Skip to content

v0.6.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Nov 03:49
· 1 commit to main since this release
v0.6.2
58c4b42

AckbarX SNMP Trap Forwarder

AckbarX v0.6.2 - SNMP Trap Forwarder

AckbarX is a robust Rust-based SNMP Trap Forwarder developed by GoCortex.io to bridge traditional SNMP monitoring infrastructure with modern HTTP-based log ingestion systems, specifically targeting Cortex XSIAM/XDR platforms.

Whats New

  • Reduced cache retry interval from 60 seconds to 10 seconds for faster recovery
  • Moved cache success messages from INFO to DEBUG level to reduce log noise
  • Lots of code cleanup, honestly, probably should have been a smaller build number jump, honestly, was a typo I couldn't be bothered reverting!

Key Features

  • Multi-protocol SNMP Support - Handles SNMPv1, v2c, and v3 traps with version-specific parsing
  • HTTP Endpoint Forwarding - Forwards traps to Cortex XSIAM and other REST APIs with authentication
  • Source-based Routing - Routes traps to different endpoints based on IP patterns (CIDR, wildcards, exact matches)
  • Redundant File-based Caching - Offline resilience with caching to ALL endpoint directories for full redundancy
  • Atomic Graceful Shutdown - Zero data loss during shutdown with atomic coordination preventing HTTP retry delays
  • Lost and Found System - Preserves all rejected traps for forensic analysis and debugging
  • Advanced Log Rotation - Automatic log management with size limits and file cleanup
  • Dual Configuration Generation - Simple and complex configuration templates for different deployment scenarios
  • Comprehensive Error Handling - Enhanced diagnostics and enterprise-grade reliability

Quick Start

Simple Setup (Single Endpoint, Basic Configuration)

  1. Generate Simple Config: ./ackbarx --generate-simple-config
  2. Edit API Keys: Update config.json with your XSIAM endpoint and authentication
  3. Start Service: ./ackbarx --config config.json

Enterprise Setup (Multiple Endpoints, Advanced Routing)

  1. Generate Complex Config: ./ackbarx --generate-config
  2. Configure Endpoints: Update config.json with your primary/backup XSIAM instances
  3. Set Source Routing: Configure IP-based routing patterns
  4. Start Service: ./ackbarx --config config.json

This release includes binaries for multiple architectures and distributions:

  • ubuntu-x86_64: Ubuntu/Intel AMD 64-bit systems
  • ubuntu-aarch64: Ubuntu/ARM64 systems (Apple Silicon, ARM servers)
  • debian-latest-x86_64: Debian Latest/Intel AMD 64-bit systems
  • debian-latest-aarch64: Debian Latest/ARM64 systems
  • debian12-x86_64: Debian 12/Intel AMD 64-bit systems
  • debian12-aarch64: Debian 12/ARM64 systems

Installation

# Download the appropriate binary for your system
# For Ubuntu x86_64:
wget https://github.com/gocortex/ackbarx/releases/download/v0.6.2/ackbarx-v0.6.2-ubuntu-x86_64

# For Debian latest x86_64:
wget https://github.com/gocortex/ackbarx/releases/download/v0.6.2/ackbarx-v0.6.2-debian-latest-x86_64

# For Debian 12 x86_64:
wget https://github.com/gocortex/ackbarx/releases/download/v0.6.2/ackbarx-v0.6.2-debian12-x86_64

# Make it executable
chmod +x ackbarx-v0.6.2-*

# Move to system PATH (optional)
sudo mv ackbarx-v0.6.2-* /usr/local/bin/ackbarx

Usage

# Generate configuration
./ackbarx --generate-config

# Start with configuration
./ackbarx --config config.json

# Get help
./ackbarx --help

Technical Details

  • Built with Rust: High performance and memory safety
  • SNMP Integration: Multi-protocol support (v1, v2c, v3)
  • Cross-platform: Multiple Linux distributions supported
  • Production Ready: File-based caching and graceful shutdown

Full Changelog: v0.5.0...v0.6.2

Full Changelog: v0.5.0...v0.6.2

Assets 8
Loading