase the size of the text box in the Auto Grouping depending on the browser size.
  6. Added interval to the graph legends so it shows avg/{interval}.
  7. Added support for legacy/deprecated RFC1213 non unicast packets (ifOutNUcastPkts and ifInNUcastPkts). Most modern devices support IF-MIB.ifXTable, which includes 32bit and 64bit counters for multicasts/broadcasts. If a device only supports the historic ifTable, then the discover will fall back to using ifOutNUcastPkts and ifInNUcastPkts. The data will appear in the multicast column of the interface statistics reports.
  8. Supported MIB Object stats:
    • 199 Counters
    • 291 Gauges
    • 183 Enumerations
    • 67 Integer
    • 318 Other
    • 1058 Total
  9. Compiled MIBs:
    • 3363 MIBs
    • 386910 Objects

Version 16.1   12th January 2016

  1. Operating System: FreeBSD 10.2-p8
  2. Added packet capture duration options to the Ping/SNMP Walk/Packet Capture tool.
  3. Added a work around for Cisco Nexus boxes which randomly return garbage 64bit counter values. This appears to be a race condition in the Nexus box where the counter is being updated while an SNMP Get request operation is being performed on that counter, which means the counter update is not an atomic operation. The AKIPS poller now discards its internal state machine for two polling cycles (i.e. 120 seconds) for that counter when this issue is detected.
  4. Added navigation/save controls to the Graph Reporter and Interface Graph Reporter tools.
  5. Added ability to apply an event flag to a threshold rule. Refer to the Threshold Alert help syntax.
  6. Added monitoring of CISCO-ENVMON-MIB.ciscoEnvMonSupplySource. Updated the Cisco Power Supply report to display Source and Status columns.
  7. Added a width option to the graphing controls. This allows you to manually widen the graphs to get finer detail. The maximum width of a SVG graph has been increased to 1 million data points. This allows you to display a 1 year graph at 1 minute resolution. The only issue is your browser may be slightly sluggish when scrolling on such a wide SVG image.
  8. Changed the layout of various reports so the Device Filter is above the Device List.
  9. Availability report changes:
    • Added drilldown from summary graph to a new per-device graph/table.
    • Added drilldown from the new per-device table to the outage table.
    • Changed default report to "IPv4 Ping Availability".
    • Added separate icons for Table and Events.
  10. Added interface name to the Cisco NBAR report.
  11. Added Aerohive AP Radio report:
    • Radio Utilisation
    • Radio Transmit Power
  12. Added Ingrasys reports:
    • Temperature
    • Temperature Status
    • Humidity
    • Humidity Status
  13. Added ServerTech reports:
    • Temperature
    • Humidity
    • CDU
      • Version
      • Serial Number
      • Power
    • Tower
      • ID
      • Name
      • Model
      • Serial Number
      • Status
      • Power Watts
      • Power VA
      • Power Factor
    • Infeed
      • Name
      • Line
      • Line to Line
      • Phase
      • Number of Outlets
      • Load Status
      • Voltage
      • Current
      • Power Watts
      • Power VA
      • Phase Voltage
      • Phase Current
    • Outlets
      • Name
      • Config State
      • Control State
      • Load State
      • Voltage
      • Current
      • Power Watts
      • Power VA
      • Power Factor
  14. AKIPS now runs 'zpool scrub' every Tuesday at 2am (localtime) to ensure data integrity.
  15. Fixed a serious memory leak issue in the main joatd process (Jack Of All Trades Daemon). This memory leak slowly consumes virtual memory until it is exhausted, then the kernel will terminate the joatd process.
  16. Fixed duplicate alert messages for wait rules in the Status Alerting.
  17. Fixed an issue downloading an OIDs Walk in the SNMP Walk tool when parameters are entered manually. The file was zero bytes in length.
  18. Added/updated compiled MIBs:
    • Ingrasys
    • NetApp
  19. Supported MIB Object stats:
    • 197 Counters
    • 291 Gauges
    • 183 Enumerations
    • 67 Integer
    • 318 Other
    • 1056 Total
  20. Compiled MIBs:
    • 3363 MIBs
    • 386910 Objects

Version 15.40   24th December 2015

  1. Operating System: FreeBSD 10.2-p8
  2. Added Ixia Segment report:
    • Util%
    • Bytes
    • Packets
    • Broadcast
    • Dropped
  3. Added Dell Switch Stack Status report:
    • Model/Description
    • Serial Number
    • Software Version
    • Role
    • Status
  4. Added Dell iDRAC Fan report:
    • Fan Speed
    • Fan Status
  5. Added Dell iDRAC Temperature Sensor report:
    • Sensor Description
    • Temperature
    • Status
  6. Added Dell iDRAC Power Supply report:
    • Description
    • Voltage
    • Status
  7. Added Dell iDRAC Global Status report:
    • iDRAC Model
    • Version
    • Serial Number Tag
    • OS Type
    • Server Model
    • System/Storage Status
  8. Added Dell iDRAC Physical Disk report:
    • Manufacturer
    • Identifier
    • Serial No
    • Revision
    • Rev
    • Capacity
    • Status
  9. Added Meru Wireless Controller CPU report.
  10. Added Meru Wireless Controller Memory report:
    • Util %
    • Total
    • Used
    • Free
  11. Added Meru Wireless Controller Statistics report:
    • Model
    • Software Version
    • Tx / Rx Bytes
    • Access Points
      • Online
      • Offline
      • Rogue
    • Stations
      • Total
      • 2.4G
      • 5G
      • Rogue
  12. Added Meru Wireless Controller Stations report:
    • 802.11b
    • 802.11b/g
    • 802.11an
    • 802.11gn
    • 802.11ac
  13. Added phase number to APC ATS report.
  14. Added phase number to Eaton UPS Phases graphs.
  15. Added Network/Netmask to Infoblox DHCP Subnet graphs.
  16. Added FPC slot number to Juniper SPU description.
  17. Added ifAdminStatus to interface configuration report.
  18. Added support for Radware multiprocessor CPU/Memory reports. Radware appear to keep single and multi processor statistics in different MIB objects.
  19. Split the interface name and title filtering into separate controls in the Interface Reporter/Grapher.
  20. Moved the graph legends from the right side to the bottom of the graphs. Added Average and Total values to the graph legends.
  21. Fixed an issue with A10 sessions configuration. The A10 MIB previously incorrectly defined the session objects as counters instead of gauges. A10 rectified the MIB.
  22. Fixed a database deadlock issue which can occur if a device is deleted at the same time the hourly database validate has a database lock.
  23. Fixed a race condition in the discover when creating the etc/ip2name.cfg file. This file maps all the IP addresses found on each device to a device name. The SNMP Trap and Syslog reporters use this mapping to determine where traps/syslog message come from. The race condition would cause the persistent reporting CGIs to load an empty ip2name.cfg file, and therefore were not able to resolve the device name.
  24. Fixed an issue with F5 load balancers which do not report all the IP addresses it is using via the standard IP-MIB tables. The IP mappings now also uses the F5-BIGIP-SYSTEM-MIB.sysSelfIpAddr objects when creating the ip2name.cfg mappings.
  25. Fixed an issue when an evaluation licence key expires and the alerting continues until the software is restarted.
  26. Fixed an issue in the backup/restore where AKIPS web users were not being saved/restored.
  27. Added/updated compiled MIBs:
    • A10
    • Aerohive
    • Avocent
    • Cyclades
    • Ingrasys
    • Dell Compellent
    • Packet Light
    • Palo Alto
    • Sensatronics
    • Servtech
  28. Supported MIB Object stats:
    • 195 Counters
    • 272 Gauges
    • 171 Enumerations
    • 65 Integer
    • 297 Other
    • 1000 Total
  29. Compiled MIBs:
    • 3359 MIBs
    • 385509 Objects

Version 15.39   11th December 2015

  1. Upgraded the operating system to FreeBSD 10.2-p8
    Refer to the following FreeBSD errata and security advisory
  2. Change the /drilldown parameter syntax for shorter URLs. These changes include:
    • Change graph= so that the list of graphs can be specified as comma separated values, e.g. graph=util,bit_rate,packet_rate;
    • For interface drilldowns, removed descr= and title= parameters as these will be set to the appropriate defaults to include interface description and speed in the title.
  3. Enhanced the Admin -> General > Switch Port Mapper Settings.

    Previously the ping sweep option would use the ping range rules from the discover. Those range rules would typically be used to find network devices, not edge devices (e.g. PCs, Printers, etc). The new ping range rules in the Switch Port Mapper Settings allows you to ping sweep the the edge devices, therefore priming the IP ARP tables of routers and the bridge forwarding tables of switches.

  4. Added the ability to remove the control panel on the Interface Dashboard by removing the controls=interface; from the URL.
  5. Renamed the Juniper Stack Modules report to Virtual Chassis Members.
  6. Fixed a defect in the alerting module which was not handling SIGHUP interrupts. This would cause invalid or missing alerts.
  7. Fixed Netflow zoom out which was stuck on "Hour". Drill down on any Netflow report, then zoom into a 10 minute period, then use the calendar zoom out "hour". Instead of the button changing to "Day" "Week" etc it is locked at "Hour".
  8. Fixed Dell EqualLogic Memory Reports. Each EqualLogic device reports statistics in the EQLMEMBER-MIB for other member devices, which results in duplicate entries.
  9. Fixed the "Save Graph" option for calendar graphs. The saved graph was not in calendar format as displayed on the screen.
  10. Fixed threshold alerts so the values are in human readable format.
  11. Fixed a signal 11 segmentation fault due to a NULL pointer reference in the main joatd (Jack Of All Trades Daemon) process.
  12. Fixed a defect where the Hide Unused Reports option incorrectly hid the Device Chassis report.
  13. Added/updated compiled MIBs:
    • Tegile
  14. Supported MIB Object stats:
    • 209 Counters
    • 237 Gauges
    • 154 Enumerations
    • 58 Integer
    • 273 Other
    • 931 Total
  15. Compiled MIBs:
    • 3314 MIBs
    • 382394 Objects

Version 15.38   3rd December 2015

  1. Operating System: FreeBSD 10.2-p7
  2. Added Dell EqualLogic Controller:
    • Controller Name
    • Model
    • Software Version
    • Serial Number
    • Battery Status
    • NVRAM Battery Status
  3. Added Dell EqualLogic Disk Config:
    • Model
    • Serial Number
    • ID Number
    • Slot Number
    • Type (SAS/SATA)
    • RPM
    • Size
    • Status
    • Errors
  4. Added Dell EqualLogic Disk Stats:
    • Serial Number
    • Transfers
    • Failed Transfers
    • Read/Write Bytes
    • Operations Pending
    • Queue Depth
    • Disk Errors
  5. Added Dell EqualLogic Member Config:
    • Name
    • Status
    • Health
    • Raid Status
    • Lost Blocks
    • Spare Disks
    • Model
    • Serial Number
  6. Added Dell EqualLogic Member Storage:
    • Name
    • Utilisation
    • Used
    • Free
    • Total
  7. Added Dell EqualLogic Member Stats:
    • Name
    • Connections
    • Transmit Data
    • Receive Data
    • Read Operations/sec
    • Write Operations/sec
    • Read/Write Latency
  8. Added Dell EqualLogic Pool Stats:
    • Pool Name
    • Storage Util
    • Storage Used
    • Storage Free
    • Storage Total
    • Volumes In Use
    • Volumes Online
    • Volumes Total
    • Connections
  9. Added Dell EqualLogic Temperature Stats:
    • Sensor Name
    • Status
    • Temperature
  10. Added interface filters to the interface flapping report.
  11. Added link to interface dashboard in the Ciena Laser Interfaces report.
  12. Reduce the event noise from Juniper Fan state changes.
  13. Fixed duplicate alerts due to case sensitive rules. Alert rules containing profiles or email addresses with different case would cause duplicate alerts to be sent, or mute rules to fail.
  14. Fixed a regression in the 'Hide Unused Reports' control.
  15. Added/updated compiled MIBs:
    • Dell
    • Net-SNMP
    • ServerTech Sentry4
  16. Supported MIB Object stats:
    • 209 Counters
    • 237 Gauges
    • 154 Enumerations
    • 56 Integer
    • 273 Other
    • 929 Total
  17. Compiled MIBs:
    • 3313 MIBs
    • 382019 Objects

Version 15.37   25th November 2015

  1. Operating System: FreeBSD 10.2-p7
  2. Added Interface Flapping report
  3. Added Liebert Humidity report
  4. Added ENTITY-SENSOR-MIB voltsAC
  5. Added SSL certificate chain support to the HTTP server.
  6. Added "Hide Unused Reports" option to the Admin -> General -> Miscellanous menu.
  7. Added OSPF Neighbour Table report:
    • IP Address
    • Router ID
    • State and Last Change
    • Status and Last Change
    • Permanence
    • Number of Events
  8. Increased the number of rows strip graphs created for in report tables from 100 to 500 rows.
  9. All Reporting Tools: Only display the objects found during the discover/rewalk.
  10. Device Dashboard
    • Hide the interface table for ping only devices
    • Highlight when device is unreachable
  11. Device Reporter:
    • Only display the reports the user has access to
  12. Event Reporter:
    • Increased the number of LastN options in the drop down select list.
    • Moved the Ping, SNMP and Interface Status to the top of the select list.
  13. Threshold Alerting:
    • Decreased the run time interval from 5 minutes to 1 minute
    • Changed 'exceeds' keyword to 'above'
    • Added 'below' threshold option
  14. Netflow Reporter:
    • Added more 'Limit' options
    • Removed checkbox selection for Packets, Bytes and Flows. These are now always displayed.
    • Added strip graphs for Packets, Bytes and Flows.
    • Increased the number of rows strip graphs are display from 50 to 500 rows.
  15. Preserve the following across OS upgrades:
    • /etc/syslog.conf
    • /etc/hosts.allow
    • /etc/rc.firewall
    • /etc/ipfw.rules
  16. Performance speed up to the database validate. In large configurations, the database validate would take over 20 seconds to complete. This would cause the GUI to stall once an hour because the validate takes an exclusive lock on the database. A refactor of the validate algorithm reduces this time to less than 1 second.
  17. Fixed a race condition in the database which can cause a database locking deadlock between two processes. The race condition can sometimes occur if the automatic database validate is running when a device is deleted.
  18. Added/updated compiled MIBs:
    • Dell EqualLogic
    • Tripplite
    • APC PowerNet MIB to 4.1.6
  19. Supported MIB Object stats:
    • 197 Counters
    • 227 Gauges
    • 142 Enumerations
    • 51 Integer
    • 255 Other
    • 872 Total
  20. Compiled MIBs:
    • 3304 MIBs
    • 380593 Objects

Version 15.36   17th November 2015

  1. Operating System: FreeBSD 10.2-p7
  2. Added Ixia reports for:
    • Port segment stats
    • Temperature
    • Power Supply status
  3. Added ENTITY-SENSOR-MIB reports for:
    • Current
    • Voltage
    • Power
  4. Added Ubiquiti AirMax reports for:
    • SSID
    • AP MAC
    • Signal
    • RSSI
    • CCQ
    • Noise Floor
    • Tx Rate
    • Rx Rate
    • WDS State
    • Repeater State
    • Station Count
  5. Added support in the switch port mapper for legacy Cisco switches that only implement the deprecated MIB object vmMembershipSummaryMemberPorts instead of the newer vmMembershipSummaryMember2kPorts object, which meant VLAN data was not available.
  6. Added Use HTTPS only option in the Admin -> General -> Miscellaneous menu.
  7. Changed the toggle buttons in the Admin -> General > Miscellaneous menu so it is more obvious if they are on/off.
  8. Changed the Interface Grapher so the drilldown opens in a new tab. The "zoom" mode causes an issue where the URL gets replaced with the drilldown cgi. If the user then types into a regex filter, the select lists get populated with HTML rubbish because the drilldown cgi can't handle the request.
  9. Rearranged and split out the alerting code to make it more robust.
  10. Fixed an edge condition in the alerting wait rules where duplicate alerts are generated if the event occured on the minute boundary.
  11. Fixed an issue in the the time filter which would cause alerts to be incorrectly generated. For example, a rule with a time filter of "mon to fri 06:00 to 22:00" would incorrectly return true on Saturday, and alerts were being sent.
  12. Fixed grouping issue when ifSpeed is updated. The ifSpeed of an interface is updated when its ifOperStatus changes from down to up, but the ifspeed_xxx group for the interface was not being updated. A similar defect was in the 30 minute ifSpeed update run across all interfaces.
  13. Fixed an issue when defining site specific service names in the Admin -> General -> Netflow Protocols menu. The flow reporters were expecting a protocol/server name with the format of 'protocol.server' (e.g. tcp.mylocalapp). A format of "udp.mylocalapp-10.1-net" was not being correctly handled by the reporting parser and was causing issues rendering report tables.
  14. Added JUNIPER-COS-MIB.jnxCosIfqStatsTable to the SNMP walk skip list because the walk times out in that table due to very slow responses.
  15. Added/updated compiled MIBs:
    • Avtech
    • PulseSecure
    • Ubiquiti
  16. Supported MIB Object stats:
    • 196 Counters
    • 226 Gauges
    • 139 Enumerations
    • 51 Integer
    • 250 Other
    • 862 Total
  17. Compiled MIBs:
    • 3281 MIBs
    • 376391 Objects

Version 15.35   6th November 2015

  1. Upgraded the operating system to FreeBSD 10.2-p7
    Refer to the following FreeBSD errata and security advisory
  2. Added A10 reports for:
    • CPU
    • Memory
    • Temperature
    • Fan
    • Power Supply
  3. Added A10 Sessions report:
    • Connections Active
    • Connections Freed
    • TCP Sessions
    • TCP Half Open Sessions
    • UDP Sessions
    • IP Sessions (non TCP/UDP)
    • Non IP sessions
    • Reverse NAT TCP Sessions
    • Reverse NAT UDP Sessions
  4. Added Riverbed reports for:
    • CPU
    • Memory
    • Temperature
    • System Health
    • Service Status
  5. Added vintage (early 2000) Extreme Networks switch reports:
    • CPU
    • Temperature
  6. Changed the command line program nm-flow-reporter so it now takes additional sort options of src and dst.
  7. Changed the Netflow reporter so the tables can be sorted by source and destination IP addresses. Previously the sort only worked on Packets, Bytes and Flows.
  8. Switch Port Mapper Report changes:
    • When doing a search for a MAC or IP address, the report now displays the VLANs the interface is assigned to.
    • The IP address history search now contains additional fields of Vendor, Switch, Port, VLANs and interface description.
    • The MAC address history search now contains the additional field of VLANs.
  9. Sort the switch port mapper CSV output files in the data/spm directory.
  10. Added a switch port to VLAN output file data/spm/sp2vlan.
  11. Changed the Admin -> System -> Systems Settings so the mail server password is not sent to the browser.
  12. Performance speed up to the Syslog alerting module. It was noticed on a customer's server that the syslog alerting module was using more than 20% of a CPU core. This was caused by a constant stream of ~450 syslog messages per second and having to process each message through ~150 alerting rules. A small change to the alerting module reduces the CPU load to ~6% of a CPU core.
  13. Added a workaround for vendor devices which do not return valid values for IF-MIB.ifSpeed (e.g. Riorey and Ixia). If an interface speed is greater than ifSpeed max (2^32) then the standard requires IF-MIB.ifSpeed to be set to 4,294,967,295 (2^32 - 1) and ifHighSpeed set appropriately. Some vendors are just counter wrapping ifSpeed multiple times and leaving it at some random value.
  14. Fixed a bug in the SNMP library which would cause some network devices to time out / fail on a SNMP walk. The request packets used an unsigned 32bit value for Request ID instead of a signed 32bit value. The walk would time out after 32768 packets.
  15. Fixed a bug in the SNMP adaptive polling algorithm. Under specific conditions, the poller would incorrectly skip its 60 second polling for MIB objects on a device.
  16. Fixed a bug in the alerting where the mute rules were not being applied.
  17. Fixed an incorrect configuration definition for Ciena temperatures sensors. This would stop the discover from adding Ciena temperature sensors.
  18. Fixed an issue in the discover when the "IP Address" naming scheme is used. If a device is renamed in the Device Editor and a discover by IP range is performed, a duplicate device is added to the configuration because of a missing device finger print check.
  19. Fixed an issue where the email alerting does not stop when an eval licence key expires. Email alerts would continue to be sent, but the user can not access the Admin -> Alerting menus.
  20. Added compiled MIBs:
    • Citrix Netscaler SDX-ROOT-MIB
    • EndRun Technologies SONOMA-MIB
  21. Supported MIB Object stats:
    • 182 Counters
    • 216 Gauges
    • 134 Enumerations
    • 48 Integer
    • 240 Other
    • 820 Total
  22. Compiled MIBs:
    • 3276 MIBs
    • 376035 Objects

Version 15.34   31th October 2015

  1. Operating System: FreeBSD 10.2-p6
  2. Fixed an issue when saving a graph as a PNG/PDF file. A zero length file would be created. This is caused by a missing package on the installation ISO due to a new package dependency. NOTE: The graph save functionality is only available with a valid licence key.

Version 15.33   30th October 2015

  1. Upgraded the operating system to FreeBSD 10.2-p6
    Refer to the following FreeBSD security advisory
  2. Added Ciena Laser Interfaces report:
    • Transmit Power
    • Receive Power
    • Laser Temperature
  3. Added Cisco Voice reports:
    • Voice Calls
    • Voice Interfaces
  4. Added missing interface dashboard drilldown to:
    • Juniper Laser Interfaces
    • Extreme Flow Limit
  5. Added/Updated compiled MIBs for:
    • A10
    • Cisco Cerent
    • Radware
  6. Updated vendor code list for the switch port mapper reports.
  7. Pass through the current LastN time filter from the Top N graphs to the drill down graphs.
  8. Added a default maximum number of database compression processes to fire off (default 4). The number of processes is normally calculated at half the number of CPU cores, but some customers are using servers with 12 to 24 CPU cores. 4 compression processes is more than enough for large sites (e.g. 10000+ devices and 250000+ interfaces).
  9. Fixed database validate command so skips over attribute values which have not been set. This would occur if the hourly auto database validate ran while the discover was adding new devices.
  10. Fixed missing good state values for CISCO-ENTITY-SENSOR-MIB entSensorStatus object.
  11. Fixed the Interface Dashboard drill down in the Switch Port Mapper reports.
  12. Fixed an issue with the Save Graph function in the Interface drill downs.
  13. Fixed a issue where the discover ping scan program never exits. This issue was only noticed when the AKIPS server was configured with dual homed network interfaces.
  14. Fixed an issue in the SNMP Trap alerting if the IP address of the device can not be resolved to a name.
  15. Fixed an issue where the software needed to be restarted after a licence key is installed for the alerting to start working.
  16. Supported MIB Object stats:
    • 173 Counters
    • 206 Gauges
    • 127 Enumerations
    • 46 Integer
    • 227 Other
    • 779 Total
  17. Compiled MIBs:
    • 3275 MIBs
    • 375736 Objects

Version 15.32   22nd October 2015

  1. Operating System: FreeBSD 10.2-p3
  2. Added Ciena reports:
    • CPU
    • Memory
    • Chassis Temperature
    • Power Supply Status
    • Fan Status
  3. Added temperature status columns to:
    • Arista
    • Cisco
    • Extreme
    • HP
    • Palo Alto
  4. Added initial Alert scripting functionality so a Site Script can run instead of sending an email or syslog message.
    Note: This functionality has not been documented yet. Site Scripting requires a valid licence key.
  5. Added a prototype TCP socket daemon that allows multiple incoming raw socket connnections to interact with AKIPS command line programs. This is a customer requested feature so their remote tools can communicate with the AKIPS API via sockets.
    Note this is currently undocumented.
  6. Enable serial console on AKIPS server and set for 115200 bps.
  7. Fixed the ping scan and ping poller to allow dual homed network interfaces. Previously the pinger would only listen for echo responses on the first ethernet interface.
  8. Fixed an issue in the Device Editor where a device can be renamed to an existing device (ie. user error), which would clobber the configuration of that existing device. The fix prevents the user from doing this.
  9. Fixed an issue with the switch port mapper algorithm if only a portion of the network is being monitored. The algorithm would attempt to resolve the location of MAC addresses that do not appear on an edge port by tagging some trunk ports as edge ports. This may have resulted in a MAC appearing on random trunk ports.
  10. Added/Updated compiled MIBs for:
    • Ixia
    • Cisco UCS
    • Netgear
    • Riverbed
  11. Supported MIB Object stats:
    • 173 Counters
    • 200 Gauges
    • 126 Enumerations
    • 46 Integer
    • 226 Other
    • 771 Total
  12. Compiled MIBs:
    • 3260 MIBs
    • 371052 Objects

Version 15.31   16th October 2015

  1. Operating System: FreeBSD 10.2-p3
  2. Added more columns to the BGP Peer State report
    • Identifier
    • AS Number
    • AS Network Name
    • Updates
    • Messages
  3. Added Cisco Netflow statistics
    • Flows
    • Packets
    • Failed
    • Dropped
  4. Added Cisco Netflow Exporter report
    (Moved from Tools -> Netflow)
    • Router
    • Destination IP
    • Destination Port
  5. Added AKCP temperature status
  6. Added AKCP humidity status
  7. Added Juniper Firewall report
    • Connections
    • Denied packets
    • TCP SYN Attack
    • TCP Sequence
    • Illegal packets
    • No route
  8. Added BlueCat DHCP Subnet stats
    • Subnet IP
    • Netmask
    • Size
    • Used
    • Free
    • Util
  9. Added 'Group Selector' to the 'Add Ping Device' control.
  10. Fixed a problem saving Netflow graphs to PNG/PDF.
  11. Added compiled MIBs for:
    • AudioCodes
  12. Supported MIB Object stats:
    • 173 Counters
    • 195 Gauges
    • 123 Enumerations
    • 45 Integer
    • 225 Other
    • 761 Total
  13. Compiled MIBs:
    • 3191 MIBs
    • 358005 Objects

Version 15.30   9th October 2015

  1. Operating System: FreeBSD 10.2-p3
  2. Added Cisco TCAM reports:
    • Pool Name
    • Total
    • Used
    • Utilisation
  3. Added AKCP sensor reports:
    • Temperature Sensors
    • Humidity Sensors
  4. Added Infoblox DHCP Subnet report:
    • Network Address
    • Subnet Mask
    • Percent Used
  5. Added Infoblox DNS query rate report
  6. Added BlueCat DHCP Pool report:
    • Start IP
    • End IP
    • Pool Size
    • Pool Used
    • Pool Util
  7. Added compiled MIBs for:
    • BlueCat
  8. Added the following MIB tables to skip over during a SNMP walk:
    • BlueCat ADONIS-DNS-MIB.dhcpLeaseTable
    • BlueCat BCN-DHCPV4-MIB.bcnDhcpv4LeaseTable
  9. Added a "Hide Unused Reports" option for the admin user. It is located in the drop down menu on the right hand side of the navbar. This is a licensed feature only.
  10. Supported MIB Object stats:
    • 159 Counters
    • 194 Gauges
    • 123 Enumerations
    • 42 Integer
    • 220 Other
    • 738 Total
  11. Compiled MIBs:
    • 3166 MIBs
    • 350752 Objects

Version 15.29   2nd October 2015

  1. Operating System: FreeBSD 10.2-p3
  2. Added Infoblox DHCP report:
    • Discovers
    • Requests
    • Releases
    • Offers
    • ACKs
    • NACKs
    • Declines
    • Informs
    • Others
  3. Added APC Battery Remaining Time.
  4. Added workaround in the SNMP library for devices which return a TimeTick instead of a Gauge (e.g APC Battery Remaining Time).
  5. Added support in the switch port mapper for the CISCO-IETF-IP-MIB because Cisco IOS does not appear to support the IP-MIB.ipAddressTable.
  6. Enhanced the API assign command to allow assignment of multiple groups in the one command. Refer to the API guide.
  7. Speed up to the Admin -> General -> Switch Port Mapper controls when excluding a large number of VLANs for grouping (eg. 1000+).
  8. Refactored the discover ping scan algorithm to handle a large number of IP range rules. Previously it took one hour to process and scan 600 range rules, and now it takes less than 2 minutes.
  9. Refactored the API commands clear and prune due to performance issues when dealing with a very large number of interface VLAN groups. This resulted in a significant performance speed up.
  10. Added Admin -> Grouping -> Settings controls. New options include:
    • Prune Device Groups
    • Prune Interface Groups
  11. Renamed Cisco -> VPN Sessions to Cisco -> SSL VPN Client Sessions.
  12. The switch port mapper collector now does interface VLAN grouping once an hour if turned on in Admin -> General -> Switch Port Mapper Settings.
  13. Fixed an issue with the Interface Dashboard layout.
  14. Fixed duplicate 'Per X Per X' title in saved PNG/PDF graphs.
  15. Fixed an issue in the discover when reindexing Aruba Access Point Radios after the AP has been replaced.
  16. Fixed several manual grouping issues:
    • Editing a Netflow group would not display any flow meters
    • Could not remove interfaces from an interface group
  17. Added compiled MIBs for:
    • AKCP
    • Cambium networks
    • Force 10
    • Midspan
    • Radlan
    • Watchguard
  18. Supported MIB Object stats:
    • 159 Counters
    • 188 Gauges
    • 121 Enumerations
    • 40 Integer
    • 207 Other
    • 715 Total
  19. Compiled MIBs:
    • 3152 MIBs
    • 350327 Objects

Version 15.28   25th September 2015

  1. Operating System: FreeBSD 10.2-p3
  2. Fixed a serious race condition defect introduced in version 15.27 that can cause database corruption. This can occur if a large number of groups are created (eg. via the switch port mapper settings) while the discover is adding new devices. Additional checks have been added to the database validate and repair functionality.
  3. Fixed a slow memory leak in the HTTP server when serving static documents.
  4. Redesigned the Switch Port Mapper Settings controls to make it faster and simpler to create VLAN interface groups. VLAN interface groups are now automatically created for all selected VLANs and no need to run the auto grouping or discover rewalk.
    Note: There is a known performance issue when selecting large numbers of VLANS to be excluded. This performance issue will be addressed in 15.29.
  5. Added Status Alert Wait functionality. Refer to the help syntax in the Admin -> Alerting -> Status Alerts.
    This feature can be used for the following use cases:
    • Alert suppression if a status transitions from good -> bad -> good states within the wait period. e.g. set a wait time of 5m to suppress Ping Status alerts if a device is unreachable for less than 5 minutes.
    • Delayed alerts to only send an alert if an exception status occurs for longer than a defined period. e.g. set a wait time of 5m to get a Ping Status alert if a device is down for longer than 5 minutes.
    • Escalation to send an alert if an exception status occurs for longer than a defined period.
  6. Added new time filter syntax keywords:
    • startoflastminute
    • startofthisminute
  7. Added "Device Groups" table on the Device Dashboard.
  8. Added "Interface Groups" table on the Interface Dashboard.
  9. Added MAC count to the interface reports.
  10. Added page titles to dashboards to stop confusion.
  11. Added compiled MIBS for:
    • Aruba Clearpass
    • Infoblox
  12. Added Cisco Wide Area Application Services reports:
    Application Optimizer
    • Name
    • Config Status
    • License Status
    • Operational Status
    • Handled Connections
    • Optimized Connections
    • Handed Off Connections
    • Dropped Connections
    • Active Optimized Connections
    • Pending Connections
    • Load Status
    • Bandwidth Optimized
    Application Statistics
    • Name
    • Original Bytes
    • Optimized Bytes
    • Passed Through Bytes
    Policy Map Statistics
    • Name
    • Description
    • Total Connections
    • Total Bytes
    • Total Passed Through Connections
    • Total Passed Throuhh Bytes
    Class Map Statistics
    • Name
    • Description
    • Total Connections
    • Total Bytes
    • Total Passed Through Connections
    • Total Passed Through Bytes
  13. Added Aruba ClearPass Authentication Server:
    Radius Server
    • Success
    • Failure
    • Count
    • Policy Eval Latency
    • Request Latency
    Radius Authentication
    • Source Name
    • Success
    • Failure
    • Count
    • Latency
    Tacacs Server
    • Success
    • Failure
    • Count
    • Latency
    Tacacs Authentication
    • Success
    • Failure
    • Count
    • Latency
    Web Authenication
    • Protocol Name
    • Success
    • Failure
    • Count
    • Latency

Version 15.27   18th September 2015

  1. Updated install ISO to FreeBSD to 10.2-p3.
  2. Drop down menu enhancements:
    • Due to the large number of supported vendors, the Reports drop down menu was going off the screen on small devices (eg. tablets and laptops with low resolution). All drop down menus are now scrollable, which means the sub menus have also been repacked.
    • Added a 200ms delay when hovering off the menu.
    • Moved the Device Editor into the Tools menu.
    • Created a separate Users / Profile menu under the Admin drop down.
  3. Switch Port Mapper enhancements:
    • Added new configuration menu Admin -> General -> Switch Port Mapper
    • Added ability to individually turn off ARP, Bridge and VLAN data collection.
    • Added support for collecting VLAN names and which interfaces are configured for each VLAN
    • Added ability to do a history search on either a IPv4 or IPv6 address.
  4. Alerting configuration enhancements:
    • Muting fix: Previously the code was reading rules in a random order. The intention was that mute rules would come after the corresponding email rule, so that the mute rule overrides it.
    • Allow optional profiles/email addresses to be specified for mute action.
    • Allow multiple profiles/email addresses in email/mute actions.
  5. Single Device Dashboard enhancements:
    • Added a table of device groups the device belongs to.
    • Added hover over tool tip on temperature strip graphs to display both Celsius and Fahrenheit.
    • Pass through selected time filter for Vitals strip graph drill down for consistency.
  6. Events Dashboard enhancement:
    Many customers want to log all IF-MIB.ifOperStatus events but not report them on the dashboard. The Events Dashboard now only displays "warning" events in Events Graph.
  7. Added Device -> Chassis report. The discover will populate the AKIPS database with information from the ENTITY-MIB.
    The new chassis report includes:
    • Model
    • Chassis serial number
    • Software version
    • Hardware version
    • Firmware version
    • Chassis description
  8. Added initial VMWare Host report:
    • CPU
    • Memory
    • Storage
    • Host
      • Product
      • Version
      • Update number
      • Patch number
      • Build number
  9. Added Cisco Airespace reports:
    • CPU
    • Memory
  10. Added Avaya (Nortel) states for:
    • Power Supply
    • Temperature
    • Fan
  11. Added new compiled MIBs for:
    • Arbor Networks
    • IBM
    • Informant
  12. Added "negate" functionality to the AKIPS regex syntax by using a "!" character at the start of the regex. For example:
    • Match everything with a "-ro" /-ro/
    • Do not match anything with a "-ro" /!-ro/
  13. Added "Critical" and "Warning" checkbox options to the Event Report Controls.
  14. Added validation to the "Device Name" field in the Admin -> Discover -> Add Ping Device controls.
  15. Added an "Allow Password Changes" option to the Admin -> Users/Profiles -> User Settings controls.
  16. Speed up when rewalking a single device (e.g. from the Device Editor). It now skips the Ping and SNMP scan steps.
  17. Changed the Unreachable Devices report to display an empty table if no devices are currently unreachable.
  18. Changed Cisco cefcFRUPowerOperStatus alias to include "FRU" to distinguish between CISCO-ENTITY-FRU-CONTROL-MIB.cefcFRUPowerOperStatus and CISCO-ENVMON-MIB.ciscoEnvMonSupplyState.

Version 15.26   4th September 2015

  1. Upgraded the operating system to FreeBSD 10.2-p2.
    Refer to the following FreeBSD security advisory
  2. Added Geist internal sensor reporting:
    • Temperature
    • Humidity
    • Dew Point
  3. Added functionality in the discover/rewalk to reindex Aruba APs/Radios which have been replaced due to hardware failure. Aruba index the APs/Radios in the controller via their MAC address, which obviously changes when it is replaced.
  4. Added functionality in the discover/rewalk to expire old Aruba APs and Radios that no longer exist on the controller.
  5. Added support for CISCO-ENHANCED-MEMPOOL-MIB. Some, but not all, Cisco Nexus boxes use this MIB for memory statistics.
  6. Allow Performance Graphs in the Admin Section to be assigned to a user profile.
  7. Allow Discover Summary report in the Admin Section to be assigned to a user profile.
  8. Moved Altiga SSL under the Cisco reports menu.
  9. Renamed Check Point UDP/ICMP "Connections" to "Sessions". The MIB is misleading because UDP/ICMP are not connection orientated protocols like TCP.
  10. Added CHECKPOINT-MIB.fwNumConn back in. This object was removed in 15.25 because the MIB and SNMP response said it was a Counter, but the actual value returned is a Gauge. A workaround has been applied to the SNMP library to support Counter32BasedGauge32. This is similar to the hack the IEFT created in the HCNUM-TC MIB for CounterBasedGauge64 because there is no ASN.1 type for Gauge64.
  11. Added Netflow ports 2055 and 9995 to the flow collector.
  12. Applied workaround for Cisco PIX firewalls because they can only handle small SNMP requests.
  13. Skip calculating discover statistics when adding a single device. This speeds up the discover.
  14. Fixed a defect in the Events Dashboard where the Status Exceptions were not performing profile filtering.
  15. Fixed a race condition between the Discover/Rewalk and the Tune Interface State script.
  16. Performance speed ups to various API commands that were affecting the Events Dashboard render time in large configurations.
  17. Prevent the Enter Key in the Manual Grouping device regex from submitting the form.
  18. Reverted the HPET timer change in version 15.25 because emulated ACPI-Fast in some VM environments timers appear to be worse than the original HPET issue. When the HPET timer gets stuck, it is only for 128 second, whereas the emulated ACPI-Fast timer gets stuck forever.
  19. Fixed the one second watchdog signal introduced in 15.25. The interrupt signal was not being delivered because the process was blocking all interrupt signals during the usleep().

Version 15.25   19th August 2015

  1. Upgraded the operating system to FreeBSD 10.2-p1
  2. Removed monitoring of CHECKPOINT-MIB.fwNumConn OID because it returns invalid data. fwNumConn is defined in the MIB as a counter, and the snmp response says it is a counter, but it isn't a counter.
  3. Added Checkpoint firewall report:
    • TCP Connections
    • UDP Connections
    • ICMP Connections
    • Packets Accepted
    • Packets Rejected
    • Packets Dropped
    • Packets Logged
  4. Speed up to the ping scan algorithm when handling single IP addresses. Some customers define many (eg. 10000+) individual IPs instead of IP ranges. Previously the rules in the discover were processed sequentially, and single address rules were handled the same as IP ranges, which was not optimal. Single IP rules are now loaded into an array and processed after all IP range rules. This change has reduced the ping scan run time for 10000+ individual IP addresses from 1 hour to around 30 seconds.
  5. Syslog and SNMP Trap Reporter speed up. Some customers are constantly sending up to 500 syslog messages per second to their AKIPS server. The syslog collector and forwarder (ie. fanout) easly handled that amount of workload. In comparison, the reporting tool in prior versions was a bit sluggish.

    The syslog and trap messages are stored in 10 megabyte lumps, which are compressed and appended to daily data files. Due to a design error, the nm-msg-reporter tool was retrieving and uncompressing significantly more data than it actually needed to. Testing has shown an approximate 4 times speedup in reporting performance.

  6. Fixed several issues with the database validate which may cause the backup not to run. A database validate is now run once per day. If any issues are detected, a warning message will appear in the navbar.
  7. Added ability to turn off top navbar. Some customers want to insert an AKIPS URL (eg. a table or graph) into a dashboard which is made up of iframes. The navbar can be removed by simply adding ';navbar=off' onto the end of the URL.
  8. Site Scripting enhancements:
    1. Changed the drop down menu selection so individual functions can be run instead of every function in each category.
    2. Added the 'custom_' function category. These functions are only executed when the Run button is clicked.
  9. Allow the Tools -> Regex Checker to be assigned to a user profile.
  10. Moved Tools -> Command Console to Admin -> API -> Command Console
  11. Fixed a defect in the 'mdelete device *' API command.
  12. Fixed a problem when saving syslog/trap graphs where the saved graph did not match the original because the trim/mute rules were not being passed through when generating the png/pdf graphs.
  13. HPET clock issues on various older platforms.

    It would appear that some platforms have a broken HPET (High Precision Event Timer). We have observed a breakage with the HPET timer in this simple bit of pseudo code in our test lab:

       while (....) {
          gettimeofday (....);
          usleep (10000);
          ....
       }
    
    The usleep(10000) is only suppose to be 10ms long, but very intermittently it gets stuck in there for 128 seconds, which is fairly fatal for a real time monitoring system.

    Several customers have reported false device outages where every device is reported down at the same time. The cause appears to be due to a very intermittent HPET failure. Apparently the HPET design is prone to intermittent race conditions. Refer to page 9 of this VMWare document: Time Keeping in a Virtual Machine

    The following work arounds have been applied:

    1. If an alternate event timer is available (eg. TSC, ACPI-Fast), then HPET is disabled and the alternate is used.
    2. A one second watchdog signal is generated to interrupt any stuck usleep() calls.


Version 15.24   5th August 2015

  1. Operating System: FreeBSD 10.1-p16
  2. Fixed a discover regression introduced in version 15.23 where devices with a SNMPv2-MIB.sysName that contain a fully qualified domain name are reported as duplicate. The problem does not show up if a /home/akips/etc/domains.cfg configuration file has been created. This issue only affects a full discover, not a rewalk.
  3. Fixed a problem in the Syslog Alerting rules to allow the equals character in a regex rule.

Version 15.23   4th August 2015

  1. Upgraded the operating system to FreeBSD 10.1-p16.
    Refer to the following FreeBSD security advisories
  2. Added HP Proliant Blade MIBs
  3. Added HP blade CPU statistics
  4. Added functionality to the SNMP Walk tool so it skips useless parts of the MIB tree. For example:
    • RMON (and friends)
    • Q-BRIDGE-MIB.dot1qVlanCurrentTable
    • OLD-CISCO-SYSTEM-MIB to OLD-CISCO-CHASSIS-MIB
    • CISCO-FLASH-MIB
    This speeds up the SNMP walk and significantly reduces the CPU impact to the end device.
  5. Added CISCO-ENTITY-SENSOR-MIB. Deprecate CISCO-ENVMON-MIB and ENTITY-SENSOR-MIB temperature sensors when duplicate with the CISCO-ENTITY-SENSOR-MIB.
  6. Updated the CISCO-PRODUCTS-MIB and CISCO-ENTITY-VENDORTYPE-OID-MIB.
  7. Added validation to the System Settings "Email Domain" and "Test Email" fields.
  8. Added F5 Node Status.
  9. Added "Device Group" filter to the Events Dashboard.
  10. Added ASN.1 encoding type to the output of the Tools -> Ping/SNMP Walk -> SNMP OIDs. The fields now printed include:
    • v4/v6 IP Address
    • MIB
    • Object
    • Index
    • Object type returned in the packet
    • Object type looked up in the MIB
    • Returned value
    • OID number (i.e. 1.3.6.1.....)
    This helps when comparing what the MIB defines versus what the device actually returns.
  11. Syslog Alerting: Added forwarding specific messages to another syslog collector.
  12. Added the 'warn_event' group for additional Status Exceptions flexibility.
  13. Added fake sysName entry in the configuration database for Aruba APs.
  14. Added disk fragmentation information to Admin -> System Information.
  15. Added nm-timed-watcher. It has been observed that in some VM environments the system clock can sometimes stall or behave oddly. This program constantly checks to see if time is marching on correctly. If it detects time stalled or went backwards, it logs a message in the fatal log.
  16. Added workaround for a defect in Cisco WAAS (Wide Area Application Services) which incorrectly returns a 17 character text string for IF-MIB.ifPhysAddress instead of a correctly encoded 6 byte field. The discover generates a unique fingerprint of each device by using the IF-MIB.ifPhysAddress table. Since the WAAS devices return invalid ifPhysAddress encoding, all WAAS devices were being tagged as duplicate devices and only one could be added. The defect has been reported to Cisco.
  17. Changed the Password field in Admin > Backup controls to conceal the typed in password. The password is not saved as it is only used to setup the initial SSH authentication to the backup server.
  18. Performance speedup to the Event and Device dashboards when processing large volumes of Syslog and SNMP Trap data.

    Some customers are constantly pushing 300+ syslog/trap packets per second to their AKIPS server. This data is stored in 10MB compressed lumps. Each time the Event or Device dashboard refreshed, it had to uncompress and filter large amounts of raw data to generate the syslog/trap graphs. For a last 30 minute report, that would be in excess of 500,000 syslog/trap messages to uncompress/process.

    A new message database has been added that stores the number of syslog/trap messages received each minute for each IP address. The Event and Device dashboards have switched to use this new database to generate the syslog/trap graphs.

  19. Fixed a performance issue processing alert rules which contained weekday syntax. For example: mon to fri 09:00 to 17:00. This would cause high CPU load when processing large volumes of Syslog and SNMP Traps.
  20. Fixed a defect where saving a temperature graph would create a zero length file.
  21. Fixed a defect in the Admin -> SNMP Traps configuration where it could not handle community names with percent characters.
  22. Fixed a defect in the dashboard graphs where you could not drill down on the left hand side of the syslog/traps/event/threshold graphs.
  23. Fixed a race condition with the HTTP server when handling persistent TCP connections and the AKIPS persistent CGI architecture. This issue resulted in mobile Apple devices (iPhone, iPad) being slow to load web page content.

Version 15.22   17th July 2015

  1. Operating System: FreeBSD 10.1-p12
  2. Added Citrix NetScaler Service Group Status.
  3. Syslog / Trap Alerting - Added syntax to match any device, even those not being monitored by AKIPS.
  4. Added a default parent group of spm_exclude to exclude devices in the switch port mapper data collection. The switch port mapper collects address and bridge tables from all monitored devices. Walking very large MIB tables can have a serious CPU impact to some devices. The switch port map data collector now skips all devices which have been assigned to the spm_exclude group.
  5. Updated Aruba MIBs to version 6.4.2.9.
  6. Aruba unprovisioned APs
    The discover would previously add unprovisioned APs as a device, but they would appear as unreachable. These devices were never being removed when they were later provisioned.
    • The upgrade will remove all unprovisioned APs.
    • Unprovisioned APs no longer get added as a device.
    • The rewalk will count the number of unprovisioned APs and display the value in the Reports -> Aruba -> Controller

Version 15.21   16th July 2015

  1. Operating System: FreeBSD 10.1-p12
  2. Added Cisco CPU descriptions from the ENTITY-MIB
  3. Added cancel button to the Ping/SNMP Walk tool
  4. Added new time-filter syntax to allow things like
    • "yesterday; 8:00 to 17:00"
    • "today; 7:00 to 12:00"
  5. The alerting configuration can now take either a profile name or a single email address. For example:
    • time "mon to fri 07:00 to 18:00" * * ping4 PING.icmpState = email TechSupport
    • time "mon to fri 07:00 to 18:00" * * ping4 PING.icmpState = email foo@mydomain.com
  6. Added F5 admin and operational status enumerations
    • Virtual Server Status
    • Pool Status
    • Pool Member Status
  7. Ignore useless Cisco PSU State (cefcFRUPowerOperStatus) of offEnvOther.
  8. Added Ubiquiti Radio Bits Per Second to Radio Statistics table and graphs.
  9. Performance speedup to the poller on large sites (e.g. 10,000 devices, 200000 interfaces). At the start of every minute, the poller saves all its time-series and status values to the underlying database. Typical performance in a VM is approximately 3 million database insertions per second. If it takes longer than one second to save all the values, the poller would not send any pings in that second. The poller has now been split into two separate processes - one that does the polling and another that does the one minute database dump.
  10. Performance speedup to the AKIPS configuration build. Each time the save button in the device editor is clicked, a build command is sent to the config database. The build now only occurs once per minute and has little CPU impact to the server.
  11. Fixed a problem in the switch port mapper where a Cisco formatted MAC address of xxxx.xxxx.xxxx worked for the Search, but not the History.
  12. Fix to the discover for devices with interfaces that contain duplicate ifName values. The discover was not processing the interfaces in the same order each time so the results were inconsistent.

Version 15.20   10th July 2015

  1. Operating System: FreeBSD 10.1-p12
  2. Updated the openssl port to version 1.0.2d - Alternative chains certificate forgery (CVE-2015-1793)
  3. Added Geolocation option to the Netflow reporter. Selecting this option will display a two letter country code of origin. Hovering over the country code will show the full country name.
  4. Added Power supply status CISCO-ENTITY-FRU-CONTROL-MIB.cefcFRUPowerOperStatus for Cisco Nexus fabric extenders.
  5. Added more Check Point firewall reporting
  6. Changed the Interface Errors and Discards TopN graphs to sort by either Tx or Rx.
  7. Changed the TopN selections from 10,20,100,1000,5000 to 10,25,50,100,250,500,1000,5000.
  8. Changed the Status Reporter and drilldowns from the events dashboard, to display child descriptions instead of child name.index. This is required for those vendors who abuse SNMP string indexing.
  9. Threshold alerting - email the value that triggered the threshold.
  10. In the Tools section, the control panels now have many more options when the 'LastN' option is set for 'For'. This allows you to set a start date/time and a useful 'for' period.
  11. Added a child type for Cisco IPSLA. This allows IPSLA grouping.
  12. Allow calling a URL remotely by adding 'username=' and 'password=' options to the URL.
  13. Added Ubiquiti Radio speed graphs
  14. Added Ubiquiti Radio Local/Remote graphs.
  15. Added a mail() function to the Perl Common.pm library to simplify sending emails from within Perl. Refer to the AKIPS API documentation.
  16. Added support for historic Cisco CatOS CISCO-STACK-MIB.portName so it sets the interface title. CatOS does not seem to set IF-MIB.ifAlias.
  17. Added missing Top N graphs for:
    • Aruba ESSID Bits Per Second
    • Aruba ESSID Packets
    • Aruba ESSID Packets Dropped
    • Aruba ESSID Packets Retried
    • Aruba ESSID Tx Packet Errors
    • Aruba ESSID Wired Bytes
    • Eaton UPS Output Load
    • Juniper Laser Current Tx
    • Juniper Laser Temperature
    • NetScaler TCP Active Connections
    • NetScaler TCP Opened Connections
    • NetScaler TCP Byte Volume
    • NetScaler TCP Packet Volume
  18. Added functionality to log the upgrade output.
  19. Speed up to the Unused Interfaces report.
  20. Changed the Admin -> Add SNMP Device controls so if an IP address is specified but the SNMP parameters are left blank, the SNMP parameters from Discover / Rewalk settings are used.
  21. Changed default limit in the Unreachable Devices report to 100.
  22. Fix an issue with the snmp walk that sometimes used identical snmp Request IDs in consecutive GetBulkRequest packets. This causes issues with Cisco Nexus boxes. The situation is difficult to replicate or repeat.
  23. Fixed an issue when quickly adding multiple new devices via the Add Ping Device or Add SNMP Device which would cause the poller to reorder its ping requests to cater for the new devices. A problem with the algorithm would cause a large burst of pings to occur.
  24. Remove devices which have the same MAC address fingerprint. The discover fingerprints each device using its MAC address table. This fingerprint is automatically updated once an hour. In the situation where a config change is done to a device (e.g. add a new line card with new MACs) and a discovery is performed before the hourly fingerprint update, a duplicate device may be added to the AKIPS config. The hourly fingerprint update now automatically removes the newly added duplicate device.
  25. Fixed a regression introduced in 15.18 where the strip graphs in the flow reporter tables did not match the drill down graphs. The strip graphs were incorrect.
  26. Fixed sorting in the Status Reporter tables. When the count was identical, aliases were being sorted in reverse.
  27. Fixed percent usage scale in the Disk Usage Performance Graphs. Percent scale was displayed half of what it should be due to incorrect usage of the df(1) command.
  28. Fixed a problem when doing a restore to a newer version of AKIPS from data created on versions earlier than 15.20. The upgrade functions where not being called to perform any data/config upgrades.
  29. Fixed the usage messages in the command line tools as they did not correctly match the actual functionality.

Version 15.19   26th June 2015

  1. Operating System: FreeBSD 10.1-p12
  2. Recompiled the postfix mail package so it includes SASL/TLS functionality.
  3. Implemented SASL/TLS for SMTP authentication.
  4. A workaround for the FreeBSD OS upgrade where the backup GPT partition table does not always get updated on some platforms, therefore it is reported as 'corrupt' at boot time.
  5. Implemented resizing of virtual disks. This allows a VM to be shutdown and its virtual disk expanded. On reboot, the startup script will automatically update the partition table and file system to use the extra capacity.
  6. Added GPT Status info to the server report.
  7. Added rule to filter out duplicate Cisco fabric MACs.
  8. Added warning messages to the Threshold Alert Settings when a rule is added that does not match any entities.
  9. Fixed graph legend on Firefox and exporting to PDF/PNG.
  10. Fixed a problem in the HTTP server when a HTTP client does not send all HTTP headers. The HTTP server would exit and restart.
  11. Changed the way the discover handles failed IF-MIB SNMP walks of devices.
  12. Changed the SNMP error handling for 'repeated oid'. On v1 devices it is treated as 'end of walk', while on v2/v3 devices it is now treated as a walk failure and considered a defect in the device's SNMP agent.

Version 15.18   19th June 2015

  1. Upgraded the operating system to FreeBSD 10.1-p12.
    Refer to the following FreeBSD security advisories and errata notices
  2. Updated third party ports pcre and freetype due to security advisories.
  3. Updated Perl from 5.16 to 5.22.
  4. Added Perl syntax highlighting to the Admin -> Site Scripting control. This will be extended to other HTML textareas in the future.
  5. Restart ntpd when settings changed in the Admin -> System Settings.
  6. Added ntpd security restrictions to /etc/ntp.conf.
  7. Added a 'Added' column to the Device Summary report. This will show the date the device was initially added by the discover.
  8. Added Bit/sec graph to the Netflow report graphs.
  9. Additional checking to threshold rules to catch syntax errors.
  10. Changed the use of 'Regex' labels to 'Filter' as some customers are shy of regex syntax complexity.
  11. Updated Check Point MIBs.
  12. Added Calix MIBs
  13. Added Check Point IPSO (NOKIA-IPSO) MIBs.
  14. Added Check Point IPSO reports:
    • CPU
    • Fan status
    • PSU status
    • Temperature status
  15. Performance improvements to the way AKIPS databases are sync'ed to disk every 10 minutes.
  16. Added missing threshold aliases for Ping Lost/Duplicate.
  17. Ignore Foundry Fan Status of 'other'.
  18. Fixed a serious issue in the SNMP library when doing an SNMP walk of a device on the same subnet as the AKIPS server and the device becomes unreachable. The SNMP command would spin at 100% CPU.
  19. Fixed UPS Output Source so 'none' is not reported as a fault.
  20. Fixed APC UPS Output Status where 'online' was being reported as a fault.
  21. Fixed AKIPS API for aggregate commands when no entries are found.

Version 15.17   29th May 2015

  1. Operating System: FreeBSD 10.1-p9
  2. Added Fortigate VPN Tunnels report.
  3. Added Cisco ASR QFP report:
    • CPU Load
    • Total Pkts/sec
    • Priority Pkts/sec
    • Non Priority Pkts/sec
    • Total Bit/sec
    • Priority Bit/sec
    • Non Priority Bit/sec
  4. Added Ping/SNMP Walk button to the Single Device Dashboard and the Admin -> Device Editor control.
  5. Added a safety check to ensure the /home file system does not fill up. The AKIPS software is stopped when it hits 95% full. This check is performed once per minute.
  6. Added missing threshold definitions for many monitored MIB objects. All objects which can be defined in the threshold alerting are now displayed in the help text in Admin -> Threshold Alerts.
  7. Changed the way AKIPS logs internal performance statistics about itself. Previously stats were logged to disk every second which would cause an approximate constant two percent disk usage. The stats are now written to disk once every 10 seconds.
  8. When testing local scripts in the Admin -> Site Scripting control, script errors were being written to the CGI error log. These errors are now displayed in the browser when the Test button it clicked.
  9. Fixed a problem renaming devices and groups to the same name but with different case. Device and group names are case insensitive, which meant they could not be renamed with a different case (e.g. the command "rename device router1 Router1" did not work.
  10. Fixed various column titles in reports.
  11. Fixed a problem in the AKIPS HTTP server when handling very long URLs. The HTTP server will now handle GET requests up to 128 KB.

Version 15.16   19th May 2015

  1. Operating System: FreeBSD 10.1-p9
  2. Added Eaton UPS reports
    • Model
    • Software Version
    • Input Source
    • Output Source
    • Output Load
    • Battery Voltage
    • Battery Current
    • Battery Capacity
    • Battery Status
    • Phase Input Voltage
    • Phase Input Current
    • Phase Input Power
    • Phase Output Voltage
    • Phase Output Current
    • Phase Output Power
    • Temperature
    • Humidity
  3. Added APC UPS objects
    • Model
    • Firmware Version
    • Output Status
  4. Fixed a defect in the Site Scripting where the daily schedule was being called once per second. This causes the number of forked processes to be ~200 per minute instead of less than 10. The number of forked processes can be displayed in the Admin -> Performance Graphs -> System.
  5. Fixed a defect when selecting large numbers of interfaces in the Interface Graphing tool. The number of URL key/value pairs was exhausting a maximum value that was set too low. This resulted in the zoom out functionality of an aggregated graph to fail.
  6. Fixed a defect in the AKIPS error logging library when logging long error messages. This would cause the http server to exit and restart.

Version 15.15   15th May 2015

  • Operating System: FreeBSD 10.1-p9
  • Added interface graph aggregation.
  • Added Ubiquiti radio reports:
    • Ethernet
      • Bytes
      • Packets
      • Broadcast Packets
      • Multicast Packets
    • GPS
      • Latitude
      • Longitude
      • Altitude
      • Visible Satellites
      • Tracked Satellites
    • Radio Config
      • Software Version
      • Admin Status
      • Operation Status
      • Operational Mode
      • Duplex
      • Radio Temperature
      • Radio Frequency
      • Radio Speed
      • Local Tx Power
      • Local Tx Modulation
      • Remote Rx Power
      • Remote Tx Modulation
      • Remote MAC Address
      • Remote IP Address
      • Link Name
    • Radio Statistics
      • Bytes
      • Packets
      • Local Rx Power
      • Remote Rx Power
  • Added command line program nm-discover-device which allows single device discovery.
    The command line parameters are:
    nm-discover-device {ip address or range}
                       [version 2 community {community}]
    
    nm-discover-device {ip address or range}
                       [version 3 user {snmp user}
                        md5|sha {authpasswd}
                        des|3des|aes128|aes192|aes256 {cryptpasswd} ]
  • Added single SNMP device discovery GUI to the Admin Discover section.
  • Added a rewalk button to the Admin -> Device Editor to rewalk a single device.
  • Added Test Email functionality to the Admin -> System Settings controls.
  • Added graph size option to the graph reporters.
  • Added ability to customise the graph title when saving as a PDF or PNG image. This is useful when aggregating many interfaces onto a single graph and the user wants to set a custom graph title.
  • Applied a workaround for Ubiquiti devices which return a SNMPv1 error code of noSuchName to indicate it has reached the end of its MIB tree during a walk. Ubiquiti devices use BusyBox (a Linux based distribution for embedded applications) and a poorly written SNMP agent called tinysnmp.
  • Added missing VMWARE-CIMOM-MIB.
  • Fixed the installation when installing on physical hardware that contains a LSI 6Gbs/12Gbs raid controller so the correct driver is used during installation and after booting, otherwise disk read/write performance is terrible.
  • Fixed a possible race condition in the Admin -> System Settings which could clobber contents of /etc/rc.conf. There was no coordinated locking between the CGI and the back end program that updated rc.conf.
  • Changed NetScreen VPN RTT resolution from milliseconds to microseconds and added graph scale.
  • Disable backup/restore GUI if no valid licence key exists.
  • Added hardware PCI and USB configuration to the Admin > System Info report.

    Version 15.14   7th May 2015

    1. Operating System: FreeBSD 10.1-p9
    2. Fixed a serious database issue when renaming reports. This problem was discovered during internal regression testing.
    3. Fixed a rounding issue in the adaptive polling algorithm when dealing with SNMP counters (e.g. ifInErrors) that increment by 1 or 2 in a polling cycle.
    4. Fixed an issue decoding Netflow V9 records from Cisco ASA firewalls.
    5. Added Fortinet reports
      • CPU
      • Memory
      • Storage
      • Sessions
      • SSL Status
    6. Added script scheduling to the Admin -> Site Scripting. This allows site specific Perl functions to be run every
      • 1 minute
      • 5 minutes
      • 1 hour
      • 1 day
    7. Renamed Enterasys reports to Extreme
    8. Added refresh timer to Interface Dashboard
    9. Fixed an issue with reverse sorting of zero values in tables
    10. Fixed an issue with the Device Dashboard where multiple devices were being displayed

    Version 15.13   18th April 2015

    1. Operating System: FreeBSD 10.1-p9
    2. Added ping graphs to the device dashboard.
    3. Fixed an OS upgrade issue for Hyper-V installations when the same disk is presented as both a SAS and SATA disk at the same time.
    4. Added workaround for devices which return modified ping echo data. AKIPS sends echo requests with a specific payload. When an echo reply is received, the ping scan validates both the size and contents of the payload. Some devices pad the payload out with NULs, so the ping scan was dropping those responses due to size mismatch.
    5. Set all temperature graph scales to the same on the device dashboard.

    Version 15.12   9th April 2015

    1. Upgraded the operating system to FreeBSD 10.1-p9.
      Refer to the following FreeBSD security advisories
    2. Added single interface dashboard. This is currently only accessed via any interface report drilldown and the switch port mapper.
    3. Sort enumerated status reports by their good and bad states. This fixes sorting of VRRP states.
    4. Added Juniper Control Board temperature to the discover
    5. Added Juniper Routing Engine CPU/memory/temperature to the discover
    6. Ignore Juniper temperature sensors which return 0
    7. Ignore Cisco voltage/temperature states of 'notPresent'
    8. Added last 60 and 180 days to the Unused Interfaces report. Also treat the interface as unused if no ifOperStatus change has occurred since the device was initially added.
    9. Fix SNMP Trap Alerts when matching on snmpTrapOID.
    10. Renamed Cisco SSL report to Cisco IKE
    11. Fixed the top navigation bar so it collapses on smaller screen resolutions like on iPad.
    12. Fix HP/Compaq grouping

    Version 15.11   27th March 2015

    1. Operating System: FreeBSD 10.1-p8
    2. Added Multi Select group option to all reporting controls. By selecting Multi Select, the GUI changes from a single select to multi select control. The backend allowed multiple groups to be logically AND'ed together, but the previous GUIs only had a single select option.
    3. Unused Interfaces Reporter - treat interfaces in the state of "notPresent" as unused. This is required for Cisco Nexus and Arista when no SFP module is present.
    4. Changed the description column in the F5 Member Pool stats to include the partition name.
    5. Added HP Power MIB
    6. Interface Graph Reporter - added Transmit and Receive graph types for each of Util, BPS, Bytes, Packets, Errors, Discards, Broadcasts, Multicasts.
    7. Added ifSpeed to the Single Device Dashboard interface table
    8. Added a workaround for Brocade switches which would report a power supply status failure even when the PSU was not present.
    9. Fixed the Operating System upgrade for Microsoft Hyper-V installs where the virtual disk is presented to the operating system as both an emulated SATA and SCSI disk at the same time.
    10. Fixed a problem in the Ping/SNMP Walk tool for doing packet capture of SNMP walks when the response packets were fragmented. It was observed that when walking Huawei and Extreme switches for VLAN membership information, the resulting MIB objects were over 1500 bytes and were therefore sent as fragmented IP packets.

    Version 15.10   23rd March 2015

    1. Upgraded the operating system to FreeBSD 10.1-p8.
      Refer to the following FreeBSD security advisory
    2. Added Radware reports:
      • CPU
      • Memory
      • Fan status
      • PSU status
      • Temperature status
    3. Added "All Objects" and "Interface Tables" to the MIB Selector in the Network Tools controls.
    4. Added VRRP (Virtual Router Redundancy Protocol) report and alerting
    5. Added an "edit" button from the new Single Device Dashboard to the Device Editor
    6. Added initial Cisco VRF Lite report
    7. Added time filter controls to the Device Dashboard
    8. Display interface Up/Down counts in the Device Dashboard
    9. Fixed Cisco IPSLA graphs so the correct scale is displayed
    10. Fixed a defect in the time-series average calculations that affected temperature calculations in the Single Device Dashboard

    Version 15.9   18th March 2015

    1. Operating System: FreeBSD 10.1-p6
    2. Added initial single device dashboard
    3. Added link from most reports to the new single device dashboard
    4. Added Cisco HSRP State reports and alerting
      • Router
      • Virtual IP
      • Active IP
      • Standby IP
      • Current State
      • Time of last change
    5. Added Cisco NBAR report
      • Protocol
      • Bytes
      • Packets
    6. Added Cisco IPSLA RTT and Jitter
      • Index
      • Owner
      • Tag
      • Type
      • Protocol
      • Target IP
      • Current Status
      • NTP Status
      • RTT in microseconds
      • Jitter in microseconds
    7. Added Palo Alto temperature reports
    8. Added HP Temperature reports
    9. Added Arista Temperature reports
    10. Added Enterasys Temperature reports
    11. Added generic memory reports
    12. Fixed Tripp Lite sysLocation. Populate sysLocation with the value from tlUpsAlarmLocation.
    13. Don't report battery temperatures for Tripp Lite UPSs which always return 0.
    14. Fixed drilldown graph title from the TopN Graphs
    15. Fixed NetScaler Virtual Client and Server graph titles
    16. Adjusted the Availability report to accommodate long group and device names.
    17. Removed "nowrap" from textareas due to bugs in Firefox and IE.
    18. Removed the fstat(1) debug information from the server logs due to a race condition in the FreeBSD kernel. 'fstat -m' can go into a continuous loop which chews up 100% of a CPU core. The problem will be fixed in FreeBSD 10.2.

    Version 15.8   6th March 2015

    1. Operating System: FreeBSD 10.1-p6
    2. NOTE: This is a complete OS upgrade because additional packages have been added to the installation. This will also bring all installations up to FreeBSD 10.1-p6.
    3. Added Juniper Firewall Filters
      • Filter
      • Name
      • Type
      • Packets
      • Bytes
    4. Added Juniper Switch Stack Status
      • Stack number
      • Model
      • Software version
      • Serial number
      • MAC Address
      • Role
    5. Significant performance improvements to database processing in large configurations. (e.g. 10k devices and 200k interfaces running in a VM and SAN backend storage).
    6. Added workaround for vendor devices which return invalid values for MIB objects with a type of InetAddress. Some vendors return a text string instead of a binary encoded IPv4 or IPv6 address.
    7. Further improvements to handle devices which do not correctly handle SNMP GetBulk Requests.
    8. Added device regex to the Ping/SNMP Walk tool.
    9. Added workaround for interfaces that report an ifOperStatus of "dormant", when in fact that are "up".
    10. Added a "Restart Software" button to the Admin -> Shutdown menu.
    11. The Admin -> System Info now displays a value for memory speed performance.
    12. Fixed the Graph Reporter drilldown behaviour.
    13. Fixed the reverse column sort on the Flow Report Unknown Port report.
    14. Fixed an problem installing on a system which contains multiple disks.
    15. Fixed various syntax errors in Cisco wireless MIBs.

    Version 15.7   26th February 2015

    1. Upgraded the operating system to FreeBSD 10.1-p6
    2. Added initial Tools -> Interface Graphing control panel
    3. Added Meru wireless MIBs
    4. Automatically adjust the width of the Performance Graphs to the width of the browser window.
    5. Netflow Reporter can now graph totals for an exporter. Deselect the checkboxes Protocol, Source and Destination to display this report.
    6. Workaround for Citrix NetScaler devices which do not adhere to the SNMP GetBulk protocol.
    7. Fixed an error in the configuration database where all devices could not be deleted using the mdelete command if the device naming scheme had been changed between sysName and IP Address.

    Version 15.6   17th February 2015

    1. Operating System: FreeBSD 10.1-p5
    2. Added a new graphing tool under Tools -> Graphs. This allows you to graph a single MIB Object type across many devices or interfaces.
    3. Added ADSL TopN graphs
    4. Added generic temperature reports
    5. Added initial device editor in Admin section
    6. Added Citrix NetScaler TCP Connections
      • Current client connections
      • Current server connections
      • Opened client connections
      • Opened server connections
      • Tx/Rx Bytes
      • Tx/Rx Packets
    7. Added Citrix NetScaler Service Group Members
      • Current client connections
      • Tx/Rx Bytes
      • Tx/Rx Packets
      • Number of requests
      • Number of responses
    8. Added Tripp Lite environment sensors
      • Temperature
      • Temperature Alarm
      • Humidity
      • Humidity Alarm
      • Contact Name
      • Contact Status
    9. Updated vendor MIBs
      • Checkpoint
      • Arista
    10. Fixed a GUI performance issue with the Switch Port Map Reporter when loading large data sets. The reporter was not utilising the AKIPS persistent CGI technology correctly. Report generation is now significantly faster.
    11. Fixed many syntax errors in the Citrix Netscaler NS-ROOT-MIB
    12. Fixed various column sorting errors
    13. Fix to allow percent characters in SNMP community names
    14. Fixed a problem in the SNMP walk tool where the background tcpdump was being terminated before it had finished processing all captured packets. tcpdump has a hard set one second blocking read timeout on the BPF device and killing the tcpdump would sometimes leave unprocessed packets in the BPF buffer. The walk tool now waits two seconds before terminating the tcpdump process.

    Version 15.5   10th February 2015

    1. Operating System: FreeBSD 10.1-p5
    2. Fixed missing graph data due to a defect in the Adaptive Polling algorithm.

      In AKIPS we have the concept that all MIB objects are polled at a single rate of 60 seconds. This significantly simplified the design of the poller and time-series database. Two techniques are used to significantly reduce the overall SNMP traffic:

      • Adaptive Polling Rate (Per MIB Object)
      • Interface State Tuning

      The adaptive polling rate algorithm detects either:

      • a gauge which constantly returns the same value (e.g. temperature)
      • a counter that constantly returns a delta value of zero (e.g. ifInOctets, ifInErrors)

      When either of these conditions occur, the poller backs off to 120 seconds, and then to 180 seconds. If the gauge or counter changes, then the polling rate is immediately ramped back up to 60 seconds. This algorithm is applied to every monitored gauge and counter. Every 60 seconds, the Interface State Tuning checks the ifOperStatus of every interface. It turns polling on/off for all counters/gauges for each interface depending on its current state.

      A problem was discovered where the Interface State Tuning was disrupting the Adaptive Polling algorithm. This disruption would randomly cause objects which where being polled at 180 seconds to have their responses ignored. For example, interfaces which run zero discards for long periods and then have a burst of discards in a single minute.

    3. Polling issues with Cisco Nexus switches:

      A problem with Cisco Nexus switches was reported where utilisation graphs would display large positive and negative spikes. Additional validation checks and logging has been added to the poller to detect when devices return unexpected responses. Some devices return MIB objects that were not requested, or in a different order than they were requested in.

    4. Added Citrix NetScaler Virtual Server objects and report
      • Name
      • IP Address
      • Port
      • Type
      • State
      • Entity Type
      • Current client connections
      • Current server connections
      • Number of requests
      • Number of responses
      • Tx/Rx Bytes
      • Rx/Rx Packets
    5. Added standard UPS-MIB objects and reports
      • Input Voltage
      • Input Current
      • Output Voltage
      • Output Current
      • Output Power
      • Output Percent Load
      • Output Source
      • Battery Voltage
      • Battery Current
      • Battery Status
      • Seconds on battery
      • Battery Temperature
      • Estimated time remaining
      • Estimated charge remaining
    6. Added APC Automatic Transfer Switch objects and report
      • Model Number
      • Serial Number
      • Firmware Revision
      • Output Phase Index
      • Output Voltage
      • Output Current
      • Selected Source
      • Over Current State
      • Redundancy State
    7. Added Last Changed to the BGP Peer Status report. Default sort is now by most recent state change.
    8. Added total column to the Juniper memory report.
    9. Added generic CPU TopN graphs.
    10. Hide the 'host' column in Server Processes and Users reports.
    11. Update the installation guide to include Microsoft Hyper-V as a known working VM platform.
    12. Increased the number of displayed lines in the System Log Viewer for brief from 30 to 100 lines.
    13. Fixed scheduled discover/rewalk when set to Midnight. The discover/rewalk was not being performed.
    14. Fixed problems in many reports when sorting by different columns. The expected data was not being correctly displayed.
    15. Fixed a regression from 15.4 where F5 and H3C reports resulted in fatal CGI errors.

    Version 15.4   6th February 2015

    1. Operating System: FreeBSD 10.1-p5
    2. Added Email Domain to Admin -> System Settings. Some customer sites don't accept email in the form of akips@{hostname}.{domainname}. This option allows you to set the address to simply akips@{domainname}.
    3. Added Tripp Lite UPS MIB.
    4. Added BGP4 report:
      • Local IP Address
      • Remote IP Address
      • BGP Admin State
      • BGP Peer State
      • Time of last change
    5. BGP Status Alerting can be configured for Peer State changes.
    6. Added generic device CPU reporting. This is a combined report for all server and vendor specific CPU utilisation reports.
    7. Added Cisco switch stack membership status reports. Status alerts can be configured when the switch role (master/member) or state changes.
    8. Added Cisco switch stack status report:
      • Model
      • State
      • Standby State
    9. Cisco switch stack status alerting can be configured for both Module State and Module Standby State.
    10. Added native MIB and SNMP support for utf8String object types. This is required for Juniper devices which implement the SYSAPPL-MIB.
    11. Added event drilldowns to unreachable devices on the Event Dashboard.
    12. Added Existing SNMP Parameters to the Discover / Rewalk controls. This lists the current SNMP parameters being used.
    13. Updated installation and upgrade guide
    14. Added validation to the System Settings NTP input fields
    15. Fixed a regression in 15.3 for the Event Dashboard where it was not filtering on the log_event group.
    16. Fixed Event Dashboard Status Exceptions drilldowns
    17. Fixed unreachable devices column sorting
    18. Fixed summary column sorting

    Version 15.3   30th January 2015

    1. Upgraded the operating system to FreeBSD 10.1-p5.
      Refer to the following FreeBSD security advisories:
      AKIPS supports both Unreliable Netflow (UDP) and Reliable Netflow (SCTP).
    2. Changed the AKIPS licence key format. New licence keys will be distributed to customers.
    3. AKIPS now requires the server to be configured with a fully-qualified hostname to operate correctly (i.e. hostname.domainname).
    4. Added interactive device regex to various reporting tools:
      • Status reporter
      • Event reporter
      • Interface reporter
      • SNMP Trap reporter
      • Syslog reporter
      • Switch Port Map reporter
      • Unused Interfaces reporter
      This is an important usability feature. As you type a regex filter, the device list is automatically updated with matching devices. The same functionality applies to the interface list in the Interface Reporter.
    5. Event reporter
      • Added device summary table
      • Added drilldown links to summary tables
      • Display events/threshold selector in human readable format
      • Display object alias instead of MIB.Object
    6. Improvements to Status reporter summary table
      • Fixed drilldown link for better filtering support
      • Added "Total" column when "any status" is selected
      • Sort "any status" summary table alphabetically
      • Display all statuses on summary table, including those without faults
    7. Added Top Listeners to the Netflow Dashboard.
    8. Added Aruba controller report
      • Number of Stations
      • Number of Access Points
    9. Added F5 Fan and PSU status
    10. The AKIPS HTTP server supports both HTTP and HTTPS protocols. The default AKIPS installation creates a self signed SSL certificate in /home/akips/etc/httpd.crt. The HTTP server now automatically reloads SSL certificate if the customer installs their own signed certificate.
    11. Added new compiled MIBs:
      • AVTECH
      • Lantronix
      • Sensaphone
    12. Latest version of parsed RFC/Vendor MIBs available at http://www.akips.com/downloads/akips_mibs.txt
    13. Added syntax checking to the Admin -> Flow Meter Settings controls.
    14. Renamed Admin > Configuration Scripting to Site Scripting.
      The site scripting functionality is currently used for customer specific post discover configuration and grouping configuration, but will also soon be used for customer specific alert scripting.
    15. Added SNMP polling debug facilities to assist AKIPS Technical Support in identifying faulty interface counters in various vendor switches/routers. Many devices return invalid counter values due to bugs in their SNMP implementations. Some of the known problems include:
      • Counters with ridiculous values
      • Counters going backwards
      • Counters returning negative values
      This feature allows the capture and logging of any specific polled Counter, Gauge, Enumeration or TimeTicks by the poller, instead of having to perform manual SNMP walks of devices.
    16. Added Top history to the Admin -> System Info controls
    17. Changed the report refresh counter so it is restarted after the report has completely been refreshed.
    18. Fixed a problem in the poller where it was not detecting if the SNMP Engine ID changed on a device. The poller would still expect the old engine ID.
    19. Fixed an error in the monthly calendar style graphs if the average was set to a value greater than 1 hour.

    Version 15.2.1   16th January 2015

    1. Upgraded the operating system to FreeBSD 10.1-p4.
      Refer to the FreeBSD security advisory
    2. No other changes since version 15.2.

    Version 15.2   14th January 2015

    1. Operating System: FreeBSD 10.1-p3
    2. Fixed SNMP authentication errors in the Switch Port Mapper.
      The Switch Port Mapper retrieves communities from ENTITY-MIB.entLogicalCommunity to walk the bridge tables for different vlans. A bug in the compiled MIBs prevented these communities from being decoded correctly.
    3. Ignore ARP table entries in the Switch Port Mapper where a router has incorrectly added an ARP entry that does not belong to any of its subnets.
    4. Fixed the discover where duplicate sysNames with different upper/lowercase were not being detected.
    5. Fixed Cisco Fan State where fans not installed were being reported as errors.
    6. Display the sample period on a graph when saving as PNG/PDF.
    7. Added drilldown links to "Impact Assessment" table on the Events Dashboard.
    8. Fixed "Impact Assessment" table double counting a device if both its IPv4 and IPv6 addresses were unreachable.
    9. Fixed deleting a Netflow meter from "Netflow Meter Settings" if the meter was not running.

    Version 15.1   5th January 2015

    1. Operating System: FreeBSD 10.1-p3
    2. Fixed several important issues with the discover.
    3. Fixed missing dashboard graphs (regression from version 14.3).
    4. Fixed a serious problem where the AKIPS databases were not being correctly expanded.
    5. Added "Device Regex" field to the Tools -> Devices control panel.
    6. Added "Device Regex" and "Interface Regex" fields to the Tools -> Interfaces control panel.

    Version 14.3   24th December 2014

    1. Operating System: FreeBSD 10.1-p3
    2. Upgraded the operating system to FreeBSD 10.1-p3
      Refer to the FreeBSD security advisories:
    3. Fixed a serious problem in the AKIPS databases where the software detects an underlying corruption and stops. This was caused by a coding error.
    4. Changed the behaviour of the discover for detecting duplicate devices. The discover previously pruned invalid MAC addresses, then checked if two devices contained the same MAC, and discarded duplicates. The problem with this is many programmers at <insert your network vendor here> do silly things like use the same MAC -

      • across every management interface
      • when used in some type of redundancy arrangement
      • for some special purpose interfaces
      • etc...
      The discover now only removes devices which contain all identical MACs.

      NOTE: The discover will print out a list of duplicate MAC addresses found on your network. Please report these to AKIPS tech support. We still need to prune these MACs from the switch port mapper data.

    5. Device fingerprinting using interface MAC addresses is updated hourly.
    6. Device IP tables are now retrieved hourly instead of once a day. These tables are used by the Trap and Syslog reporter to determine where the traps/syslog messages came from.
    7. Fixed the Switch Port Mapper so it collects IPv4 ARP tables atomically. A problem was found at a customer site where the router contained very large ARP tables and ARP entries were being aged while the switch port mapper was performing its data collection. The AKIPS switch port mapper walks two specific MIB objects in the IP-MIB which means the collection was not atomic, therefore it may have picked up the IP address, but not the MAC address if the entry was aged out. IPv6 address collection was not affected because it is specially handled within the AKIPS SNMP implementation and was already atomic.
    8. Massive speedup to the switch port mapper data processing. It was observed that when processing MAC/SwitchPort/IP information on networks with large netmasks (e.g. 255.255.0.0), the size of the bridging tables could be excessive. This caused the switch-port-mapper collector/processor to consume unnecessary amounts of CPU.
    9. Changed the /home/akips/etc/ip2name.cfg file from space delimited to comma delimited. This file contains all the IPv4 and IPv6 addresses on every device being monitored by AKIPS.
    10. Added some more APC Integrated Environment Monitor Sensors.
    11. Added "Save Graph" functionality to the Netflow graphs.
    12. Fixed a problem in the Admin -> System Settings for IPv4 and IPv6 DNS configuration. It did not work as expected.
    13. Fixed a problem when changing the naming scheme from sysName to IPAddress in the Admin -> Miscellaneous section. Devices were not being renamed to their IP address. This was an introduced defect.
    14. Fixed a problem discovering individual machines in Linux clusters which run NET-SNMP. SNMP packets sent to each physical machine were being returned via a single virtual IP address which was confusing the discovery algorithm. This was observed in a customer site with ~60 machines in the cluster.
    15. Fixed a problem saving Event graphs.
    16. Fixed a problem saving Syslog and Trap graphs.
    17. Fixed a problem removing old Netflow Exports after a rewalk.
    18. Added RioRey device identification for grouping.
    19. Added CPU descriptions for Servers, Arista, Check Point and Palo Alto.
    20. Added 'Last Change' column to the Interface Configuration report.
    21. User settings - obscured the user password with '*******'.
    22. Excluded ZFS arc cache memory usage in the total memory usage graphs as it was deceptive. ZFS memory cache usage is displayed in a separate graph.

    Version 14.2.3   15th December 2014

    1. Operating System: FreeBSD 10.1-p1
    2. Fix a bug in the discover ping ranges. When using certain netmasks an error message would be incorrectly displayed:
      skipping rule a.b.c.d/mask because its calculated runtime of XXXX seconds will exceed the limit of X seconds
      The problem appeared when using a mask that is not a multiple of 8. /24 works fine, but /25, /26, and /27 may sometimes fail with a bogus message.

    Version 14.2   12th December 2014

    1. Operating System: FreeBSD 10.1-p1
    2. Upgraded the operating system to FreeBSD 10.1-p1
      Refer to the FreeBSD security advisories:
    3. Added new Backup / Restore functionality. Features include:
      • Secure SSH data transfer to backup server
      • Incremental backup only copies files which have changed. This significantly reduces the runtime, network bandwidth and computing resources.
      • Runs every 80 minutes, after the 80 minute database processing has completed
      • Backup only runs if the file system and databases pass all integrity tests
      • Backup logs accessed via the System Log Viewer
    4. Added threshold alerting
    5. Discover now auto scrolls its output
    6. The upgrade now auto scrolls its output
    7. SNMP Walk tool now auto scrolls its output
    8. Changed the LastN / Date selection in the reporting tools. Alert if the user selects the 'For' option without a date selection.
    9. Added Disk Usage Performance Graphs to the Admin -> Performance Graphs
    10. Discover now ignores duplicate Juniper NSRP MAC addresses
    11. Added Juniper Laser and Temperature MIB objects
    12. Added interface group selector to the Unused Interface reporter
    13. Applied work around for ZFS bug in FreeBSD 10.1 where file modification are not updated for mmap'ed database files.
    14. Display time range on Netflow Dashboard
    15. Added the ability to use silly Cisco MAC address format of xxxx.xxxx.xxxx in the Switch Port Mapper reporter.
    16. Bug fix - prevent admin user being added to a profile
    17. Added ability to graph negative values (required for Juniper laser dB levels)
    18. Added Symbol Wing wireless MIBs
    19. Fixed a problem in the F5 Global Client tables

    Version 14.1   20th November 2014

    1. Operating System: FreeBSD 10.1-RELEASE
    2. Upgraded the operating system to FreeBSD 10.1 RELEASE
      Refer to the FreeBSD Release Notes
    3. AKIPS previously limited the amount of memory the ZFS cache would consume because it was extremely aggressive. These limits have been removed for FreeBSD-10.1 as the problem no longer exists. After the upgrade to 10.1, ZFS will consume more physical memory than previously.
    4. Replaced the manual profile controls
    5. Added per user alert muting functionality
    6. Added option in the SNMP walk tool to ignore protocol errors (e.g. recursive MIB errors)
    7. Added device controls to the Unreachable Devices report
    8. Added Juniper power supply state
    9. Added refresh timer to the Status Reporter
    10. Added Generex UPS MIB
    11. Added gzip, MD5 and SHA1 performance tests for the server report diagnostics
    12. Updated GUI CSS/Javascript framework
    13. Performance speed up to the syslog/trap database. Blocks are now stored in compressed 10MB chunks instead of 1MB. This significantly reduces on disk file fragmentation.
    14. Sanitise ifDescr in the discover because some device return odd characters
    15. Added workaround for older Cisco ASA and Nexus devices which use a tiny SNMP packet buffer size.
    16. Fixed the Interface Reporter when a regex was applied and then removed
    17. Fixed the sort order in the switch port mapper reporter
    18. Fixed truncated labels on the Netflow Dashboard graph labels
    19. Fixed logging of SNMP Traps and syslog messages for free versions of AKIPS. Traps and syslog logging for free versions was broken in version 14.0.3135.
    20. Fixed pruning of Netflow data. This appear to have been broken since the first release of AKIPS in May 2014.
    21. Fixed an issue discovering Cisco ASA devices with duplicate MAC addresses

    Version 14.0.3197   7th November 2014

    1. Operating System: FreeBSD 10.0-p12
    2. Fixed an issue in the syslog and trap reporting tools when resolving the device names. The trap/syslog reporters use a ip2name config file which is created by the discover/rewalk. Each entry in this file has an expiry time of 7 days. If no scheduled rewalk is performed, then these entries were aged out. A fix has been implemented where AKIPS retrieves the IP tables once a day.
    3. Fixed an issue with the syslog alerting where the same syslog message was being included twice in the email alert. This was caused by some Cisco devices which include a newline at the end of the syslog message and AKIPS was not handling it. RFC3164 (authored by Cisco) section 4.1.3 states that syslog messages can only contain printable characters from decimal 32 to 126 (i.e. space through to tilde).
    4. Added functionality to the switch port mapper collector to exclude virtual addresses (e.g. Cisco HSRP).
    5. Added a 'not' keyword to the time filter.

      For example, in the Tools -> Command Console, try the following:

      tf dump "last1w; mon to fri 8:00 to 17:00; sat 8:00 to 12:00;"
      span    2014-11-02 00:00:00 to 2014-11-08 23:59:59
      include 2014-11-03 08:00:00 to 2014-11-03 17:00:00
      include 2014-11-04 08:00:00 to 2014-11-04 17:00:00
      include 2014-11-05 08:00:00 to 2014-11-05 17:00:00
      include 2014-11-06 08:00:00 to 2014-11-06 17:00:00
      include 2014-11-07 08:00:00 to 2014-11-07 17:00:00
      include 2014-11-08 08:00:00 to 2014-11-08 12:00:00
      
      tf dump "last1w; not mon to fri 8:00 to 17:00; not sat 8:00 to 12:00;"
      span    2014-11-02 00:00:00 to 2014-11-08 23:59:59
      include 2014-11-02 00:00:00 to 2014-11-03 08:00:00
      include 2014-11-03 17:00:00 to 2014-11-04 08:00:00
      include 2014-11-04 17:00:00 to 2014-11-05 08:00:00
      include 2014-11-05 17:00:00 to 2014-11-06 08:00:00
      include 2014-11-06 17:00:00 to 2014-11-07 08:00:00
      include 2014-11-07 17:00:00 to 2014-11-08 08:00:00
      include 2014-11-08 12:00:00 to 2014-11-08 23:59:59
      

    Version 14.0.3181   5th November 2014

    1. Operating System: FreeBSD 10.0-p12
    2. Upgraded the Operating System to FreeBSD-10.0-p12
      Refer to the FreeBSD security advisories:
      FreeBSD-10.1 is currently in its release cycle and expected to be release in mid November.
      AKIPS development will perform final testing on 10.1 when it is released.
    3. Fixed a critical issue with the Trap and Syslog database and alerting. Both the database and alerting processes were incorrectly reading from the same Unix FIFO pipe. A FIFO can have only one reader process so it was a race condition on which process would receive the trap/syslog message.
    4. Fixed several daylight saving issues with the interactive graphs.
      • USA: The weekly graphs would display the "Sunday" label twice.
      • Queensland: No problem because we don't have daylight saving.
      • Australia: The interactive graph controls (i.e. next/prev/lastn) were messed up and gave unexpected results.
    5. Fixed an issue where a user's email address could not be deleted from the user settings.
    6. Fixed an issue in many vendor specific reports where clicking on the "Device" header produced unexpected table output.
    7. Added time filter to the Syslog alerting rules.
    8. Added time filter to the SNMP Trap alerting rules.
    9. Added missing device controls to many vendor reports.
    10. Added device description to the device unreachable report.
    11. Added an Interface Configuration report under Reports -> Interfaces.
    12. Massive speed up to the Admin -> Discover Summary.
    13. Fixed the default sort for the device unreachable report.
    14. Fixed an issue when switching between user profiles right after adding a new user. An error message of "Unix user already exists" was being incorrectly displayed.
    15. Fixed and issue in the Status Exceptions where the drilldown was displaying more information then expected.
    16. Fixed an issue in the discovery of Aruba access points at some customers sites.
      Note: There are many different ways the Aruba controllers can be configured. Please raise any discovery issues with AKIP Tech Support

    Version 14.0.3135   31st October 2014

    1. Operating System: FreeBSD 10.0-p11
    2. NOTE: After the upgrade, perform a Rewalk to pick up new MIB objects.
    3. Upgraded the Operating System to FreeBSD-10.0-p11
      Refer to the FreeBSD security advisory: OpenSSL and Memory leak in sandboxed namei lookup
    4. Added new controls to add ping only devices. This is located in the Admin menu in the discover section.
    5. Added alert message to the navigation bar when disk space exceeds 80%.
    6. Added Location, Hardware and Software version MIB objects to the Aruba AP report.
    7. Added alerting rule validation.
    8. Added a top status line to the discover screen.
    9. Added a delete button to the "Reports" -> "Devices" -> "Unreachable" report. The delete icon only appears if logged in as "admin".
    10. Added RioRey MIBs. Waiting for RioRey to implement IF-MIB later 2014.
    11. The Device Summary report now displays Aruba access points.
    12. Simplified the Status Report GUI.
    13. Fixed an issue where reports were not appearing for user profiles.
    14. Fixed a performance problem when reporting on large volumes of Netflow data. The operating system would aggressively cache the Netflow database files consuming all available memory in the server, possibly causing it to swap. The Netflow reporter now advises the kernel not to cache the database files.
    15. Increased the Netflow v9 template timeout window from +-2 seconds to +-10 seconds. Some customers don't setup NTP on their routers and time can drift enough to trigger the flow collector to throw away the Netflow templates.
    16. Fixed an issue when deleting multiple flow meters. Only the first selected meter was being deleted.
    17. Fixed an issue discovering Juniper switches which contain a duplicate MAC address of 02000000000A in every device. Shame on them!
    18. Fixed an issue when deleting a profile the associated group assignments where not being removed from the manual grouping.
    19. Fixed issues with various Aruba wireless controller setups.
    20. Fixed error in the Discover help for IPv6 examples.
    21. Fixed an issue with the trap forwarding where multiple of the same trap was being sent to each defined forward address.

    Version 14.0.3026   17th October 2014

    1. Operating System: FreeBSD 10.0-p8
    2. Added initial alerting functionality for:
      • Status
      • Syslog
      • SNMP Traps
      NOTE: Alerting is under active development and will change with ongoing customer feedback.
      NOTE: Alerting is only available with a valid evaluation or paid licence key.
    3. Added ADSL reports
      • Tx/Rx Line Rate
      • Tx/Rx Signal to Noise Ratio
      • Tx/Rx Attenuation
      • Tx/Rx Power
    4. Added functionality to the discover so it creates two interface virtual objects of IF-MIB.ifInSpeed and IF-MIB.ifOutSpeed. The values of these objects are updated using the ADSL line rate speeds. The percent utilisation values in the interface reports are calculated using these two new virtual objects for ADSL interfaces only. You will need to select the 'adsl' ifType in the discover configuration and perform a rewalk for ADSL interfaces to be added and their speeds set correctly.
      NOTE: The ADSL discovery has only been tested on Cisco devices.

    5. Fixed an issue in the discover where old interfaces were not being expired from the configuration.

    Known Issues

    1. Operating System: FreeBSD 10.0-p8
    2. Aruba wireless reports introduced in version 14.0.2975 do not populate with data on several customer installations. This is being investigated.
    3. Palo Alto return 0 percent values for Virtual Systems Session utilisation if no session limit is configured in the Palo Alto device. No known work around.

    Version 14.0.2996   14th October 2014

    1. Operating System: FreeBSD 10.0-p8
    2. Fixed an issue with the installation on Intel motherboard based servers. The server would not boot after installation due to a bugs in BIOS dealing with MBR and GPT partitions.
    3. Fixed a problem with the Switch Port Mapper where it incorrectly tagged most edge switch ports as uplinks, therefore very little data was being displayed in the switch port mapper reports.
    4. Fixed a problem in the Switch Port Mapper reporter where a MAC was not being displayed if no ARP entry was found.
    5. Added the interface title to the Switch Port Mapper report table.
    6. Fixed a problem when upgrading using some versions of Microsoft Internet Explorer 11 where the uploaded filename contains DOS drive and paths. The upgrade mechanism was ignoring the uploaded .iso file and not performing the upgrade.
    7. Fixed a problem in the download of packet capture files where the pcap file was being gzip'ed twice.
    8. Changed the behaviour of the discover ping scan on single IP addresses. The ping scan now moves on immediately when a response is received for a single IP.

    Version 14.0.2975   9th October 2014

    1. Operating System: FreeBSD 10.0-p8
    2. Two significant performance issues were discovered with the event dashboard. As more device and interface groups are added, the Impact Assessment and Availability calculations were taking longer to calculate. NOTE: A third potential speedup has been identified and will be investigated for the next release.
    3. Performance speedup to Netflow, Syslog and SNMP Trap reporting:
      A performance issue was discovered where the Netflow, Syslog and Trap database files were being stored in a severely fragmented manner. This would cause the reporting tools to perform an unnecessary amount of disk seeking, and therefore degrading overall system performance. The database files are now rewritten in a sequential order for most optimal I/O read performance.
    4. Fixed a serious issue in the Tools -> Availability control panel. Any users who installed AKIPS in October would see a partially created control panel. The backend CGI was stuck in an infinite loop, blasting out HTML form data to the browser. The browser would grow in memory size until it either crashed, or locked up the operating system with constant swapping.
    5. Added initial experimental status alerting.
    6. Replaced Aruba wireless reports introduced in version 14.0.2203.
      New reports include the following:

      Wireless Controller (ESSID)

      • Number of Stations
      • Number of Access Points
      • Receive Rate
      • Received Packets
      • Received Packets Dropped
      • Received Packets Retried
      • Transmit Rate
      • Transmitted Packets
      • Transmitted Packets Dropped
      • Transmitted Packets Retried
      • Transmitted Packets in Error
      • Wired Received Packets
      • Wired Received Bytes
      • Wired Transmitted Packets

      Wireless Access Point

      • IP Address
      • Name
      • Group Name
      • Model
      • Serial Number
      • Uptime
      • Current Status
      • Switch/Controller IP Address

      Wireless AP Radio

      • Radio Name
      • Radio Type
      • Radio Associated Clients
      • Radio Monitored BSSIDs
      • AP Number of Stations
      • AP Packets
      • AP Bytes
      • AP Noise
      • AP Coverage Index
      • AP Interference Index
      • AP Number of APs
      • AP Tx Utilisation
      • AP Rx Utilisation
      • AP Total Utilisation

      NOTE: To automatically group all Aruba Access Points, add the following rules to your Auto Grouping
      add device group Aruba-AP
      assign * * /^ap/ WLSX-WLAN-MIB.wlanAPName = Aruba-AP

    7. Added SNMP proxy support to the poller. This was required because wireless controllers effectively act as a SNMP proxy for the access point statistics.
    8. Added error message to installation if insufficient disk space has been allocated.
    9. Added user warning prompt before cancelling a running SNMP walk in the Ping/SNMP Walk tool.
    10. Added missing device controls to the VPN reports.
    11. Added ability to rotate table headers as used in the new Aruba Radio reports.
    12. Some devices return invalid ifHighSpeed values. In the discover and 30 minute ifSpeed update, prefer ifSpeed over ifHighSpeed.
    13. Added "no results found" message in TopN tables and graphs if there is no data to display.
    14. Performance improvement to the discover. It now only walks MIB objects relevant to each vendor.
    15. Changed discover log viewer to full width display.
    16. Improved the runtime estimate for the SNMP scan stage of the discover.
    17. Print a dot every second while the discover SNMP walks are happening.
    18. Added Radware MIBs.
    19. Added disk latency graphs to the system performance graphs.
    20. Added default drilldown refresh of 60 seconds.
    21. Workaround for Chrome issue 363974 (progressive updates)
    22. Workaround for HTTP proxies that don't correctly implement HTTP NL/CR standard.
    23. Fixed double counting of vendor stats in the Discover Summary.
    24. Fixed CGI errors for APC TopN graphs.

    Version 14.0.2822   19th September 2014

    1. Operating System: FreeBSD 10.0-p8
    2. Upgraded the Operating System to FreeBSD-10.0-p9.
      Refer to the FreeBSD security advisory: Denial of Service in TCP packet processing
    3. Added APC reports
      • UPS
        • Input Line Voltage
        • Output Line Voltage
        • Output Line Current
        • Phase Input Voltage
        • Phase Input Current
        • Phase Output Voltage
        • Phase Output Current
        • Battery Status
        • Battery Replacement Indicator
        • Battery Pack Count
        • Battery Temperature
        • Battery Capacity
        • Battery Voltage
        • Battery Current
      • Environment Monitoring
        • Temperature
        • Humidity
        • Alarm Status
      NOTE: To discover APC devices:
      • Add the following rule to your Discover Device Match Rules
        include SNMPv2-MIB.sysObjectID PowerNet-MIB
      • Add the following rules to your Auto Grouping
        add device group APC
        assign * * sys SNMPv2-MIB.sysObjectID value /PowerNet/ = APC
    4. To discover Citrix Netscaler devices
      • Add the following rule to your Discover Device Match Rules
        include SNMPv2-MIB.sysDescr NetScaler
      • Add the following rules to your Auto Grouping
        add device group Citrix
        assign * * sys SNMPv2-MIB.sysDescr value /NetScaler/ = Citrix
    5. Added SNMP Trapd performance graphs
    6. Added a work around for Citrix Netscalers which don't implement the IP-MIB. This means the SNMP Traps / syslog reporter is unable to resolve the hostname from where the traps/syslog packets came from.
    7. Added packet capture function to the Tools (Ping/Traceroute/SNMP Walk). This will capture 10 minutes of traffic for the specified IP address and is useful when debugging discovery or polling issues with a device.
    8. Changed Admin menu to 3 column layout.
    9. Fix a problem in the SNMP timeout/retry algorithm where a device responds to a timed out request a long time after the original request (e.g. 7 seconds). This was observed on Juniper switches where another NMS was slamming the CPU of the switch.
    10. Fixed an issue with the upgrade mechanism and the switch port mapper. If the switch port mapper collector process is running when the upgrade is started, the collector process is ungracefully killed, which may cause corruption in the MAC address history data.
    11. Fix an issue where the auto grouping was removing every users assigned profile.

    Version 14.0.2776   11th September 2014

    1. Upgraded the Operating System to FreeBSD-10.0-p8.
      Refer to the FreeBSD security advisory: OpenSSL multiple vulnerabilities
    2. Added VMWare guest package to installation ISO. If you are running AKIPS Network Monitor in a VMWare environment, after the upgrade:
      • Go to Admin -> System Settings
      • Set the Platform to VMWareGuest
      • Save and Reboot
    3. Added configuration scripting functionality for site specific configuration and grouping fiddling. This is an expert only feature and should only be used with help from AKIPS tech support.
    4. Added regex device name filtering to the report controls.
    5. Added Juniper VPN IPSEC-FLOW-MON reports:
      • Tunnel State
      • Tunnel Packets
      • Tunnel Bytes / BPS
    6. Added CheckPoint global CPU using CheckPoint specific MIB Object. Old CheckPoint firewalls don't support the HOST-RESOURCES-MIB for CPU stats.
    7. Updated Citrix Netscaler NS-ROOT-MIB.
    8. Added Citrix Netscaler reports:
      • CPU
      • Memory
    9. Changed the System Settings time zone option to a drop down select list.
    10. Added "Exclude" filtering option to the system log viewer.
    11. Bind local postfix mail daemon to localhost only.
    12. Fixed a problem in the SNMP engine to handle ridiculously long index numbers found in Netscaler devices.
    13. Fixed a problem in the discover settings where the Daily Discovery Schedule could not be set to either Disabled or Midnight.
    14. Fixed several issues with the upgrade mechanism.

    Version 14.0.2656   29th August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Checkpoint CPU/Memory via the HOST-RESOURCES-MIB.
    3. Added technology group controls for CPU, Memory, Temperature and Storage reports.
    4. Moved Foundry reports to Brocade.
    5. Vlan interfaces should use an ifSpeed of what its bus speed is, but most devices return a low speed (e.g. 1Gbps). Modified the discover/rewalk so any interfaces that matches an ifType of propVirtual and contains vlan in their ifDescr to 100G.
    6. Fixed F5 Pool Member Stats report. Some F5 boxes don't support the ltmPoolMemberStatNodeName MIB object. The label for each entry now consists either:
      • ltmPoolMemberStatPoolName:
      • ltmPoolMemberStatNodeName
      • ltmPoolMemberStatPort
      or
      • ltmPoolMemberStatPoolName
      • ltmPoolMemberStatAddress
      • ltmPoolMemberStatPort
    7. Fixed a problem in the Admin -> Netflow Meters where a a divide by zero error occurs if a flow meter has 0 days of data.
    8. The discover uses three methods to fingerprint and remove duplicate devices:
      • SNMPv3 engine ID
      • Duplicate sysName
      • Duplicate MAC addresses
      SNMPv3 engine IDs must be unique throughout the entire network, therefore the MAC address duplicate checking is skipped for SNMPv3 devices. This fixes an issue with Cisco Nexus boxes which contain lots of duplicate MAC addresses when in particular topologies.
    9. Changed the threshold configuration so it reports invalid syntax error instead silently ignoring them.
    10. Added status line to the Auto Grouping when saving.
    11. Fixed the auto refresh in the Event Reporter.

    Version 14.0.2597   22nd August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Foundry (Brocade) reports:
      • CPU
      • Memory
      • Temperature
      • Fan Status
      • Power Supply Status
    3. Added Juniper SPU TopN Graphs
    4. Added drilldowns to Juniper SPU Tables
    5. Added / Updated Brocade and Foundry MIBs.
    6. Don't log events for sysUpTime values which are stuck. Some devices increment their sysUpTime until they reach 2^32 and stop instead of wrapping.
    7. Fixed an issue where the discover would randomly fail with a "FATAL PIPE" message.
    8. Fixed an issue in the SNMP library where it wasn't correctly handling OPAQUE MIB Objects.
    9. Added workaround for devices which correctly return endOfMibView at the end of a SNMP walk, but incorrectly set their ErrorStatus to 'GenError', therefore the walk would terminate with an error.
    10. Fixed table headers for Juniper SPU reports.
    11. Fixed table headers for Netscreen VPN report.

    Version 14.0.2558   18th August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Juniper Firewall SPU report
      • Node
      • CPU
      • Memory
      • Current Sessions
      • Current CP Sessions
    3. Added Juniper Netscreen Sessions report
      • Current sessions
      • Failed sessions
    4. Added Juniper Netscreen VPN report
      • Latency
      • Bits/sec
      • Bytes
      • Packets
    5. Added OpenGear MIBs
    6. The Discover include/exclude rules are now case insensitive
    7. Modified the SNMP timeout algorithm so retry 1 has a timeout of 5 seconds, and retry 2 has a timeout of 10 seconds.
    8. Added ifSpeed to the Unused Interfaces report.
    9. Added ifSpeed to TopN graph titles.
    10. Added IP Address column to Device Summary report.
    11. Removed monitoring of useless Cisco Voltage Source objects.
    12. Fixed F5 Pool Member Stats report. The label for each entry now consists by combining:
      • ltmPoolMemberStatPoolName
      • ltmPoolMemberStatNodeName
      • ltmPoolMemberStatPort
    13. Fixed refresh timer when user changes report controls.

    Version 14.0.2494   13th August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Device Uptime report to the Events Dashboard.
    3. Merged Ping and Availability menus into the Device menu.
    4. Renamed Host reports to Server reports.
    5. Added progress logging for the switch port map collector.
    6. Added switch port mapper logs to the System Log Viewer.
    7. Added a download button in the System Log Viewer to retrieve the switch port map output files.
      This will help debugging any site issues with collecting Bridge/ARP tables.
    8. Added Unused Interfaces report under the Reports -> Interfaces section.
    9. Added Device Summary and Device Uptime to reports menu.
    10. Added interface speed and alias (i.e. title) to the interface report.
    11. Always display tooltip hover over in tables.
    12. Added / updated a large number of Juniper MIBs.
    13. Added 48 hour and 5 day graphs to the System Performance Graphs.
    14. Increased the age time for discovered MACs in the switch port mapper from two to three days.
    15. When the web users' password is changed, force a logout on all sessions for that username.
    16. Rewalk now displays a list of the unreachable devices which will be skipped.
    17. Juniper fan status enumeration appears to jump between running and runningAtFullSpeed depending on how hot the CPU is, causing lots of events to be logged. Added functionality to automatically prune these noisy events.
    18. Many broken SNMP implementations return SNMP objects out of mib.object.index order. This is particularly a problem in bridging tables where the data is retrieved from a hash table or ASIC and not correctly sorted in a binary order before being returned in response to a GetNext of GetBulk. The AKIPS SNMP implementation normally rejects these broken devices with a failure of Recursive Object. A workaround has been applied to allow out of order MIB Objects from naughty devices walking the BRIDGE-MIB.
    19. Fixed an issue when deleting an AKIPS user where the FreeBSD pw command would spin chewing up 100% of a CPU core.
      Refer to the following FreeBSD bug report.
      A workaround has been applied until the fix is merged back to FreeBSD 10.
    20. Fixed a memory leak in the Availability reporter.
    21. Fixed a problem where /etc/ntp.conf and postfix config were not being preserved during an OS upgrade.

    Version 14.0.2430   6th August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Alcatel reports:
      • CPU
      • Memory
      • Temperature
    3. Added Juniper Netscreen reports:
      • CPU
      • Memory
      • Temperature
    4. Fixed a serious memory leak in the graphing library. If a report was left going in a browser tab for long periods, the graphing tool would eventually consume all memory.
    5. Fixed an issue in the Admin -> Syslog/Trap Filters. The Syslog and Trap daemons were not reading any changes when updated.
    6. Fixed several issues in the SNMP library:
      • Defect in the timeout/retry algorithm.
      • Walks would exit with a status of "Unknown".
      • The inter request delay between a response and next request was too excessive.

    Version 14.0.2404   4th August 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Split reports table/graphs menus to save vertical space.
    3. Added 15 second refresh timer to Unreachable Devices.
    4. Added a good state rule for Juniper Fan jnxOperatingState so no events are created when the object switches from 'running' to 'runningAtFullSpeed'.
    5. Added a popup alert if the user starts a discover or rewalk and closes the browser tab while the discover is still running.
    6. Fixed a problem walking SNMPv2-SMI.org from the SNMP Walk tool. This problem was introduced in version 14.0.2369 while adding vendor MIBs. Several vendor MIBs redefined .org.
    7. Fixed Palo Alto TopN graphs. Incorrect graph data was plotted for utilisation.
    8. Fixed an invalid "recursive MIB Object" error while walking SNMP-NOTIFICATION-MIB.

    Version 14.0.2369   29th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added Palo Alto reports:
      • CPU
      • Memory
      • Global session utilisation
      • Global active sessions
      • Global active TCP sessions
      • Global active UDP sessions
      • Global active ICMP sessions
      • Virtual system session utilisation
      • Virtual system active sessions
    3. Added / updated vendor MIBs:
      • Avaya
      • Barracuda
      • Clavister
      • Cyberoam
      • Dell
      • EMC
      • Fortinet
      • IBM
      • Lefthand
      • Packeteer
      • Synology
      AKIPS now has 2700 MIBs with 271700 objects
    4. Palo Alto devices return duplicate MAC addresses when setup in pairs. The discover uses interface MAC addresses to finger print each device, therefore the discover would delete the second Palo Alto devices as a duplicate. Added a discover rule to ignore those duplicate MAC addresses.
    5. The Trap daemon now imports the discover SNMP Parameters. Addition trap daemon rules only need to be applied to Admin -> SNMP Traps if the devices use different Trap parameters.
    6. Changed the time the Switch Port Mapper collector runs so it never runs at the same time as a scheduled discover/rewalk.
    7. Closing a browser tab while a discover/rewalk is running will terminate the discover. Added a user prompt if closing a tab with a running discover/rewalk.
    8. Disabled graph drilldowns for time periods in the future.
    9. Fixed the graphing so zero values are not plotted in the future.
    10. Fixed a discover/rewalk issue in Cisco Active SSL sessions when the device also supports the Altiga SSL MIB Objects.

    Version 14.0.2326   26th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. The discover 'finger prints' each device by using the Interface MAC addresses (i.e. IF-MIB.ifPhysAddress). Some Cisco supervisor modules appear to add an entry with the same MAC address across all devices with that same model supervisor. Added a rule to ignore these addresses so the devices can be discovered correctly.

    Version 14.0.2324   25th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added H3C (HP/3Com) reports:
      • CPU
      • Memory
      Note: Temperature returns 0 values so it wasn't added
    3. Added compiled MIBs for:
      • Mediatrix (Comdasys)
      • Polycom
    4. Fixed an issue with the flow collector when multiple exports are being sent from the same router.
    5. Fixed an issue with the Tools - Command Console to handle a large number of commands.

    Version 14.0.2302   24th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Fixed a fatal issue in the SNMP poller which was introduced in version 14.0.2266.
    3. Fixed a problem in discovering Juniper switches. The discover uses the MAC addresses on each interface to 'finger print' the device so it can remove duplicate detected devices. Juniper switches use a common MAC address of 000bcafe0000.
    4. Added Palo Alto MIBs
    5. Turned on additional debugging checks for all builds.

    Version 14.0.2290   23rd July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Added/Updated compiled MIBs for:
      • Bluesocket
      • Colubris
      • Cyclades
      • D-link
      • Extricom
      • Fortinet
      • Korenix
      • Mikrotik
      • Netgear
      • PacketFront
      • VMWare
      • World Wide Packets
      • Xirrus
    3. In the SNMP Walk tool, changed the tcpdump output to GZIP instead of XZ. XZ compressed output is typically 50% smaller than GZIP, but GZIP files can be opened directly by applications like Wireshark.
    4. Fixed the Pause/Refresh control introduced in 14.0.2266 so it renders correctly on Firefox.
    5. Fixed an error where the Save Graph would save the wrong view of a graph. For example, the drilldown from any table, then zoom out and save a yearly graph, the actual graph saved/converted to PNG/PDF was the initial drill down graph.

    Version 14.0.2266   22nd July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Significant improvement to the Ping/SNMP poller CPU usage. A small algorithm change has increased the poller performance and dropped its CPU usage by 40%. Testing on a largish customer site with 4000+ network devices using a server with 4 * 2.66Ghz cores, 16G RAM, SAN backend:
      • With both "Adaptive Polling" and "Tune Interface State" turned off, the poller now consumes approx 13% of a single CPU core when polling 2.1 million MIB objects per minute
      • With both "Adaptive Polling" and "Tune Interface State" turned on, the MIB object rate drops to approx 900,000 per minute, and the poller users approx 7% of a single CPU core.
      • The time to retrieve 23,000 MIB Objects from an Aruba Wireless controller dropped from over 10 seconds to 1.5 seconds.
    3. Added the ability to pause the refreshing of a report.
    4. Added sorting functionality to the Unused Interface reports
    5. Clear the TCP/UDP port number from the Netflow Unknown Ports report when the port number has just been defined in the Netflow Protocols.
    6. Flow meter settings now defaults the meter name to the sysName if available.
    7. Added syslog performance graphs to the Admin Section. These graphs include:
      • syslog packets received
      • syslog packets forwarded
      • CPU usage of the collector
      • Memory usage of the collector
      Testing shows that the syslog collector consumes approx 4% of a CPU when processing 1000 syslog messages per second.
    8. Added Arista CPU / Memory Reports.
    9. Add Avaya VSP 9012 CPU and Memory (RAPID-CITY MIB)
    10. Changed the SNMP Walk tool output files to from hhmm to hhmmss because a walk of the same device within the same minute would not create unique filenames.
    11. Fixed Avaya memory graph scales
    12. Fixed an issue where the scheduled discover/rewalk was not being run.
    13. Workaround for an issue where the SNMP Walk tool would create an empty or truncated tcpdump output file due to a hard-coded pcap timeout value in tcpdump.

    Version 14.0.2226   15th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Fixed a serious database corruption issue that can occur at the end of a discover or rewalk. Issue was identified during internal testing.
    3. Fixed a serious database corruption issue when deleting devices.
    4. Set the default MaxRep value in the Ping / SNMP Walk tool to 10. Many SNMP implementations don't correctly handle the SNMPv2/v3 GETBULK Max Repetitions value. Added the maxrep value to the final SNMP walk status line.
    5. Accommodate wide group names in the Availability Settings.
    6. In the Unreachable Devices report, display "No Unreachable Devices" instead of a blank report page.
    7. Fixed an error in the Switch Port Mapper where the ARP table was only displayed for devices which returned bridging tables.

    Version 14.0.2212   14th July 2014

    1. Operating System: FreeBSD 10.0-p7
    2. Fixed an issue where newly discovered devices may not be polled.
    3. Fixed an issue in the SNMP poller where it would stop polling a device which returned a corrupt or invalid SNMP response.
    4. Fixed a regression introduced in version 14.0.2203 where threshold rules where not being executed.

    Version 14.0.2203   11th July 2014

    1. Upgraded the Operating System to FreeBSD-10.0-p7.
      Refer to the FreeBSD security advisory: Kernel memory disclosure in control messages and SCTP notifications
    2. Added initial Aruba Wireless reporting:
      • Radio Name
      • Radio Type
      • Radio Associated Clients
      • Radio Monitored BSSIDs
      • AP Channel Number of Stations
      • AP Channel Packets
      • AP Channel Bytes
      • AP Channel Noise
      • AP Channel Coverage Index
      • AP Channel Interference Index
      • AP Channel Number of APs
      • AP Channel Tx Utilisation
      • AP Channel Rx Utilisation
      • AP Channel Total Utilisation
      NOTE: This feature will be significantly enhanced over the next several releases.
    3. Added 'Save' option to the graphs. This allows you to save the SVG graphs as a PNG or PDF file.
    4. Improved the compression of the 30 day timeseries database files by approximately 30%.
    5. Added Symbol Wireless MIBS.
    6. Added more AKIPS database performance graphs.
    7. Fixed a problem where background tcpdump processes started by the Ping/SNMP Walk tool were not being killed if user closed the browser tab.
    8. Fixed a defect in the SNMP Poller for handling counters and gauges. Invalid values would be inserted into the time-series database when the device returned an ASN.1 type of NULL or NoSuchInstance instead of Counter or Gauge.
    9. Fixed a defect in the AKIPS API for the mdelete and expire commands.
    10. Fixed GUI error if user clicks on the Graph table header.

    Version 14.0.2158   7th July 2014

    1. Operating System: FreeBSD 10.0-p6
    2. Added Avaya reports:
      • CPU
      • Memory
      • Temperature
    3. Flow collector now listens on ports 4739, 9995 and 9996
    4. Added auto grouping for interface speeds
    5. Added auto grouping for interface types
    6. Added H3C MIBs
    7. Added prune command to the auto grouping. By adding the command "prune device group" to the end of the auto grouping, all empty device groups will be removed.
    8. Added "MaxRep" option to the Ping / SNMP Walk tool. This sets the SNMPv2/v3 Maximum Repetitions value in GetBulk requests when doing SNMP walks.
    9. Added workaround for F5 boxes with defective SNMP implementations
    10. Set vlan interface speeds to 100G so they don't appear at the top of the %util stats.

    Version 14.0.2126   3rd July 2014

    1. Operating System: FreeBSD 10.0-p6
    2. Added F5 Networks Load Balancer reports:
      • CPU
      • Memory
      • Temperature
      • Global Client Stats
      • Global Server Stats
      • Virtual Client Stats
      • Pool Stats
      • Pool Member Stats
    3. Added an 'All Discover Objects' option in the MIB Selector of the Ping/SNMP Walk tool.
    4. Added workaround for F5 boxes which return Counter64 instead of Gauge.
    5. Changed tabular reports so the strip graph is under the same heading as the associated value to make it more obvious.
    6. Calculate critical events column for Impact Assessment report in the Events Dashboard.
    7. Increased the maximum SNMP packet size from 4Kbytes to 16Kbytes for devices which return large UDP datagrams fragmented over multiple IP packets. A SNMP packet is not limited to the size of an Ethernet packet.
    8. Fixed the communications between the HTTP server and persistent CGIs.
    9. Fixed a defect in the Netflow Reporting when all display types where selected.
    10. Fixed a serious defect for handling signals in all binaries. This would cause various programs to crash on Signal 10.
    11. Fixed sorting and report titles in the Unused Interfaces report.
    12. Fixed various buffer overflows detected when adding F5 objects due to their very long string based index numbers.

    Version 14.0.2067   27th June 2014

    1. Upgraded the Operating System to FreeBSD-10.0-p6.
      Refer to the FreeBSD security advisory: Vulnerabilities in file(1) and libmagic
    2. Added a link in the login splash page to the AKIPS Mailing List Forum. Removed the Forum Link from the navigation bar.
    3. Added Juniper switch/router reports:
      • CPU
      • Memory
      • Temperature
      • Fan State
      Note: handling the JUNIPER-MIB Operating Table is a bit messy because CPU, Memory, Temperature, Fan, etc.. are contained in a single generic table. This means an SNMP walk returns CPU/Memory/Temp/etc for things like power supplies. AKIPS currently detects if the module is a flexiblePicConcentrator before adding CPU/Memory/Temp for each SNMP index.
    4. Added Enterasys reports:
      • Memory
      • Storage
      • Number of Auth Users
    5. Removed OLD-CISCO-MEMORY-MIB and replaced with OLD-CISCO-SYSTEM-MIB. Both these MIBs use the same OID tree so both can't be loaded at the same time. This change fixes the decoding of various Cisco trap messages.
    6. Added Availability menu to the Reports drop down
    7. Added Unreachable Devices report
    8. Added Liebert battery strip graph and drill down
    9. Updated F5 MIBs
    10. Updated Juniper MIBs
    11. Added Ubiquiti FROGFOOT-RESOURCES MIB
    12. Added ability to drilldown to one minute for event and syslog messages.
    13. Added a limit control to the event reporter
    14. Added a limit control to the status reporter
    15. Changed the layout of the graphing zoom / next / previous controls
    16. Added virtual object type for Fahrenheit calculations
    17. Added an option to change the default display of temperature between Celsius and Fahrenheit. This option is in the Admin Miscellaneous section.
    18. Added more internal performance graphs to the Admin Database section
    19. Added persistent TCP connections to the HTTP server. The AKIPS HTTP server now supports both persistent TCP and CGI connections.
    20. Performance speedups to the time-series database
    21. Fixed a problem when a username contains a dot. The user settings control would become unresponsive. It now allows dot, dash and underscore. Disallows allow other non alpha numeric characters.
    22. Added highlighting of invalid character in form controls
    23. Fixed an off-by-one error in decrypting SNMP DES and Triple-DES. This is to get around a bit of insanity in the way DES CBC padding works.
    24. Fixed clipping of strip graphs in tabular reports
    25. Fixed warnings displayed in the CGI error log
    26. Ongoing development of the AKIPS SNMP simulator to allow quicker loading and simulation of SNMP walks supplied by customers.

    Version 14.0.1921   13th June 2014

    1. Operating System: FreeBSD 10.0-p4
    2. Upgraded installed Operating System to FreeBSD-10.0-p5.
      Refer to the FreeBSD security advisory: OpenSSL security advisory
    3. Added framework for creating PNG images and PDF output. New controls will be added in the next build.
    4. Added Device Summary report
    5. Added Device Uptime Report
    6. Added controls to TopN graphs and reports for group filtering, limit, and time range.
    7. Added a workaround for polling old Liebert UPS and Cisco ASA devices which can only handle small SNMP packet sizes.
    8. Added Citrix NetScaler MIBs
    9. Added Riverbed MIBs
    10. Added licensing information on splash page
    11. Added some under the hood performance speedups
    12. Increased maximum report/graph limit from 1000 to 5000
    13. Prepend vendor names in profile report assignments
    14. Fixed configuration of IPv4 in System Settings
    15. Fixed 'Show All' functionality in Status Reporter
    16. Fixed error in the Availability Reporter tool where an option for a future Yearly Quarter is displayed. Only the current and past yearly quarters should be displayed in the time filter.
    17. Fixed several errors which stopped Cisco SSL/VPN statistics and drilldowns from working correctly.
    18. Fixed the drilldown from the Netflow Unknown Protocols report.

    Version 14.0.1843   6th June 2014

    1. Upgraded Operating System to FreeBSD 10.0-p4. Refer to the PAM security advisory.
      NOTE: Due to ongoing OpenSSL security fixes, new patch levels of FreeBSD will probably occur on a regular basis.
    2. Added HP ProCurve reports:
      • CPU
      • Memory
    3. Added Dell reports:
      • Fan Status
      • Power Supply Status and Source
    4. Added Host reports:
      • CPU
      • Memory
      • Storage
      • Number of users (See known issues below)
      • Number of processes
    5. Added Liebert UPS reports:
      • Temperature
      • Battery charge state
      • Battery test result
      • Battery remaining
      • Battery capacity
    6. Added device group selector to the PING / SNMP Walk Tool
    7. Added subtitles to graphs
    8. Updated various Cisco MIBs for wireless
    9. Added an error message to top of the output of a SNMP walk when a failure occurs
    10. Updated MIBs for:
      • Cisco
      • Dell
    11. Fix graphing of Cisco negative power supply values
    12. Handle 32 bit counter wrap on high volume interface counters
    13. Workaround for Liebert devices which return rubbish counter values when wrapping at 2^32
    14. Workaround for broken devices which return negative timetick values. For example, SNMPv2-MIB.sysUpTime and IF-MIB.ifLastChange.
    15. Workaround for broken devices which return negative interface counters. This typically occurs because the vendor incorrectly used a signed 32bit integer instead of an unsigned 32bit integer.

    Known Issues

    1. Hosts running net-snmp typically return rubbish values for many objects. Avoid using net-snmp as much as possible because it is legacy and defective.

    Version 14.0.1773   3rd June 2014

    1. Auto adjust the length of the device / interface lists in the reporting tools
    2. Added multi level drop down to navigation menus because the list was getting too long
    3. Added LastN zoom out controls to all graphs. This fixed an annoying usability issue where very little data would be displayed at the beginning of the day, week, month or year.
    4. Added Arista memory collection using the HOST-RESOURCES MIB
    5. Added a Device Summary report in the Admin Discover section
    6. Display midnight on graphs instead of 12mi
    7. Renamed the Interface Reporter buttons so they make more sense
    8. Hide the Protocol column in the IPv4/IPv6 Ping Statistics report as it adds no value to the report
    9. Removed midnight delimiters on graphs because they look too much like a spike in the data
    10. Speedup Event Dashboard and Status Reporter in large configurations
    11. Fixed an issue with the poller when "Tune Interface State" was active. Events would be logged saying the device was unreachable via SNMP. The actual issue was the poller wasn't scheduling requests to be sent.
    12. Fixed missing heading in Status Report drilldown
    13. Fixed tabular report arrow direction
    14. Fixed a problem walking Huawei switches

    Version 14.0.1724   28th May 2014

    1. Added Altiga (Cisco) SSL session statistics
    2. Added Cisco reports:
      • SSL session statistics
      • VPN session statistics
    3. Added Enterasys Interface Flow Limiting statistics
    4. Added monitoring of CISCO-STACK-MIB.moduleStandbyStatus
    5. Added SNMP MIBs for:
      • Arista
      • General Electric
      • Huawei
      • Lexmark
      • Mellanox
      • Voltaire
    6. Added drilldown from Aruba TopN graphs
    7. Added Discovery Summary Report
    8. The configuration for enumerated objects allow multiple normal state definitions. For example: Cabletron ctChasFanModuleState and ctChasPowerSupplyState objects can have a normal state of either notInstalled or installedAndOperating. All other states will be displayed in the Status Reporter as exceptions.
    9. Significantly increased the speed and compression ratio of the time-series database
    10. Changed Auto Grouping so empty groups are not deleted
    11. Fixed GUI error in Manual Grouping

    Version 14.0.1679   23rd May 2014

    1. Added Aruba reports:
      • CPU
      • Memory
      • Event objects for power supplies
      • Event objects for fans
    2. Added Cabletron reports:
      • Event objects for power supplies
      • Event objects for fans
    3. Added Enterasys reports:
      • CPU
      • Event objects for power supplies
      • Event objects for and fans
    4. Fixed an issue with the disk performance on the 80 minute database processing on large installations.
    5. Fixed an issue when toggling the Tune Interface State on and off
    6. Fixed an issue where sysUpTime resets where being logged in the due to invalid values being returned by older SNMPv1 devices
    7. Updated the help syntax in the Command Console
    8. Fixed an issue where only 10 outage devices were show in the Events Dashboard
    9. Fixed some more discover issues with older SNMPv1 devices which only return partial MIB Objects
    10. Fixed various SNMP error log messages

    Version 14.0.1650   21st May 2014

    1. Sanitise ifAlias from discovered devices by removing unsupported characters
    2. Sanitise sysName from discovered devices so they don't contain any spaces or unsupported hostname characters
    3. Fixed an issue where the poller would purposely gracefully exit rather than handling the issue appropriately. The result would be gaps in the time-series data.
    4. Improved the listing of devices in the control panels so IP addresses and devices with numbers in them sort in a more human readable order
    5. Fixed an issue with the discover where it would include both high and low interface counters (e.g. both ifInOctets and ifHCInOctets). Only one of the objects should be collected, otherwise it confuses the grapher/reporter.
    6. Changed the errors/discards report to display in summarised format, with hover over for exact values
    7. Fixed an issue when polling old Cisco Cat 650X boxes with IOS 12.2. SNMP responses were being returned with no MIB objects, therefore no data was being inserted into the databases.
    8. Fixed various errors when processing database caches
    9. Added more meaningful SNMP error log messages to help track down device issues

    Known Issues

    1. Some devices incorrectly return a negative value for Counter32 objects. A workaround is being investigated.
    2. Counter wraps on high volume interfaces which only support Counter32 octets values is being investigated.

    Version 14.0.1637   20th May 2014

    1. Added option in the admin miscellaneous to turn off the Switch Port / ARP mapping collector
    2. Added SNMP Walk errors to the Discover Log Viewer
    3. Discover no longer removes devices with duplicate sysNames if addressing scheme is set to IP Address
    4. Fixed a login issue when the browser sends unexpected cookie values. The browser would send cookies with Google Analytics cookies
    5. Populate the Device List by default in all reporting control panels with 'All Devices'
    6. Workaround for devices which return a zero length IF-MIB.ifDescr for some interfaces
    7. Handle sysNames with spaces
    8. Renamed entries in the Discover Log Viewer drop down list so they make more sense

    Version 14.0.1617   16th May 2014

    1. NOTE:
      Use Firefox or IE11 to perform a software upgrade.
      Chrome versions 33 through 36 broke progressive updating of plain text pages.

      Gory Details....
      Refer to Chrome issue number 363974.
      Chrome does not update web pages which contain plain text until it receives the entire page or some HTML markup.
      The following pages contain progressive updated plain text. Compare the results between your version of Chrome and another browser.
      This problem causes the AKIPS upgrade tool not to display anything until the upgrade is complete.
      Workaround is to use an earlier version of Chrome (e.g. 32) or another browser (e.g. Firefox or IE11).
    2. Fixed the following AKIPS screens due to the Chrome progressive update issue:
      • Software update mechanism
      • Discover / Rewalk
      • Network Tools (Ping, SnmpWalk, Traceroute)
    3. Updated FreeBSD® operating system to 10.0 Patch Level 3.
      Refer to the following advisories:
    4. Fixed discover ping scan estimated runtime calculation
    5. Fixed AKIPS SVG logo for IE9
    6. Display "Licensed to" in the navigation bar
    7. Fixed the HTTP Server to recognise "UTC" string
    8. Various GUI speedups
    9. Added ability for users to change their password
    10. Prompt installer for 'admin' password instead of 'root'
    11. Display current installed version under splash screen logo

    Version 14.0.1537   8th May 2014

    1. Fixed installer so keyboard selection menu is displayed
    2. Fixed Cisco CPU Load graph scaling
    3. Renamed some reports to be more consistent throughout the product
    4. Speedup the shutdown of the server in large installations (e.g. 100,000+ interfaces)
    5. Updated installation and configuration guide. GUI administrator login is admin.

    Version 14.0.1479   5th May 2014

    Initial beta version.

    Known Issues

    1. Installer missing keyboard selection menu
    2. Server slow to shutdown on large installations (e.g. 100,000+ interfaces)