Professional Documents
Culture Documents
Infinistreamng Qualified Cots Software Appliance V6.3: Release Notes
Infinistreamng Qualified Cots Software Appliance V6.3: Release Notes
733-1372 R e v . A
A p r il 20, 2020
Use of this product is subject to the End User License Agreement available at http://www.NetScout.com/legal/terms-
andconditions or which accompanies the product at the time of shipment or, if applicable, the legal agreement executed by and
between NETSCOUT SYSTEMS, Inc. or one of its wholly-owned subsidiaries (“NETSCOUT”) and the purchaser of this product
(“Agreement”).
Government Use and Notice of Restricted Rights: In U.S. government (“Government”) contracts or subcontracts, Customer will
provide that the Products and Documentation including and technical data (collectively “Materials”), sold or delivered pursuant to this
Agreement for Government use are commercial as defined in Federal Acquisition Regulation (“FAR”) 2.101 and any supplement and
further is provided with RESTRICTED RIGHTS. All materials were fully developed at private expense. Use, duplication, release,
modification, transfer, or disclosure (‘Use”) of the Material is restricted by the terms of this Agreement and further restricted in
accordance with FAR 52.227-14 for civilian Government agency purposes and 252.227-7015 of the Defense Federal Acquisition
Regulations Supplement ("DFARS") for military Government agency purposes, or the similar acquisition regulations of other
applicable Government organizations, as applicable and amended. The Use of Materials is restricted by the terms of the Agreement,
and, in accordance with DFARS Section 227.7202 and FAR Section 12.212, is further restricted in accordance with the terms of
NETSCOUT’s commercial End User License Agreement. All other Use is prohibited, except as described herein.
This Product may contain third-party technology. NETSCOUT may license such third-party technology and documentation ("Third-
Party Materials") for use with the Product only. In the event the Product contains Third-Party Materials, or in the event you have the
option to use the Product in conjunction with Third-Party Materials (as identified by NETSCOUT in the Documentation provided with
this Product), then such third-party materials are provided or accessible subject to the applicable third-party terms and conditions
contained either in the “Read Me” or “About” file located in the Software or on an Application CD provided with this Product, or in an
appendix located in the documentation provided with this Product. To the extent the Product includes Third-Party Materials licensed
to NETSCOUT by third parties, those third parties are third-party beneficiaries of, and may enforce, the applicable provisions of such
third-party terms and conditions.
Open Source Software Acknowledgement: This product may include open source components that are governed by the GNU General
Public License (“GPL”). In accordance with the terms of the GN GPL, NETSCOUT will make available a complete, machine-readable
copy of the source code components of this product covered by the GNU GPL, if any, upon receipt of a written request. Please
identify the product and send a request to:
NETSCOUT SYSTEMS, INC.
GNU GPL Source Code Request
310 Littleton Road
Westford, MA 01886
Attn: Legal Department
To the extent applicable, the following information is provided for FCC compliance of Class A devices:
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC
rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in
a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used
in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment
in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their
own expense.
Modifications to this product not authorized by NETSCOUT could void the FCC approval and terminate your authority to operate
the product. Please also see NETSCOUT’s Compliance and Safety Warnings for NETSCOUT Hardware Products document, which
can be found in the documents accompanying the equipment, or in the event such document is not included with the product,
please see the compliance and safety warning section of the user guides and installation manuals.
No portion of this document may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine
form without prior consent in writing from NETSCOUT. The information in this document is subject to change without notice and does
not represent a commitment on the part of NETSCOUT. The products and specifications, configurations, and other technical
information regarding the products described or referenced in this document are subject to change without notice and NETSCOUT
reserves the right, at its sole discretion, to make changes at any time in its technical information, specifications, service, and support
programs. All statements, technical information, and recommendations contained in this document are believed to be accurate and
reliable but are presented "as is" without warranty of any kind, express or implied. You must take full responsibility for their
application of any products specified in this document. NETSCOUT makes no implied warranties of merchantability or fitness for a
purpose as a result of this document or the information described or referenced within, and all other warranties, express or implied,
are excluded.
Except where otherwise indicated, the information contained in this document represents the planned capabilities and intended
functionality offered by the product and version number identified on the front of this document. Screen images depicted in this
document are representative and intended to serve as example images only.
vi 733-1372 R e v . A
Contacting NETSCOUT SYSTEMS
Customer Support
The best way to contact Customer Support is to submit a Support Request:
https://my.netscout.com/mcp/Pages/default.aspx
E-mail: support@netscout.com
When you contact Customer Support, the following information can be helpful in diagnosing and solving problems:
— Type of network platform
— Software and firmware versions
— Hardware model number and serial number
— License number and your organization’s name
— The text of any error messages
— Supporting screen images, logs, and error files, as appropriate
— A detailed description of the problem
Sales
Call 800-357-7666 for the sales office nearest your location.
Training
Course listings and information on certification programs are available at:
https://www.netscout.com/netscout-university
733-1372 R e v . A iii
vi 733-1372 R e v . A
Contents
Introduction ............................................................................................................................................... 1
System Requirements ................................................................................................................................. 2
New and Changed Features.......................................................................................................................... 3
InfiniStream Application Installation Script Changes.................................................................................... 3
Sniffer Decode and Expert Pack ................................................................................................................ 3
Upgrade Considerations............................................................................................................................... 4
Upgrade Paths for InfiniStreamNG Qualified COTS Appliances ...................................................................... 4
Special Notes for Upgrading InfiniStreamNG Qualified COTS Appliances ........................................................ 5
Enabling Transmit Capability on InfiniStreamNG Interfaces ...................................................................... 5
Table Size Allocations and the Geo Application ........................................................................................ 6
Reset Agent ........................................................................................................................................ 7
Q-VUE InfiniStreamNG-Video Probe Upgrades......................................................................................... 7
Downgrading an InfiniStreamNG Appliance after Upgrading to v6.3........................................................... 7
Partitioning Considerations When Upgrading .............................................................................................. 8
Partition Requirements ......................................................................................................................... 8
Resolved Issues........................................................................................................................................ 10
Known Issues........................................................................................................................................... 11
Security Considerations ............................................................................................................................. 11
733-1372 R e v . A v
vi 733-1372 R e v . A
Introduction
This document describes new features, known issues, and resolved issues in the v6.3 release for
InfiniStreamNG Qualified Commercial-Off-the-Shelf (COTS) appliances. NETSCOUT strongly
recommends that you read this document in its entirety, as well as the following additional
documentation:
• InfiniStreamNG Qualified COTS Appliance v6.x Administrator Guide
• Agent Configuration Utility for CDM/ASI Administrator Guide, v6.3
• nGeniusONE documentation and Online Help
These and other documents as well as any updates to these release notes are available on the
My.NETSCOUT.com website.
NOTE: For information on other InfiniStream products, such as virtual InfiniStreamNG appliances
(vSTREAM), or InfiniStream hardware appliances shipped by NETSCOUT SYSTEMS or certified
resellers, refer to the separate Release Notes for those products available from the
My.NETSCOUT.com website .
733-1372 R e v . A 1
System Requirements
NETSCOUT has tested and verified the following servers to operate as InfiniStreamNG Qualified COTS
software appliances:
• HP Proliant DL Rack Servers such as DL360 Gen9 (1U), DL380 Gen9 (2U), DL380 Gen10 (2U),
DL385 Gen10 (2U), DL560 Gen9 (2U) and DL560 Gen10 (2U) platforms.
• Dell PowerEdge Rack Servers such as R430 (1U), R730xd (2U), R740xd (2U), R830 (3U), R940
(3U), and R940xa (4U platforms.
For detailed configuration options and requirements for these servers, as well as information on other
servers that may have been qualified for use as InfiniStreamNG Qualified COTS appliances in addition
to those listed above, contact NETSCOUT SYSTEMS Product Management.
When you purchase an InfiniStreamNG Qualified COTS appliance kit, you receive the following items:
• ASI Network Interface Card (NIC) for monitoring/packet capture. This ASI NIC contains a
special firmware signature that permits it to be used as part of an InfiniStreamNG appliance. A
ground strap is provided in the kit when installing the ASI NIC.
NOTE: InfiniStreamNG Qualified COTS appliances consume the same Type 1 licenses within
nGeniusONE as InfiniStream hardware appliances. For example, InfiniStreamNG Qualified COTS
appliances that include a 4-port ASI NIC consume four Type 1 licenses. If you already have other
InfiniStreamNG appliances in your network and you have available Type 1 licenses, you do not
need to purchase any additional licenses from NETSCOUT to install/operate an InfiniStreamNG
Qualified COTS appliance.
• System Preparation DVD that verifies that the server hardware you supplied meets the
minimum InfiniStreamNG Qualified COTS appliance system requirements. The software on this
DVD also configures the RAID controller and storage arrays used to stored packet data.
• Restore/Operating System & Drivers DVD that installs a customized, hardened Linux
operating system and loads the device driver for the ASI NIC. This OS replaces any existing
operating system already installed on the server.
• Application DVD that installs the InfiniStream application software which performs packet
capture and storage.
2 733-1372 R e v . A
New and Changed Features
InfiniStreamNG Qualified COTS appliance and new features since the last major release (v6.3) include:
• InfiniStream Application Installation Script Changes
• Sniffer Decode and Expert Pack
733-1372 R e v . A 3
Upgrade Considerations
The following sections provide the upgrade specifications for the v6.3 NETSCOUT software release:
• Upgrade Paths for InfiniStreamNG Qualified COTS Appliance s
• Special Notes for Upgrading InfiniStreamNG appliances
• Partitioning Considerations When Upgrading
For step-by-step upgrade instructions, refer to Chapter 6 of the InfiniStreamNG Qualified COTS
Appliance v6.x Administrator Guide.
4 733-1372 R e v . A
Special Notes for Upgrading InfiniStreamNG Qualified COTS
Appliances
Review the following considerations prior to installing or upgrading your InfiniStreamNG appliance
with this release.
733-1372 R e v . A 5
b. From the main menu, enter option [7] Select Interface and choose the number of
the interface you want to configure in PFX mode from the next menu.
c. In the Interface Options menu, enter option [65} Toggle Interface Mode. A
notification message appears as shown below:
##########################################################
# #
# TX MODE NOTICE #
# #
##########################################################
6 733-1372 R e v . A
Reset Agent
Following the automatic reboot of the InfiniStreamNG appliance, during upgrade or first time
configuration, the agent synchronizes with the managing server. To ensure all agent processes and
tables are in sync, NETSCOUT recommends performing an additional reset of the agent. To do this,
access the system command-line of the appliance as the root user and perform the following steps:
/opt/NetScout/rtm/bin/stopall
/opt/NetScout/rtm/bin/start
733-1372 R e v . A 7
Partitioning Considerations When Upgrading
During the upgrade to v6.3, you will have the option to change your partitioning strategy. Use this
topic to review the impact of changing partition sizes and the sizing required for the way you will use
the InfiniStreamNG appliance.
Partition Requirements
Partition Description Range
/xdr If the appliance will be configured to produce xDRs/ASRs (eXtended Data Default = 30% of
Records/Adaptive Session Records) and Conversation data for use by available storage.
nGeniusONE or nGenius Subscriber Intelligence, you MUST allocate an /xdr Range = 6 GB to
partition to store this session data. This partition can be eliminated if the 50% of available
appliance will not be used to produce session data for use with those storage.
applications. Enter 0 to
An xDR stores metadata for mobile subscriber sessions. The nGenius Subscriber eliminate.
Intelligence application uses mobile subscriber records to correlate mobile sessions
across multiple monitored legs. The more space you allocate to xDR storage, the
further back Subscriber Intelligence will be able to mine for mobile data session
correlation.
/metadata This partition is required for nGeniusONE, Performance Manager, and Default = 50 GB
InfiniStream Console features such as remote decode, data capture, and Range = 25 GB to
InfiniStream trace file storage. 10% of available
Set a size for this partition based on your anticipated usage of the features listed storage.
below:
• nGeniusONE Decode View/Performance Manager Remote Decode
stores transient session data files in /data and
<installdirectory>/rtm/pa/data. Although these files are automatically
removed when the decode session is closed, multiple simultaneous decode
sessions can also create temporary index files in the /metadata partition
consuming as much as 20 GB of space.
• InfiniStream Console and Performance Manager users can save remote trace
files on the InfiniStreamNG appliance’s /metadata partition instead of
immediately moving mined packets to the InfiniStream Console system or
nGeniusONE Server, respectively.
It is strongly recommended that you do not save remote trace files on the
InfiniStreamNG appliance to this partition. These trace files consume space on the
partition and reduce the space available for the ASI metadata required for
nGeniusONE monitors and enablers.
Excluding the remote decode operations, files saved on this partition must be
managed manually. Users who anticipate heavy use of any of the above features
should increase the default to a greater percentage of the total storage. Note that if
you choose to increase the size of an existing /metadata partition, all stored
metadata will be lost.
8 733-1372 R e v . A
Partition Description Range
/asi This partition is dedicated to storing Adaptive Service Intelligence Default = 50 GB
(ASI) metadata. Range = 25 GB to
In releases prior to v5.4.1, ASI metadata was written to the /metadata partition. In 10% of available
v5.4.1 and later releases, for improved performance and to avoid contention for space storage.
in the /metadata partition from saved trace and decode files, this new /asi partition
can be created. Whether or not this partition is created depends upon your choices
when upgrading:
• If you choose to retain your partitions during the upgrade and you have not
previously created a /asi partition, this partition is not created. ASI data
continues to be written to the /metadata partition as it has in previous
releases (refer to recommendations for the /metadata partition below).
• If you choose to modify your partitions, the /asi partition is automatically
created and linked to the /metadata partition. All ASI metadata is written to
this partition instead of /metadata and this partition cannot be eliminated.
/flow Required for use with the InfiniStream Console only. Default = 0 GB
InfiniStream Console users MUST allocate a /flow partition for the storage of RMON Range = 1-35% of
data, 15-second flow records, and aggregated 5-minute statistics. All other users can available storage.
enter 0 to eliminate this partition or leave the size set to the default value (0 GB). Enter 0 to
eliminate.
/raw This partition is used for packet storage and is not configurable. Total remaining
(NETSCOUT On XFS-formatted appliances, collected packets are stored in a /data partition. On storage space
File System) or NETSCOUT File System (NFS) formatted appliances, collected packets are stored in a after space is
/data (XFS) /raw partition. For new installations, only NFS formatted partitions can be created. allocated to other
partitions. Cannot
be eliminated.
733-1372 R e v . A 9
Resolved Issues
The following issues have been resolved in v6.3. Each issue is listed in the table below along with its
associated NETSCOUT ticket numbers.
Tracking ID Description
NS-39747 SMS KPIs were unavailabe in SIP WiFi scenarios; this problem has been fixed.
NS-43333 A problem that caused memory over consumption by the nsprobe process has been fixed.
NS-52834 A problem that caused cored dumps on an InfiniStreamNG Qualified COTS Dell 940xa following GTP
mobile application changes has been fixed.
NS-57419 ASRs for BSSAP+ were not generated when additional SSN values were added in nGeniusONE Global
Settings; this problem has been fixed.
NS-60658 An RCS SIP-Invite classification in nGeniusONE, where SIP RCS* children were not broken out of the
parent SIP traffic has been fixed.
NS-64334 A problem that caused nsprobe process segmentation faults and unexpected process failures has
been fixed.
NS-64701 After upgrading to v6.2.1 Build 437, the LDAP ageout was increased, resulting in subsequent ModReq
messages not being counted; this problem has been fixed.
NS-64753 Following an upgrade to v6.2.1, transactions were incorrectly reported on different VLANs; this
problem has been fixed.
NS-64821 An InfiniStream Console analysis failure due to procmanager process communication issues has been
fixed.
NS-64932 A problem resulting in GTPv1 table drops during mobile 3G GTP traffic processing has been fixed.
NS-65122 A problem that caused S11 mobile traffic miscorrelations to Increase over time has been fixed.
NS-65281 A problem that caused an InfiniStream to stop processing RADIUS traffic after receiving a malformed
packet and incorrectly labeling it as IP_Other has been fixed.
NS-65529 CAMEL traffic over M2PA/M2UA was shown as M3UA in nGeniusONE Host Analysis statistics; this
problem has been fixed.
NS-65618 To support a new MDF feed (HKEX OMD-C), changes were made to report HKEX statistics.
NS-65699 On an InfiniStreamNG appliance configured in Geo mode, unidirectional flow records were created for
DNS packets instead of bidirectional flow records; this problem has been fixed.
NS-65869 A buffer overflow in SIP parser when processing XML content caused an unexpected nsprobe process
segmentationt tault; this problem has been fixed.
NS-65960 nGeniusOne HTTPS child apps received through a Zscale Cloud Proxy were not classified correctly;
this problem has been fixed.
NS-66216 A problem that caused packet analysis to display the error "Loopback: Unknown Type" has been fixed.
NS-66323 When simultaneous mining queries were launched in nGeniusONE, the procmanager on the
InfiniStream appliance unexpectedly failed; this problem has been fixed.
NS-66554 On an InfiniStreamNG appliance running Geo-only mode, every 5 minutes the message "All ASI files
were not written. Missed 2 files(s)” was written to the log files for each interface; this problem has
been fixed.
NS-66716 IMSI values in S1Ap/EMM mobile sessions were not properly extracted from GTP via GUTI/P-TMSI; this
problem has been fixed.
NS-67120 When selecting a row with 0 transactions but with ageouts, attempts to drill down resulted in NO
DATA FOUND; this problem has been fixed.
NS-67291 If there was a space after = in the SIP Reason header, no data with Reason Code Distribution was
displayed on nGeniusONE; this problem has been fixed.
NS-67543 Following an upgrade, an InfiniStreamNG appliance running in Geo mode required two
restarts to resume processing all traffic; this problem has been fixed.
NS-67607 MDF decode of PHLX data showed a “Template Undefined” error; this problem has been fixed.
10 733-1372 R e v . A
Tracking ID Description
NS-68054 nGeniusONE and nGenius for Flows were displaying Netflow data gaps on messages correctly
captured by the nGenius Collector; this problem has been fixed.
NS-68343 A problem causing Diameter user database table drops due to incorrect timestamping has been
fixed.in this release.
NS-68449 A problem that caused the nsprobe process to fail unexpectedly during mobile traffic parsing has
been fixed.
NS-69219 A problem resulting in DNS child applications stopped being classified has been fixed.
Known Issues
The following topics contain lists of known limitations and workarounds (where available) applicable
to this release.
Internal ID Description
NS-47087 In this release, PTPv2 timing sources should not be used for Skylake processor-based
Qualified COTS appliances (such as Dell R740, Dell R940, Dell R940xa, HPE DL380 Gen10,
and HPE DL560 Gen10 servers). Use NTP for time synchronization on those servers.
Security Considerations
The following security improvements have been made with the v6.3 release. New appliances will
already include the security updates. For appliances that are upgraded, the security changes are
automatically made when you install the v6.3 application update.
The table below lists specific Common Vulnerabilities and Exposures (CVEs) and how NETSCOUT has
responded to them in this release.
CVE # Solution
CVE-2019-1547 Upgraded OpenSSL to 1.0.2v
CVE-2019-1551 Upgraded OpenSSL to 1.0.2v
CVE-2019-1552 Upgraded OpenSSL to 1.0.2v
CVE-2019-1563 Upgraded OpenSSL to 1.0.2v
CVE-2019-6111 Upgraded OpenSSH to v8.1p1-1
733-1372 R e v . A 11
NETSCOUT SYSTEMS, INC.
310 Littleton Road
Westford, MA 01886-4105
Tel. 978 614-4000
888-999-5946
Fax 978-614-4004
E-mail info@netscout.com
Web www.netscout.com