Download as pdf or txt
Download as pdf or txt
You are on page 1of 18

InfiniStreamNG Qualified COTS

Software Appliance v6.3


Release Notes

733-1372 R e v . A
A p r il 20, 2020
Use of this product is subject to the End User License Agreement available at http://www.NetScout.com/legal/terms-
andconditions or which accompanies the product at the time of shipment or, if applicable, the legal agreement executed by and
between NETSCOUT SYSTEMS, Inc. or one of its wholly-owned subsidiaries (“NETSCOUT”) and the purchaser of this product
(“Agreement”).

Government Use and Notice of Restricted Rights: In U.S. government (“Government”) contracts or subcontracts, Customer will
provide that the Products and Documentation including and technical data (collectively “Materials”), sold or delivered pursuant to this
Agreement for Government use are commercial as defined in Federal Acquisition Regulation (“FAR”) 2.101 and any supplement and
further is provided with RESTRICTED RIGHTS. All materials were fully developed at private expense. Use, duplication, release,
modification, transfer, or disclosure (‘Use”) of the Material is restricted by the terms of this Agreement and further restricted in
accordance with FAR 52.227-14 for civilian Government agency purposes and 252.227-7015 of the Defense Federal Acquisition
Regulations Supplement ("DFARS") for military Government agency purposes, or the similar acquisition regulations of other
applicable Government organizations, as applicable and amended. The Use of Materials is restricted by the terms of the Agreement,
and, in accordance with DFARS Section 227.7202 and FAR Section 12.212, is further restricted in accordance with the terms of
NETSCOUT’s commercial End User License Agreement. All other Use is prohibited, except as described herein.

This Product may contain third-party technology. NETSCOUT may license such third-party technology and documentation ("Third-
Party Materials") for use with the Product only. In the event the Product contains Third-Party Materials, or in the event you have the
option to use the Product in conjunction with Third-Party Materials (as identified by NETSCOUT in the Documentation provided with
this Product), then such third-party materials are provided or accessible subject to the applicable third-party terms and conditions
contained either in the “Read Me” or “About” file located in the Software or on an Application CD provided with this Product, or in an
appendix located in the documentation provided with this Product. To the extent the Product includes Third-Party Materials licensed
to NETSCOUT by third parties, those third parties are third-party beneficiaries of, and may enforce, the applicable provisions of such
third-party terms and conditions.

Open Source Software Acknowledgement: This product may include open source components that are governed by the GNU General
Public License (“GPL”). In accordance with the terms of the GN GPL, NETSCOUT will make available a complete, machine-readable
copy of the source code components of this product covered by the GNU GPL, if any, upon receipt of a written request. Please
identify the product and send a request to:
NETSCOUT SYSTEMS, INC.
GNU GPL Source Code Request
310 Littleton Road
Westford, MA 01886
Attn: Legal Department

To the extent applicable, the following information is provided for FCC compliance of Class A devices:
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC
rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in
a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used
in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment
in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their
own expense.
Modifications to this product not authorized by NETSCOUT could void the FCC approval and terminate your authority to operate
the product. Please also see NETSCOUT’s Compliance and Safety Warnings for NETSCOUT Hardware Products document, which
can be found in the documents accompanying the equipment, or in the event such document is not included with the product,
please see the compliance and safety warning section of the user guides and installation manuals.

No portion of this document may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine
form without prior consent in writing from NETSCOUT. The information in this document is subject to change without notice and does
not represent a commitment on the part of NETSCOUT. The products and specifications, configurations, and other technical
information regarding the products described or referenced in this document are subject to change without notice and NETSCOUT
reserves the right, at its sole discretion, to make changes at any time in its technical information, specifications, service, and support
programs. All statements, technical information, and recommendations contained in this document are believed to be accurate and
reliable but are presented "as is" without warranty of any kind, express or implied. You must take full responsibility for their
application of any products specified in this document. NETSCOUT makes no implied warranties of merchantability or fitness for a
purpose as a result of this document or the information described or referenced within, and all other warranties, express or implied,
are excluded.

Except where otherwise indicated, the information contained in this document represents the planned capabilities and intended
functionality offered by the product and version number identified on the front of this document. Screen images depicted in this
document are representative and intended to serve as example images only.

Copyright © NETSCOUT 2009-2020. All rights reserved.

vi 733-1372 R e v . A
Contacting NETSCOUT SYSTEMS
Customer Support
The best way to contact Customer Support is to submit a Support Request:
https://my.netscout.com/mcp/Pages/default.aspx

Telephone: In the US, call 888-357-7667; outside the US, call


+011 978-614-4000. Phone support hours are 8 a.m. to 8 p.m. Eastern Standard Time (EST).

E-mail: support@netscout.com

When you contact Customer Support, the following information can be helpful in diagnosing and solving problems:
— Type of network platform
— Software and firmware versions
— Hardware model number and serial number
— License number and your organization’s name
— The text of any error messages
— Supporting screen images, logs, and error files, as appropriate
— A detailed description of the problem

Sales
Call 800-357-7666 for the sales office nearest your location.

Training
Course listings and information on certification programs are available at:
https://www.netscout.com/netscout-university

733-1372 R e v . A iii
vi 733-1372 R e v . A
Contents
Introduction ............................................................................................................................................... 1
System Requirements ................................................................................................................................. 2
New and Changed Features.......................................................................................................................... 3
InfiniStream Application Installation Script Changes.................................................................................... 3
Sniffer Decode and Expert Pack ................................................................................................................ 3
Upgrade Considerations............................................................................................................................... 4
Upgrade Paths for InfiniStreamNG Qualified COTS Appliances ...................................................................... 4
Special Notes for Upgrading InfiniStreamNG Qualified COTS Appliances ........................................................ 5
Enabling Transmit Capability on InfiniStreamNG Interfaces ...................................................................... 5
Table Size Allocations and the Geo Application ........................................................................................ 6
Reset Agent ........................................................................................................................................ 7
Q-VUE InfiniStreamNG-Video Probe Upgrades......................................................................................... 7
Downgrading an InfiniStreamNG Appliance after Upgrading to v6.3........................................................... 7
Partitioning Considerations When Upgrading .............................................................................................. 8
Partition Requirements ......................................................................................................................... 8
Resolved Issues........................................................................................................................................ 10
Known Issues........................................................................................................................................... 11
Security Considerations ............................................................................................................................. 11

733-1372 R e v . A v
vi 733-1372 R e v . A
Introduction
This document describes new features, known issues, and resolved issues in the v6.3 release for
InfiniStreamNG Qualified Commercial-Off-the-Shelf (COTS) appliances. NETSCOUT strongly
recommends that you read this document in its entirety, as well as the following additional
documentation:
• InfiniStreamNG Qualified COTS Appliance v6.x Administrator Guide
• Agent Configuration Utility for CDM/ASI Administrator Guide, v6.3
• nGeniusONE documentation and Online Help
These and other documents as well as any updates to these release notes are available on the
My.NETSCOUT.com website.
NOTE: For information on other InfiniStream products, such as virtual InfiniStreamNG appliances
(vSTREAM), or InfiniStream hardware appliances shipped by NETSCOUT SYSTEMS or certified
resellers, refer to the separate Release Notes for those products available from the
My.NETSCOUT.com website .

Refer to the following sections for details:


• System Requirements
• New and Changed Features
• Upgrade Considerations
• Resolved Issues
• Known Issues
• Security Considerations

733-1372 R e v . A 1
System Requirements
NETSCOUT has tested and verified the following servers to operate as InfiniStreamNG Qualified COTS
software appliances:

• HP Proliant DL Rack Servers such as DL360 Gen9 (1U), DL380 Gen9 (2U), DL380 Gen10 (2U),
DL385 Gen10 (2U), DL560 Gen9 (2U) and DL560 Gen10 (2U) platforms.
• Dell PowerEdge Rack Servers such as R430 (1U), R730xd (2U), R740xd (2U), R830 (3U), R940
(3U), and R940xa (4U platforms.

For detailed configuration options and requirements for these servers, as well as information on other
servers that may have been qualified for use as InfiniStreamNG Qualified COTS appliances in addition
to those listed above, contact NETSCOUT SYSTEMS Product Management.

When you purchase an InfiniStreamNG Qualified COTS appliance kit, you receive the following items:

• ASI Network Interface Card (NIC) for monitoring/packet capture. This ASI NIC contains a
special firmware signature that permits it to be used as part of an InfiniStreamNG appliance. A
ground strap is provided in the kit when installing the ASI NIC.
NOTE: InfiniStreamNG Qualified COTS appliances consume the same Type 1 licenses within
nGeniusONE as InfiniStream hardware appliances. For example, InfiniStreamNG Qualified COTS
appliances that include a 4-port ASI NIC consume four Type 1 licenses. If you already have other
InfiniStreamNG appliances in your network and you have available Type 1 licenses, you do not
need to purchase any additional licenses from NETSCOUT to install/operate an InfiniStreamNG
Qualified COTS appliance.
• System Preparation DVD that verifies that the server hardware you supplied meets the
minimum InfiniStreamNG Qualified COTS appliance system requirements. The software on this
DVD also configures the RAID controller and storage arrays used to stored packet data.
• Restore/Operating System & Drivers DVD that installs a customized, hardened Linux
operating system and loads the device driver for the ASI NIC. This OS replaces any existing
operating system already installed on the server.
• Application DVD that installs the InfiniStream application software which performs packet
capture and storage.

2 733-1372 R e v . A
New and Changed Features
InfiniStreamNG Qualified COTS appliance and new features since the last major release (v6.3) include:
• InfiniStream Application Installation Script Changes
• Sniffer Decode and Expert Pack

InfiniStream Application Installation Script Changes


When upgrading to v6.3 or installing v6.3 for the first time, you have the option of repartitioning the
drives in the InfiniStream appliance (note that all stored data is lost during repartitioning). If you choose
to change partition sizes during the upgrade/installation and you have not previously installed
Geoprobe software, you will be asked if the appliance is installed in an Enterprise (default) or Service
Provider network. The installer uses this network mode to optimize storage on the appliance. If you
choose Service Provider, an /archive partition is automatically created with a fixed size (not configurable)
to store certain mobile data. Once you choose the network mode (Enterprise or Service Provider), the
selection is preserved during future upgrades. To change modes, you must reinstall the application
software and choose to repartition the appliance.

Sniffer Decode and Expert Pack


The v6.3 release contains the Sniffer Decode & Expert Pack 20.1.59 and its latest patches.

733-1372 R e v . A 3
Upgrade Considerations
The following sections provide the upgrade specifications for the v6.3 NETSCOUT software release:
• Upgrade Paths for InfiniStreamNG Qualified COTS Appliance s
• Special Notes for Upgrading InfiniStreamNG appliances
• Partitioning Considerations When Upgrading
For step-by-step upgrade instructions, refer to Chapter 6 of the InfiniStreamNG Qualified COTS
Appliance v6.x Administrator Guide.

Upgrade Paths for InfiniStreamNG Qualified COTS Appliances


With v6.3, there are separate sets of application and restore files available based on the processor
installed in your Qualified COTS server:
• For supported Intel Skylake based servers (such as Dell R740, Dell R940, Dell R940xa, HPE
DL380 Gen10, and HPE DL560 Gen10), use the following files:
o ngenius-datasource-6300J-restore-64Bit.iso restore image
o is-6300-xxx-eth-J.bin InfiniStream application software file
o Geo-6300J-xxx-176.bin Geo application software file
• For supported Intel Broadwell/Haswell based servers (such as Dell R430, Dell R730, Dell R830,
HPE DL360 Gen9, HPE DL380 Gen9, and HPE DL560 Gen9), use the following files:
o ngenius-datasource-6300G-restore-64Bit.iso restore image
o is-6300-xxx-eth.bin application software file
o Geo-6300-xxx-176.bin Geo application software file
The available upgrade paths to v6.3 depend on the starting version of the target appliance. The table
below summarizes the available paths for different starting versions. Refer to the InfiniStreamNG
Qualified COTS Software Appliance v6.x Administrator Guide for upgrade instructions.

Starting Version Upgrade Path Available


V6.2.2 Build 191 or higher Direct upgrade to v6.3 is supported. Three upgrade options are available:
v6.2.1 Build 314 or higher a) Use nGeniusONE v6.3 to perform remote upgrades of the indicated InfiniStream
v6.2 Build 451 or higher appliance. You can schedule automatic downloads of InfiniStream software updates for
v6.1.1 Build 213 or higher your appliances, and then perform a remote upgrade.
-or-
b) Upgrade to v6.3 directly on top of the existing version by installing the v6.3 application.
-or-
c) Reimage the operating system† and install the v6.3 application. Note that all stored data
is lost when you reimage.
v6.1 Build 509 or higher Direct upgrade to v6.3 is not supported. Two upgrade options are available:
v6.0.1 Build 245 or higher a) Upgrade to v6.1.1 Build 213 (or higher) first and then to v6.3.
v6.0 Build 579 or higher -or-
v5.5.3 Build 332 or higher b) Reimage the operating system† and install the v6.3 application. Note that all stored data
is lost when you reimage.
Earlier than v5.5.3 Direct upgrade to v6.3 is not supported. To upgrade to v6.3, reimage the operating system†
and install the v6.3 application. Note that all stored data is lost when you reimage.

4 733-1372 R e v . A
Special Notes for Upgrading InfiniStreamNG Qualified COTS
Appliances
Review the following considerations prior to installing or upgrading your InfiniStreamNG appliance
with this release.

Enabling Transmit Capability on InfiniStreamNG Interfaces


In order to take full advantage of Packet Flow eXtender (PFX), or tunnel termination features on the
InfiniStreamNG appliance, you must enable transmit capability on the appliance interfaces by
downloading and installing a .pfx_enable file from My.NETSCOUT.com onto the InfiniStreamNG
appliance. Until this file is present on the appliance, PFX options in the Agent Configuration Utility
(localconsole) are not displayed and interfaces cannot be configured in PFX mode.
To obtain and install the .pfx_enable file, perform the following steps AFTER upgrading the
InfiniStreamNG appliance to v6.3:
1. Launch a Web browser and enter the following URL:
https://my.netscout.com/mcp/Pages/Landing.aspx
2. Click on Licensing & Downloads.
3. From the Product list, choose InfiniStreamNG Qualified Software Appliances and
choose the 6.3 product version.
4. Scroll down the page and click on the Download tab.
5. Download the .pfx_enable file to your local machine.
6. Use either WinSCP (Windows machines) or SCP (Linux machines) to copy the file to the
/opt/platform directory on the InfiniStreamNG appliance.
7. Log in to the appliance as the root user (default password is netscout) using any of the
following methods:
• Locally, using an attached keyboard
• Remotely, via an SSH session (for example, PuTTY)
• Remotely, via the web-based IPMI/RMM interface
8. Navigate to the /opt/NetScout/rtm/bin directory:
cd /opt/NetScout/rtm/bin
9. Restart the InfiniStream processes:
./stopall
./start
When the processes start up, a check is performed to verify that the InfiniStreamNG
appliance contains a supported NIC.
10. To activate the transmit capability on InfiniStreamNG interfaces, perform the following
steps:
a. Launch the Agent Configuration Utility:
./localconsole

733-1372 R e v . A 5
b. From the main menu, enter option [7] Select Interface and choose the number of
the interface you want to configure in PFX mode from the next menu.
c. In the Interface Options menu, enter option [65} Toggle Interface Mode. A
notification message appears as shown below:
##########################################################
# #
# TX MODE NOTICE #
# #
##########################################################

By selecting the "PFX Mode" option, you are activating the


NetScout PFX Mode feature which will enable the monitoring port(s)
of this device to be used for communication and transmissions
to other devices.
Use of the PFX Mode option is only authorized for the purpose of
service assurance activities such as network and application
monitoring and security. All other uses are strictly prohibited.

--> [1] Do Not Proceed With Activation


[2] Proceed With Activation

Please Enter your choice :


d. To activate transmit capability on this interface and configure the interface in PFX
mode, press 2.
If you wish to later disable the transmit capability on an interface, you can toggle PFX mode off using
the Agent Configuration Utility in one of two ways:
• Select the interface option [7] from the main menu, choose the interface, and enter option
[65} Toggle Interface Mode to return the interface to the default (listen only) mode
• Enter the command line mode and issue the following command:
set interface_options 65 default
To permanently disable the transmit capability, navigate to the /opt/platform directory, delete the
.pfx_enable file, and restart the processes from the /opt/NetScout/rtm/bin directory.

Table Size Allocations and the Geo Application


Do not configure Table Size Allocations (TSA) on InfiniStream appliances until after Geo application
software has been installed. When table size allocations are configured, the Agent assumes that it can
use all available RAM for tables. Once the Geo application is installed, available RAM is significantly
reduced, potentially resulting in table size allocations that are much larger than memory can support,
potentially resulting in unstable behavior.
If you have already configured table size allocations, reduce them by half (or more) before installing the
Geo application, followed by a TSA reconfiguration afterwards.

6 733-1372 R e v . A
Reset Agent
Following the automatic reboot of the InfiniStreamNG appliance, during upgrade or first time
configuration, the agent synchronizes with the managing server. To ensure all agent processes and
tables are in sync, NETSCOUT recommends performing an additional reset of the agent. To do this,
access the system command-line of the appliance as the root user and perform the following steps:
/opt/NetScout/rtm/bin/stopall
/opt/NetScout/rtm/bin/start

Q-VUE InfiniStreamNG-Video Probe Upgrades


Once Q-VUE software is installed on a NETSCOUT InfiniStreamNG Qualified COTS appliance, if the
InfiniStream application software (ASI) is ever upgraded, the Q-VUE application MUST be re-installed.

Downgrading an InfiniStreamNG Appliance after Upgrading to v6.3


Following an upgrade to v6.3, if you choose to return to a previous release, you must reimage the
InfiniStreamNG appliance before installing the earlier release. Reimaging the appliance is necessary
to restore the proper combination of OS kernel updates and software patches required for
successful system operation. Note that when you reimage the appliance, all stored packet data and
agent configuration settings are lost.
If you choose to restore a previous release, be sure to the use the ISO file appropriate to the release
that you are restoring. For example, to return a Dell R730 to v6.1.1 after upgrading to v6.3, use the
ngenius-datasource-6110G-restore-64Bit.iso file to reimage the operating system and then use
the is-6110-213-eth.bin (or later) file to re-install the application.

733-1372 R e v . A 7
Partitioning Considerations When Upgrading
During the upgrade to v6.3, you will have the option to change your partitioning strategy. Use this
topic to review the impact of changing partition sizes and the sizing required for the way you will use
the InfiniStreamNG appliance.

Partition Requirements
Partition Description Range
/xdr If the appliance will be configured to produce xDRs/ASRs (eXtended Data Default = 30% of
Records/Adaptive Session Records) and Conversation data for use by available storage.
nGeniusONE or nGenius Subscriber Intelligence, you MUST allocate an /xdr Range = 6 GB to
partition to store this session data. This partition can be eliminated if the 50% of available
appliance will not be used to produce session data for use with those storage.
applications. Enter 0 to
An xDR stores metadata for mobile subscriber sessions. The nGenius Subscriber eliminate.
Intelligence application uses mobile subscriber records to correlate mobile sessions
across multiple monitored legs. The more space you allocate to xDR storage, the
further back Subscriber Intelligence will be able to mine for mobile data session
correlation.
/metadata This partition is required for nGeniusONE, Performance Manager, and Default = 50 GB
InfiniStream Console features such as remote decode, data capture, and Range = 25 GB to
InfiniStream trace file storage. 10% of available
Set a size for this partition based on your anticipated usage of the features listed storage.
below:
• nGeniusONE Decode View/Performance Manager Remote Decode
stores transient session data files in /data and
<installdirectory>/rtm/pa/data. Although these files are automatically
removed when the decode session is closed, multiple simultaneous decode
sessions can also create temporary index files in the /metadata partition
consuming as much as 20 GB of space.
• InfiniStream Console and Performance Manager users can save remote trace
files on the InfiniStreamNG appliance’s /metadata partition instead of
immediately moving mined packets to the InfiniStream Console system or
nGeniusONE Server, respectively.

It is strongly recommended that you do not save remote trace files on the
InfiniStreamNG appliance to this partition. These trace files consume space on the
partition and reduce the space available for the ASI metadata required for
nGeniusONE monitors and enablers.
Excluding the remote decode operations, files saved on this partition must be
managed manually. Users who anticipate heavy use of any of the above features
should increase the default to a greater percentage of the total storage. Note that if
you choose to increase the size of an existing /metadata partition, all stored
metadata will be lost.

8 733-1372 R e v . A
Partition Description Range
/asi This partition is dedicated to storing Adaptive Service Intelligence Default = 50 GB
(ASI) metadata. Range = 25 GB to
In releases prior to v5.4.1, ASI metadata was written to the /metadata partition. In 10% of available
v5.4.1 and later releases, for improved performance and to avoid contention for space storage.
in the /metadata partition from saved trace and decode files, this new /asi partition
can be created. Whether or not this partition is created depends upon your choices
when upgrading:
• If you choose to retain your partitions during the upgrade and you have not
previously created a /asi partition, this partition is not created. ASI data
continues to be written to the /metadata partition as it has in previous
releases (refer to recommendations for the /metadata partition below).
• If you choose to modify your partitions, the /asi partition is automatically
created and linked to the /metadata partition. All ASI metadata is written to
this partition instead of /metadata and this partition cannot be eliminated.
/flow Required for use with the InfiniStream Console only. Default = 0 GB
InfiniStream Console users MUST allocate a /flow partition for the storage of RMON Range = 1-35% of
data, 15-second flow records, and aggregated 5-minute statistics. All other users can available storage.
enter 0 to eliminate this partition or leave the size set to the default value (0 GB). Enter 0 to
eliminate.
/raw This partition is used for packet storage and is not configurable. Total remaining
(NETSCOUT On XFS-formatted appliances, collected packets are stored in a /data partition. On storage space
File System) or NETSCOUT File System (NFS) formatted appliances, collected packets are stored in a after space is
/data (XFS) /raw partition. For new installations, only NFS formatted partitions can be created. allocated to other
partitions. Cannot
be eliminated.

733-1372 R e v . A 9
Resolved Issues
The following issues have been resolved in v6.3. Each issue is listed in the table below along with its
associated NETSCOUT ticket numbers.

Tracking ID Description
NS-39747 SMS KPIs were unavailabe in SIP WiFi scenarios; this problem has been fixed.
NS-43333 A problem that caused memory over consumption by the nsprobe process has been fixed.
NS-52834 A problem that caused cored dumps on an InfiniStreamNG Qualified COTS Dell 940xa following GTP
mobile application changes has been fixed.
NS-57419 ASRs for BSSAP+ were not generated when additional SSN values were added in nGeniusONE Global
Settings; this problem has been fixed.
NS-60658 An RCS SIP-Invite classification in nGeniusONE, where SIP RCS* children were not broken out of the
parent SIP traffic has been fixed.
NS-64334 A problem that caused nsprobe process segmentation faults and unexpected process failures has
been fixed.
NS-64701 After upgrading to v6.2.1 Build 437, the LDAP ageout was increased, resulting in subsequent ModReq
messages not being counted; this problem has been fixed.
NS-64753 Following an upgrade to v6.2.1, transactions were incorrectly reported on different VLANs; this
problem has been fixed.
NS-64821 An InfiniStream Console analysis failure due to procmanager process communication issues has been
fixed.
NS-64932 A problem resulting in GTPv1 table drops during mobile 3G GTP traffic processing has been fixed.
NS-65122 A problem that caused S11 mobile traffic miscorrelations to Increase over time has been fixed.
NS-65281 A problem that caused an InfiniStream to stop processing RADIUS traffic after receiving a malformed
packet and incorrectly labeling it as IP_Other has been fixed.
NS-65529 CAMEL traffic over M2PA/M2UA was shown as M3UA in nGeniusONE Host Analysis statistics; this
problem has been fixed.
NS-65618 To support a new MDF feed (HKEX OMD-C), changes were made to report HKEX statistics.
NS-65699 On an InfiniStreamNG appliance configured in Geo mode, unidirectional flow records were created for
DNS packets instead of bidirectional flow records; this problem has been fixed.
NS-65869 A buffer overflow in SIP parser when processing XML content caused an unexpected nsprobe process
segmentationt tault; this problem has been fixed.
NS-65960 nGeniusOne HTTPS child apps received through a Zscale Cloud Proxy were not classified correctly;
this problem has been fixed.
NS-66216 A problem that caused packet analysis to display the error "Loopback: Unknown Type" has been fixed.
NS-66323 When simultaneous mining queries were launched in nGeniusONE, the procmanager on the
InfiniStream appliance unexpectedly failed; this problem has been fixed.
NS-66554 On an InfiniStreamNG appliance running Geo-only mode, every 5 minutes the message "All ASI files
were not written. Missed 2 files(s)” was written to the log files for each interface; this problem has
been fixed.
NS-66716 IMSI values in S1Ap/EMM mobile sessions were not properly extracted from GTP via GUTI/P-TMSI; this
problem has been fixed.
NS-67120 When selecting a row with 0 transactions but with ageouts, attempts to drill down resulted in NO
DATA FOUND; this problem has been fixed.
NS-67291 If there was a space after = in the SIP Reason header, no data with Reason Code Distribution was
displayed on nGeniusONE; this problem has been fixed.
NS-67543 Following an upgrade, an InfiniStreamNG appliance running in Geo mode required two
restarts to resume processing all traffic; this problem has been fixed.
NS-67607 MDF decode of PHLX data showed a “Template Undefined” error; this problem has been fixed.

10 733-1372 R e v . A
Tracking ID Description
NS-68054 nGeniusONE and nGenius for Flows were displaying Netflow data gaps on messages correctly
captured by the nGenius Collector; this problem has been fixed.
NS-68343 A problem causing Diameter user database table drops due to incorrect timestamping has been
fixed.in this release.
NS-68449 A problem that caused the nsprobe process to fail unexpectedly during mobile traffic parsing has
been fixed.
NS-69219 A problem resulting in DNS child applications stopped being classified has been fixed.

Known Issues
The following topics contain lists of known limitations and workarounds (where available) applicable
to this release.

Internal ID Description
NS-47087 In this release, PTPv2 timing sources should not be used for Skylake processor-based
Qualified COTS appliances (such as Dell R740, Dell R940, Dell R940xa, HPE DL380 Gen10,
and HPE DL560 Gen10 servers). Use NTP for time synchronization on those servers.

Security Considerations
The following security improvements have been made with the v6.3 release. New appliances will
already include the security updates. For appliances that are upgraded, the security changes are
automatically made when you install the v6.3 application update.
The table below lists specific Common Vulnerabilities and Exposures (CVEs) and how NETSCOUT has
responded to them in this release.

CVE # Solution
CVE-2019-1547 Upgraded OpenSSL to 1.0.2v
CVE-2019-1551 Upgraded OpenSSL to 1.0.2v
CVE-2019-1552 Upgraded OpenSSL to 1.0.2v
CVE-2019-1563 Upgraded OpenSSL to 1.0.2v
CVE-2019-6111 Upgraded OpenSSH to v8.1p1-1

733-1372 R e v . A 11
NETSCOUT SYSTEMS, INC.
310 Littleton Road
Westford, MA 01886-4105
Tel. 978 614-4000
888-999-5946
Fax 978-614-4004
E-mail info@netscout.com
Web www.netscout.com

You might also like