https://www.trisul.org/devzone/ 2026-04-20T11:40:24+00:00 https://www.trisul.org/devzone/ https://www.trisul.org/devzone/ww.trisul.org/devzone/lib/tpl/dokuwiki/images/favicon.ico text/html 2024-04-29T13:57:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:add_alert_bash?rev=1714379228&do=diff How to push an alert into Trisul dispatcher from bash On Ubuntu , the Trisul dispatcher reads from /var/log/syslog and matches all lines using a Regex. It then formats and pushes to * Email * Microsoft Teams via WebHooks If you push a syslog message in the following format into syslog it will make to the automatic email alert delivery system. text/html 2024-05-07T17:17:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:change_super_admin?rev=1715082434&do=diff Changing the default admin username By default Trisul installs two users * admin -- the superadmin * user -- the default user As per security compliance requirements of several industries default user names need to be deleted. Disable the login with username ''user'' text/html 2018-10-03T18:50:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:debuggingcrash?rev=1538572856&do=diff Debugging crashes and other problems on the Trisul Probe nodes Despite our best efforts with testing , sometimes the Trisul-Probes can stop for a number of reasons. This document describes how you can debug such events. Where to look If you find Trisul Probe has crashed, you can collect the following information before restarting. If nothing jumps out , you can contact text/html 2022-08-18T18:16:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:disableweaksshkeyexchange?rev=1660826773&do=diff Disabling weak key exchange algorithms Add this line to /etc/ssh/sshd_config KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521 Then sshd -T Then systemctl restart sshd text/html 2024-05-23T14:58:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:domainsandip?rev=1716456511&do=diff Can we query traffic reports for a URL/Domain from Trisul Netflow Analyzer ? We get a lot of questions from customers who try to query traffic or flows for a domain name and are unable to get it. For example : this customer tries to query for all flows to text/html 2019-01-24T17:58:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:ha?rev=1548332880&do=diff Primary and backup configuration How to setup Trisul Hub and Probe in a High Availability configuration. This guide describes how a backup probe and hub can be setup to take over in case of a primary failure. Setup You need an identically sized backup installation of Trisul that can takeover the load in the event of a primary failure. text/html 2023-07-18T18:33:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:keepalived?rev=1689685433&do=diff Keepalived * Master IP : 10.179.210.103 * Slave IP : 10.179.210.140 * Virtual IP :10.179.210.100 Platforms Oracle/RHEL/CentOS 8 To install Oracle 8 Application Stream repository dnf install epel-release dnf install keepalived Keepalived configuration on master machine text/html 2023-08-16T16:58:41+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:ldapserach?rev=1692185321&do=diff Finding user accounts using ldapsearch ldapsearch -x -D "cn=read-only-admin,dc=example,dc=com" -H ldap://ldap.forumsys.com -b "dc=example,dc=com" -w password '(uid=test)' text/html 2022-08-31T16:42:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:restart_webtrisul_cron?rev=1661944334&do=diff text/html 2019-07-09T16:13:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:udpserver?rev=1562669022&do=diff UDP Receiver Simple program to check if UDP packets are received at user layer import socket sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.bind(("0.0.0.0", 5111)) while True: data, addr = sock.recvfrom(3000) print "received packet :", len(data) text/html 2023-02-06T12:46:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/admin:vlantags?rev=1675667781&do=diff 802.1Q VLAN Tags missing UNTG In packet capture mode, Trisul automatically meters VLAN Tags under the “VLANStats” counter group. Some customers notice that even though VLAN tagged traffic are used in their network, in Trisul Network Analytics then see all traffic as Untagged with the