InfiniStream Certified/Hardware Appliance v6.

3
Release Notes

733-1371 R e v .A
A p r il 20, 2020
Use of this product is subject to the End User License Agreement available at http://www.NetScout.com/legal/terms-
andconditions or which accompanies the product at the time of shipment or, if applicable, the legal agreement executed
by and between NETSCOUT SYSTEMS, Inc. or one of its wholly-owned subsidiaries (“NETSCOUT”) and the purchaser of
this product (“Agreement”).
Government Use and Notice of Restricted Rights: In U.S. government (“Government”) contracts or subcontracts, Customer
will provide that the Products and Documentation including and technical data (collectively “Materials”), sold or delivered
pursuant to this Agreement for Government use are commercial as defined in Federal Acquisition Regulation (“FAR”) 2.101
and any supplement and further is provided with RESTRICTED RIGHTS. All materials were fully developed at private
expense. Use, duplication, release, modification, transfer, or disclosure (‘Use”) of the Material is restricted by the terms of
this Agreement and further restricted in accordance with FAR 52.227-14 for civilian Government agency purposes and
252.227-7015 of the Defense Federal Acquisition Regulations Supplement ("DFARS") for military Government agency
purposes, or the similar acquisition regulations of other applicable Government organizations, as applicable and amended.
The Use of Materials is restricted by the terms of the Agreement, and, in accordance with DFARS Section 227.7202 and FAR
Section 12.212, is further restricted in accordance with the terms of NETSCOUT’s commercial End User License Agreement.
All other Use is prohibited, except as described herein.
This Product may contain third-party technology. NETSCOUT may license such third-party technology and documentation
("Third-Party Materials") for use with the Product only. In the event the Product contains Third-Party Materials, or in the
event you have the option to use the Product in conjunction with Third-Party Materials (as identified by NETSCOUT in the
Documentation provided with this Product), then such third-party materials are provided or accessible subject to the
applicable third-party terms and conditions contained either in the “Read Me” or “About” file located in the Software or on
an Application CD provided with this Product, or in an appendix located in the documentation provided with this Product. To
the extent the Product includes Third-Party Materials licensed to NETSCOUT by third parties, those third parties are third-
party beneficiaries of, and may enforce, the applicable provisions of such third-party terms and conditions.
Open Source Software Acknowledgement: This product may include open source components that are governed by the GNU
General Public License (“GPL”). In accordance with the terms of the GN GPL, NETSCOUT will make available a complete,
machine-readable copy of the source code components of this product covered by the GNU GPL, if any, upon receipt of a
written request. Please identify the product and send a request to:
NETSCOUT SYSTEMS, INC.
GNU GPL Source Code Request
310 Littleton Road
Westford, MA 01886
Attn: Legal Department
To the extent applicable, the following information is provided for FCC compliance of Class A devices:
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of
the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency
energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case
users will be required to correct the interference at their own expense.
Modifications to this product not authorized by NETSCOUT could void the FCC approval and terminate your authority to
operate the product. Please also see NETSCOUT’s Compliance and Safety Warnings for NETSCOUT Hardware Products
document, which can be found in the documents accompanying the equipment, or in the event such document is not
included with the product, please see the compliance and safety warning section of the user guides and installation
manuals.
No portion of this document may be copied, photocopied, reproduced, translated, or reduced to any electronic medium or
machine form without prior consent in writing from NETSCOUT. The information in this document is subject to change
without notice and does not represent a commitment on the part of NETSCOUT. The products and specifications,
configurations, and other technical information regarding the products described or referenced in this document are subject
to change without notice and NETSCOUT reserves the right, at its sole discretion, to make changes at any time in its
technical information, specifications, service, and support programs. All statements, technical information, and
recommendations contained in this document are believed to be accurate and reliable but are presented "as is" without
warranty of any kind, express or implied. You must take full responsibility for their application of any products specified in
this document. NETSCOUT makes no implied warranties of merchantability or fitness for a purpose as a result of this
document or the information described or referenced within, and all other warranties, express or implied, are excluded.
Except where otherwise indicated, the information contained in this document represents the planned capabilities and
intended functionality offered by the product and version number identified on the front of this document. Screen images
depicted in this document are representative and intended to serve as example images only.
Copyright © NETSCOUT 2009-2020. All rights reserved.

ii 733-1371 R e v .A
Contacting NETSCOUT SYSTEMS
Customer Support
The best way to contact Customer Support is to submit a Support Request:
https://my.netscout.com/mcp/Pages/default.aspx

Telephone: In the US, call 888-357-7667; outside the US, call

+011 978-614-4000. Phone support hours are 8 a.m. to 8 p.m. Eastern Standard Time (EST).

E-mail: [email protected]

When you contact Customer Support, the following information can be helpful in diagnosing and solving problems:
— Type of network platform
— Software and firmware versions
— Hardware model number and serial number
— License number and your organization’s name
— The text of any error messages
— Supporting screen images, logs, and error files, as appropriate
— A detailed description of the problem

Sales
Call 800-357-7666 for the sales office nearest your location.

Training
Course listings and information on certification programs are available at:
https://www.netscout.com/netscout-university

733-1 371 R e v .A
iii
iv 733-1371 R e v .A
 Contents
Introduction .................................................................................................................................... 1
System Requirements ...................................................................................................................... 2
InfiniStream Models Supported in this Release ................................................................................ 2
Compatibility with NETSCOUT Clients and Consoles.......................................................................... 3
New and Changed Features............................................................................................................... 4
New Remote InfiniStreamNG 690 Platform...................................................................................... 4
Using InfiniStreamNG Appliances as nGeniusPULSE nPoints .............................................................. 5
InfiniStream Application Installation Script Changes......................................................................... 6
Sniffer Decode and Expert Pack ..................................................................................................... 6
Upgrade Considerations.................................................................................................................... 7
Overall NETSCOUT Product Upgrade Sequence ................................................................................ 7
Upgrade Paths for InfiniStream Hardware Appliances ....................................................................... 8
Special Notes for Upgrading InfiniStream Appliances........................................................................ 9
Enabling Transmit Capability on InfiniStreamNG Interfaces ........................................................... 9
Table Size Allocations and the Geo Application ........................................................................... 10
Reset Agent ........................................................................................................................... 11
Sniffer Intelligence No Longer Supported.........................................Error! Bookmark not defined.
Q-VUE InfiniStreamNG-Video Probe Upgrades............................................................................ 11
Downgrading an InfiniStream Appliance after Upgrading to v6.3 .................................................. 11
Partitioning Considerations When Upgrading to v6.3 ...................................................................... 12
Changing or Retaining Partitions During an Upgrade ................................................................... 12
Partition Requirements ............................................................................................................ 13
Resolved Issues............................................................................................................................. 15
Known Issues................................................................................................................................ 16
Security Considerations .................................................................................................................. 16

733-1 371 R e v .A
v
vi 733-1371 R e v .A
Introduction
This document describes new features, known issues, and resolved issues in the v6.3 release for
InfiniStream hardware and Certified appliances. NETSCOUT strongly recommends that you read this
document in its entirety, as well as the following additional documentation:
• InfiniStream Certified/Hardware Appliance v6.3 Administrator Guide
• Agent Configuration Utility for CDM/ASI Administrator Guide, v6.3
• nGeniusONE documentation and Online Help
These and other documents as well as any updates to these release notes are available on the
My.NETSCOUT.com website.
NOTE: For information on other InfiniStream products, such as virtual InfiniStream appliances
(vSTREAM), or InfiniStreamNG Qualified COTS software appliances, refer to the separate Release
Notes for those products available from the My.NETSCOUT.com website.
Refer to the following sections for details:
• System Requirements
• New and Changed Features
• Upgrade Considerations
• Resolved Issues
• Known Issues
• Security Considerations

733-1 371 R e v .A 1
System Requirements
NOTE: This document describes v6.3 software features and limitations for InfiniStream appliances
shipped by NETSCOUT SYSTEMS and certified resellers. For information on InfiniStream software
products, such as virtual InfiniStream (vSTREAM) and InfiniStreamNG Qualified COTS models, refer
to the separate Release Notes for those products available from the My.NETSCOUT.com website.

InfiniStream Models Supported in this Release

The InfiniStream appliance models that can operate v6.3 software are listed in the table below.
These models all use a 64-bit operating system and all support Adaptive Service Intelligence™ (ASI)
for use with nGeniusONE monitors and enablers. For more detailed lists showing every InfiniStream
model that can or cannot be upgraded to this release, refer to Chapter 6, “Upgrading an InfiniStream
Appliance” in the InfiniStream Certified/Hardware Appliance v6.3 Administrator Guide. The NETSCOUT
Data Source Hardware Model History can also be used to determine the latest versions of software
available for every InfiniStream hardware appliance model ever produced by NETSCOUT SYSTEMS.
Those documents are available on the My.NETSCOUT.com website.

InfiniStream Model That Supports Geo Mode for Supports Arbor Supports PFX Can be Used
Supports v6.3 IrisView & nSA? Threat Analytics? Interfaces? as nPoint?
Remote ISNG 690K, C-00690 No No No Yes
1410H, C-01410H Yes Yes Yes Yes
1410J Yes Yes Yes Yes
1906A No No No No
19xxD No No No No
2395H No Yes Yes Yes
2395J No Yes Yes Yes
2410H Yes Yes Yes Yes
2410J Yes Yes Yes Yes
2695H, C-02695H Yes Yes Yes Yes
2695J, C-02695J Yes Yes Yes Yes
C-02795J Yes Yes Yes Yes
29xxA No No No No
29xxD No No No No
45xxD No No No No
4695H No Yes Yes Yes
4795H Yes Yes Yes Yes
4795J Yes Yes Yes Yes
4895H, C-04895H Yes Yes Yes Yes
4895J, C-04895J Yes Yes Yes Yes
6695G, C-06695G Yes Yes Yes Yes
6695J, C-06695J Yes Yes Yes Yes

2 733-1371 R e v .A
 InfiniStream Model That Supports Geo Mode for Supports Arbor Supports PFX Can be Used
Supports v6.3 IrisView & nSA? Threat Analytics? Interfaces? as nPoint?
69xxC No No No No
79xx No No No No
79xxF, 89xxF (NEBS) No No No No
85xxD, 89xxD No No No No
9795G Yes Yes Yes Yes
9795J Yes Yes Yes Yes
98xxG, C-098xxG, C-09AxxG Yes Yes Yes Yes
98xxJ, C-098xxJ, C-09AxxJ Yes Yes Yes Yes

Compatibility with NETSCOUT Clients and Consoles

For optimal results and access to the most recent features, NETSCOUT recommends that the
console system (such as nGeniusONE) and InfiniStream appliance run the same version of software.
In cases where this is not practical, use the table below to understand the expected results.
...Compatible with this Client/Console Version?
Is this nGeniusONE IrisView nGenius Subscriber nGenius Voice |
InfiniStream 6.3 7.17.6.3 Intelligence 6.3 Video Manager
Version... 5.2.1
6.3 Yes Yes Yes Yes
6.2.2 Yes Yes Yes Yes
6.2.1 Yes Yes Yes Yes
6.2 Yes Yes Yes Yes
6.1.1 Yes Yes Yes Yes
6.1 Yes Yes Yes Yes
6.0.1 Yes Yes Yes Yes
6.0 No No Yes Yes
5.5.3 No No No Yes
5.5.2 No No No Yes
5.5 No No No Yes

5.4.1 No No No Yes

5.4 No No No Yes

5.3 Patch No No No Yes

5.3 No No No Yes
5.2.1 Patch,
5.2.1
5.2
v5.1.1 or earlier No No No No

733-1 371 R e v .A 3
New and Changed Features
InfiniStream hardware appliance updates and new features since the last major release (v6.2.2) include:
• New Remote InfiniStreamNG 690 Platform
• Using InfiniStreamNG Appliances as nGeniusPULSE nPoints
• InfiniStream Application Installation Script Changes
• Sniffer Decode and Expert Pack

New Remote InfiniStreamNG 690 Platform

The standard InfiniStream v6.3 application includes support for a new hardware platform, the Remote
InfiniStreamNG 690 appliance. For enterprises transitioning applications to cloud-based platforms, the
Remote InfiniStreamNG 690 appliance provides visibility into remote site location performance and user
experience along the network edge. Previously, remote sites communicated through a central office,
allowing ASI to capture data. The Remote InfiniStreamNG 690 platform now provides a lower-cost
solution for pervasive monitoring at the edge.
The Remote InfiniStreamNG 690 appliance offers the following features:
• Availability as both a hardware appliance purchased directly from NETSCOUT and as a Certified
appliance purchased from certified resellers
• Shallow-depth rackmount 1U chassis with a single internal power supply
• Dual port 10 Gigabit/1 Gigabit NIC for packet capture
• Dual 1 TB hard drives using software RAID for data storage
• No user-serviceable components
The Agent Configuration Utility for CDM/ASI Administrator Guide v6.3 provides instructions for configuring
Remote InfiniStreamNG 690 appliances. However, certain commands and features documented in that
guide are not supported for these appliances. The following limitations apply to Remote InfiniStreamNG
690 appliances:
• ASI mode only. On Remote InfiniStreamNG 690 appliances, asi_mode must be set to ASI. The
other modes, CDM and hybrid, are not supported.
• PFX functionality not supported. You cannot install the .pfx_enable file on Remote
InfiniStreamNG 690 appliances to enable nGenius Packet Flow eXtender (PFX) functionality and
transmit capability on the appliance interfaces. The pfx command option cannot be used.
• Interface type must be Enterprise. Other interface types are designed for Service Provider
mobile networks and are not supported in this release.
• PFS mode not allowed on Remote InfiniStreamNG 690 interfaces. PFS-specific probe_mode
settings (pfs_fdx and pfs_hdx) are not supported for Remote InfiniStreamNG 690 appliances.
The pfs command options cannot be used.
• InfiniStream Console not supported. When the Remote InfiniStreamNG 690 appliance is first
installed, it is configured for use with nGeniusONE only (nGeniusONE Managed enabled). Do not
use the Agent Options menu to attempt to enable InfiniStream Console.
• Eth0 GRE Monitoring not currently supported. Do not use the Agent Options menu to attempt
to enable Eth0 Monitoring Mode.
Refer the InfiniStreamNG Certified/Hardware Appliance v6.3 Administrator Guide for complete details on
installing and managing this appliance.

4 733-1371 R e v .A
Using InfiniStreamNG/CyberStream Appliances as nGeniusPULSE
nPoints
With release v6.3 and later, InfiniStreamNG and CyberStream appliances can simultaneously operate as
data sources for nGeniusONE or Arbor Threat Analytics while also serving as an nPoint agent used with
nGeniusPULSE. Deployed at key locations throughout the network, nPoints run active tests, returning
results to an nGeniusPULSE server. Results are displayed on the nGeniusPULSE server and can be used
to verify the operation of network infrastructure, systems, and applications. InfiniStreamNG and
CyberStream appliances enabled as nPoints use their eth1 interface for these active tests while still
collecting packets on their monitor interfaces.
nPoint support is integrated into the v6.3 InfiniStream and CyberStream installation files
(is-6300-xxx-eth.bin, is-6300-xxx-eth-J.bin or cs-6300-xxx-eth-J.bin); no additional software is required.
During a v6.3 installation/upgrade, you are asked whether or not to enable nPoint on the appliance. If
you choose to enable nPoint, following the installation/upgrade, you must run a script (netscout_npoint-
install.sh) to configure the IP addresses for the eth1 interface and the nGeniusPULSE server where the
appliance will sends the active test results.
The following requirements/limitations apply to using InfiniStreamNG nPoints:
• Only the following InfiniStreamNG hardware/Certified appliance models support nPoint
functionality:
o Remote InfiniStreamNG 690 and C-00690 appliances
o InfiniStreamNG 14xxJ, 23xxJ, 24xxJ, 26xxJ, 47xxJ, 48xxJ, 66xxJ, 97xxJ, 98xxJ, and associated
Certified C-026xxJ, C-027xxJ, C-048xxJ, C-066xxJ, C-098xxJ and C-09AxxJ appliances
o InfiniStreamNG 14xxH, 23xxH, 24xxH, 26xxH, 46xxH, 47xxH, 48xxH, 66xxG, 97xxG,
98xxG, and associated Certified C-014xxH, C-026xxH, C-048xxH, C-066xxG, C-098xxG,
and C-09AxxG appliances
NOTE: CyberStream appliances (F-02795J, F-09802J, F-09807J and F-09895J) running v6.3 can
also be used as nPoints. InfiniStreamNG Qualified COTS software appliances and virtual
appliances (vSTREAM) are not supported.
• The nGeniusPULSE Server must be running v3.5 or later.
• The eth1 port on the InfiniStreamNG appliance must be assigned an IPv4 IP address; nPoint
does not support IPv6 for management.
Refer the InfiniStreamNG Certified/Hardware Appliance v6.3 Administrator Guide or CyberStream Appliance
v6.3 Administrator Guide for complete details on installing nPoint support and the nGeniusPULSE v3.5 User
Guide for instructions on configuring the InfiniStreamNG/CyberStream nPoint to work with a
nGeniusPULSE server.

733-1 371 R e v .A 5
Application Installation Script Changes
The following changes were made to the InfiniStream and CyberStream application installers for v6.3
(the is-6300-xxx-eth.bin, is-6300-xxx-eth-J.bin and cs-6300-xxx-eth-J.bin files):
• nPoint installation option: During installation, you will be prompted whether or not to install
nPoint software on the appliance to allow it to send transactions to a nGeniusPULSE server.
Applies to InfiniStreamNG “G”, “H”, and “J” series appliances, as well as Remote InfiniStreamNG
690 appliances only. Refer to Using InfiniStreamNG Appliances as nGeniusPULSE nPoints for
more details.
• Enterprise or Service Provider environment setting: When upgrading to v6.3 or installing v6.3
for the first time, you have the option of repartitioning the drives in the InfiniStream appliance
(note that all stored data is lost during repartitioning). If you choose to change partition sizes
during the upgrade/installation and you have not previously installed Geoprobe software, you
will be asked if the appliance is installed in an Enterprise (default) or Service Provider network.
The installer uses this network mode to optimize storage on the appliance. If you choose Service
Provider, an /archive partition is automatically created with a fixed size (not configurable) to
store certain mobile data. Once you choose the network mode (Enterprise or Service Provider),
the selection is preserved during future upgrades. To change modes, you must reinstall the
application software and choose to repartition the appliance.

Sniffer Decode and Expert Pack

The v6.3 release contains the Sniffer Decode & Expert Pack 20.1.59 and its latest patches.

6 733-1371 R e v .A
Upgrade Considerations
The following sections provide the upgrade specifications for the v6.3 NETSCOUT software release:
• Overall NETSCOUT Product Upgrade Sequence
• Upgrade Paths for InfiniStream Appliances
• Special Notes for Upgrading InfiniStream Appliances
• Partitioning Considerations When Upgrading to 5.5.3
For step-by-step upgrade instructions for the InfiniStream appliance, refer to Chapter 6 of the
InfiniStream Certified/Hardware Appliance v6.3 Administrator Guide.

Overall NETSCOUT Product Upgrade Sequence

Release v6.3 includes upgrades to the full suite of NETSCOUT reporting, monitoring, and analysis
products. To take advantage of all the features in v6.3, you must upgrade all products to this release.
The table below summarizes the overall upgrade sequence as well as the location of upgrade
instructions for different products.

Order Product Instructions

1 nGeniusONE nGeniusONE Release Notes
nGeniusONE Server Administrator Guide
2 nGenius Subscriber Intelligence nGenius Subscriber Intelligence Release Notes
nGenius Subscriber Intelligence User Guide
3 InfiniStream Appliance InfiniStream Certified/Hardware Appliance Administrator Guide

733-1 371 R e v .A 7
Upgrade Paths for InfiniStream Hardware Appliances
The available upgrade paths to v6.3 depend on the starting version of the target appliance. The table
below summarizes the available paths for different starting versions. Refer to Chapter 6 of the
InfiniStream Certified/Hardware Appliance v6.3 Administrator Guide for details on supported platforms
and upgrade options.

Starting Version Upgrade Path Available

v6.2.2 Build 191 or higher* Direct upgrade to v6.3 is supported. Three upgrade options are available:
v6.2.1 Build 314 or higher* a) Use nGeniusONE v6.3 to perform remote upgrades of the indicated InfiniStream appliance.
v6.2 Build 451 or higher* You can schedule automatic downloads of InfiniStream software updates for your appliances,
v6.1.1 Build 213 or higher* and then perform a remote upgrade.
-or-
b) Upgrade to v6.3 directly on top of the existing version by installing the v6.3 application.
-or-
c) Reimage the operating system† and install the v6.3 application. Note that all stored data is lost
when you reimage.
v6.1 Build 509 or higher Direct upgrade to v6.3 is not supported. Two upgrade options are available:
v6.0.1 Build 245 or higher a) Upgrade to v6.1.1 Build 213 (or higher) first and then to v6.3.
v6.0 Build 579 or higher -or-
v5.5.3 Build 332 or higher b) Reimage the operating system† and install the v6.3 application. Note that all stored data is lost
when you reimage.
Earlier than v5.5.3 Direct upgrade to v6.3 is not supported. To upgrade to v6.3, reimage the operating system† and
install the v6.3 application. Note that all stored data is lost when you reimage.

* Additional notes for indicated versions:

• Remote installation of the application is supported for all models
• OS patches are automatically applied during upgrade
• Stored data can be preserved if:
– Complete OS reimaging is not done
– File system format is not changed
– Partitions are not resized
• System settings and application configuration/settings are preserved
† If you need to reimage your InfiniStream appliance as part of upgrading to v6.3, download and run the appropriate ISO file for
your InfiniStream model:
• ngenius-datasource-6300-restore-64Bit.iso for 19xxA, 29xxA, 69xxC, and 79xx models
• ngenius-datasource-6300D-restore-64Bit.iso for 19xxD, 29xxD, 45xxD, 79xxF, 85xxD, 89xxD, and 89xxF models
• ngenius-datasource-6300G-restore-64Bit.iso for 14xxH, 23xxH, 24xxH, 26xxH, 46xxH, 47xxH, 48xxH, 66xxG, 97xxG, or 98xxG
models, and for Certified C-014xxH, C-026xxH, C-048xxH, C-066xxG, C-098xxG, or C-09AxxG models
• ngenius-datasource-6300J-restore-64Bit.iso for Remote ISNG 690K, 1410J, 2395J, 2410J, 2695J, 4795J, 4895J, 6695J, 9795J, or
98xxJ models, and for Certified C-00690, C-02695J, C-02795J, C-04895J, C-06695J, C-098xxJ, or C-09AxxJ models

8 733-1371 R e v .A
Special Notes for Upgrading InfiniStream Appliances
Review the following considerations prior to installing or upgrading your InfiniStream appliance with
this release.

Enabling Transmit Capability on InfiniStreamNG Interfaces

In order to take full advantage of Packet Flow eXtender (PFX), or tunnel termination features on the
InfiniStream appliance, you must enable transmit capability on the appliance interfaces by
downloading and installing a .pfx_enable file from My.NETSCOUT.com onto the InfiniStreamNG
appliance. Until this file is present on the appliance, PFX options in the Agent Configuration Utility
(localconsole) are not displayed and interfaces cannot be configured in PFX mode.
To obtain and install the .pfx_enable file, perform the following steps AFTER upgrading the
InfiniStreamNG appliance to v6.3:
1. Launch a Web browser and enter the following URL:
https://my.netscout.com/mcp/Pages/Landing.aspx
2. Click on Licensing & Downloads.
3. From the Product list, choose InfiniStream Hardware and Certified Software and
choose the 6.3 product version.
4. Scroll down the page and click on the Download tab.
5. Download the .pfx_enable file to your local machine.
6. Use either WinSCP (Windows machines) or SCP (Linux machines) to copy the file to the
/opt/platform directory on the InfiniStreamNG appliance.
7. Log in to the appliance as the root user (default password is netscout) using any of the
following methods:
• Locally, using an attached keyboard
• Remotely, via an SSH session (for example, PuTTY)
• Remotely, via the web-based IPMI/RMM interface
8. Navigate to the /opt/NetScout/rtm/bin directory:
cd /opt/NetScout/rtm/bin
9. Restart the InfiniStream processes:
./stopall
./start
When the processes start up, a check is performed to verify that the InfiniStreamNG
appliance contains a supported NIC.
10. To activate the transmit capability on InfiniStreamNG interfaces, perform the following
steps:
a. Launch the Agent Configuration Utility:
./localconsole
b. From the main menu, enter option [7] Select Interface and choose the number of
the interface you want to configure in PFX mode from the next menu.

733-1 371 R e v .A 9
 c. In the Interface Options menu, enter option [65} Toggle Interface Mode. A
notification message appears as shown below:
##########################################################
# #
# TX MODE NOTICE #
# #
##########################################################

By selecting the "PFX Mode" option, you are activating the

NetScout PFX Mode feature which will enable the monitoring port(s)
of this device to be used for communication and transmissions
to other devices.
Use of the PFX Mode option is only authorized for the purpose of
service assurance activities such as network and application
monitoring and security. All other uses are strictly prohibited.

--> [1] Do Not Proceed With Activation

[2] Proceed With Activation

Please Enter your choice :

d. To activate transmit capability on this interface and configure the interface in PFX
mode, press 2.
If you wish to later disable the transmit capability on an interface, you can toggle PFX mode off using
the Agent Configuration Utility in one of two ways:
• Select the interface option [7] from the main menu, choose the interface, and enter option [65}
Toggle Interface Mode to return the interface to the default (listen only) mode
• Enter the command line mode and issue the following command:
set interf ace_options 65 default
To permanently disable the transmit capability, navigate to the /opt/platform directory, delete the
.pfx_enable file, and restart the processes from the /opt/NetScout/rtm/bin directory.

Table Size Allocations and the Geo Application

Do not configure Table Size Allocations (TSA) on InfiniStream appliances until after the Geo
application software has been installed. When table size allocations are configured, the Agent
assumes that it can use all available RAM for tables. Once the Geo application is installed, available
RAM is significantly reduced, potentially resulting in table size allocations that are much larger than
memory can support, potentially resulting in unstable behavior.
If you have already configured table size allocations, reduce them by half (or more) before installing
the Geo application, followed by a TSA reconfiguration afterwards.

10 733-1371 R e v .A
 Reset Agent
Following the automatic reboot of the InfiniStream appliance, during upgrade or first time
configuration, the agent synchronizes with the managing server. To ensure all agent processes and
tables are in sync, NETSCOUT recommends performing an additional reset of the agent. To do this,
access the system command-line of the appliance as the root user and perform the following steps:
/opt/NetScout/rtm/bin/stopall
/opt/NetScout/rtm/bin/start

Q-VUE InfiniStreamNG-Video Probe Upgrades

Once Q-VUE software is installed on an InfiniStream appliance, if the InfiniStream application
software (ASI) is ever upgraded, the Q-VUE application MUST be re-installed.

Downgrading an InfiniStream Appliance after Upgrading to v6.3

Following an upgrade to v6.3, if you choose to return to a previous release, you must reimage the
InfiniStream appliance before installing the earlier release. Reimaging the appliance is necessary to
restore the proper combination of OS kernel updates and software patches required for successful
system operation. Note that when you reimage the appliance, all stored packet data and agent
configuration settings are lost.
If you choose to restore a previous release, be sure to the use the ISO file appropriate to the release
and hardware platform that you are restoring. For example, to return to v6.1.1 on an InfiniStream
2990D appliance after upgrading to v6.3, use the ngenius-datasource-6110D-restore-64Bit.iso file
to reimage the operating system and then use the is-6110-213-eth.bin (or later) file to re-install the
application.

733-1 371 R e v .A 11
Partitioning Considerations When Upgrading to v6.3
During the upgrade to v6.3, you will have the option to change your partitioning. Use this topic to
review the impact of changing partition sizes and the sizing required for the way you will use the
InfiniStream appliance.

Changing or Retaining Partitions During an Upgrade

For releases v5.0 through v5.4.1, the default /metadata partition size was 25. During an upgrade,
you are not required to repartition your appliance and you can retain this 25 GB /metadata
partition. In this scenario, ASI metadata is written to the /metadata partition. However, if you
choose to modify your partitions during or after an upgrade to v6.3 the following changes occur:
• If you have not previously installed Geoprobe software, you will be asked if the appliance is
installed in an Enterprise (default) or Service Provider network. The installer uses this network
mode to optimize storage on the appliance. If you choose Service Provider, an /archive partition
is automatically created with a fixed size (not configurable) to store certain mobile data.
• An /asi partition is automatically created and allocated 50 GB of storage space by default
(minimum size is 25 GB). All ASI metadata is now written to this new partition instead of
/metadata, providing improved performance and avoiding contention for space in the
/metadata partition from saved trace and decode files.
• The default size of the /metadata partition increases to 50 GB, although the minimum partition
size of 25 GB is still allowed. Therefore, the amount of storage reserved for remote decode,
mining trace files, and ASI metadata increases from a 25 GB to 50 GB (25 GB minimum for
/metadata and 25 GB minimum for /asi) if you choose to change the partition settings
during/after an upgrade to v6.3.
NOTE: If you choose to retain your partitions during the v6.3 upgrade, it is strongly
recommended that you do not save remote trace files on the InfiniStream appliance. These trace
files consume space on the /metadata partition and reduce the space available for the ASI
metadata required for nGeniusONE monitors and enablers.
On InfiniStream 45xxD appliances equipped with extended storage units (ESUs), the installation
process creates asymmetrical partitions across the RAID 6 array. The /asi, /xdr, /metadata, and
/flow partitions are only created on the internal storage drives of the InfiniStream appliance, and
these drives do not contain any /data or /raw partitions for packet storage. The drives in the ESU-ZS
contain /data or /raw partitions only. This arrangement is created automatically during installation;
no special steps are required.
If you elect to perform an uninstall followed by a new installation, you will have the option to retain
data, but only if you do not change the packet store partition format or partition sizes.

12 733-1371 R e v .A
 Partition Requirements
Partition Description Range
/xdr If the appliance will be configured to produce xDRs/ASRs (eXtended Data Default = 30% of
Records/Adaptive Session Records) and Conversation data for use by available storage.
nGeniusONE or nGenius Subscriber Intelligence, you MUST allocate an /xdr Range = 6 GB to
partition to store this session data. This partition can be eliminated if the 50% of available
appliance will not be used to produce session data for use with those storage.
applications. Enter 0 to
An xDR stores metadata for mobile subscriber sessions. The nGenius Subscriber eliminate.
Intelligence application uses mobile subscriber records to correlate mobile sessions
across multiple monitored legs. The more space you allocate to xDR storage, the
further back Subscriber Intelligence will be able to mine for mobile data session
correlation.
/metadata This partition is required for nGeniusONE, Performance Manager, and Default = 50 GB
InfiniStream Console features such as remote decode, data capture, and Range = 25 GB to
InfiniStream trace file storage. 10% of available
Set a size for this partition based on your anticipated usage of the features listed storage.
below:
• nGeniusONE Decode View/Performance Manager Remote Decode
stores transient session data files in /data and
<installdirectory>/rtm/pa/data. Although these files are automatically
removed when the decode session is closed, multiple simultaneous decode
sessions can also create temporary index files in the /metadata partition
consuming as much as 20 GB of space.
• InfiniStream Console and Performance Manager users can save remote trace
files on the InfiniStream appliance’s /metadata partition instead of
immediately moving mined packets to the InfiniStream Console system or
nGeniusONE Server, respectively.
When upgrading to v6.3, you are not required to modify existing partition sizes and
you can choose to leave existing /metadata partitions at less than 50 GB. However, if
you retain the existing /metadata partition size, it is strongly recommended that you
do not save remote trace files on the InfiniStream appliance. These trace files
consume space on the partition and reduce the space available for the ASI metadata
required for nGeniusONE monitors and enablers.
Excluding the remote decode operations, files saved on this partition must be
managed manually. Users who anticipate heavy use of any of the above features
should increase the default to a greater percentage of the total storage. Note that if
you choose to increase the size of an existing /metadata partition, all stored
metadata will be lost.

733-1 371 R e v .A 13
Partition Description Range
/asi This partition is dedicated to storing Adaptive Service Intelligence Default = 50 GB
(ASI) metadata. Range = 25 GB to
In releases prior to v5.4.1, ASI metadata was written to the /metadata partition. In 10% of available
v5.4.1 and later releases, for improved performance and to avoid contention for space storage.
in the /metadata partition from saved trace and decode files, this new /asi partition
can be created. Whether or not this partition is created depends upon your choices
when upgrading to v6.3:
• If you choose to retain your partitions during the upgrade and you have not
previously created a /asi partition, this partition is not created. ASI data
continues to be written to the /metadata partition as it has in previous
releases (refer to recommendations for the /metadata partition below).
• If you choose to modify your partitions, the /asi partition is automatically
created and linked to the /metadata partition. All ASI metadata is written to
this partition instead of /metadata and this partition cannot be eliminated.
/flow Required for use with the InfiniStream Console only. Default = 0 GB
InfiniStream Console users MUST allocate a /flow partition for the storage of RMON Range = 1-35% of
data, 15-second flow records, and aggregated 5-minute statistics. All other users can available storage.
enter 0 to eliminate this partition or leave the size set to the default value (0 GB). Enter 0 to
eliminate.
/raw This partition is used for packet storage and is not configurable. Total remaining
(NETSCOUT On XFS-formatted appliances, collected packets are stored in a /data partition. On storage space
File System) or NETSCOUT File System (NFS) formatted appliances, collected packets are stored in a after space is
/data (XFS) /raw partition. For new installations, only NFS formatted partitions can be created. allocated to other
partitions. Cannot
be eliminated.

14 733-1371 R e v .A
Resolved Issues
The following issues have been resolved in v6.3. Each issue is listed in the table below along with its
associated NETSCOUT tracking number.

Tracking ID Description
NS-39747 SMS KPIs were unavailabe in SIP WiFi scenarios; this problem has been fixed.
NS-43333 A problem that caused memory over consumption by the nsprobe process has been fixed.
NS-57419 ASRs for BSSAP+ were not generated when additional SSN values were added in nGeniusONE Global
Settings; this problem has been fixed.
NS-60658 An RCS SIP-Invite classification in nGeniusONE, where SIP RCS* children were not broken out of the
parent SIP traffic has been fixed.
NS-64334 A problem that caused nsprobe process segmentation faults and unexpected process failures has
been fixed.
NS-64701 After upgrading to v6.2.1 Build 437, the LDAP ageout was increased, resulting in subsequent ModReq
messages not being counted; this problem has been fixed.
NS-64753 Following an upgrade to v6.2.1, transactions were incorrectly reported on different VLANs; this
problem has been fixed.
NS-64821 An InfiniStream Console analysis failure due to procmanager process communication issues has been
fixed.
NS-64932 A problem resulting in GTPv1 table drops during mobile 3G GTP traffic processing has been fixed.
NS-65122 A problem that caused S11 mobile traffic miscorrelations to Increase over time has been fixed.
NS-65281 A problem that caused an InfiniStream to stop processing RADIUS traffic after receiving a malformed
packet and incorrectly labeling it as IP_Other has been fixed.
NS-65529 CAMEL traffic over M2PA/M2UA was shown as M3UA in nGeniusONE Host Analysis statistics; this
problem has been fixed.
NS-65618 To support a new MDF feed (HKEX OMD-C), changes were made to report HKEX statistics.
NS-65699 On an InfiniStreamNG appliance configured in Geo mode, unidirectional flow records were created for
DNS packets instead of bidirectional flow records; this problem has been fixed.
NS-65869 A buffer overflow in SIP parser when processing XML content caused an unexpected nsprobe process
segmentationt tault; this problem has been fixed.
NS-65960 nGeniusOne HTTPS child apps received through a Zscale Cloud Proxy were not classified correctly;
this problem has been fixed.
NS-66216 A problem that caused packet analysis to display the error "Loopback: Unknown Type" has been fixed.
NS-66323 When simultaneous mining queries were launched in nGeniusONE, the procmanager on the
InfiniStream appliance unexpectedly failed; this problem has been fixed.
NS-66554 On an InfiniStreamNG appliance running Geo-only mode, every 5 minutes the message "All ASI files
were not written. Missed 2 files(s)” was written to the log files for each interface; this problem has
been fixed.
NS-66716 IMSI values in S1Ap/EMM mobile sessions were not properly extracted from GTP via GUTI/P-TMSI; this
problem has been fixed.
NS-67120 When selecting a row with 0 transactions but with ageouts, attempts to drill down resulted in NO
DATA FOUND; this problem has been fixed.
NS-67220 Site discovery was not updating correctly in an InfiniStreamNG 9895J appliance; this problem has
been fixed.
NS-67291 If there was a space after = in the SIP Reason header, no data with Reason Code Distribution was
displayed on nGeniusONE; this problem has been fixed.
NS-67543 Following an upgrade, an InfiniStreamNG appliance running in Geo mode required two
restarts to resume processing all traffic; this problem has been fixed.

733-1 371 R e v .A 15
Tracking ID Description
NS-67607 MDF decode of PHLX data showed a “Template Undefined” error; this problem has been fixed.
NS-68054 nGeniusONE and nGenius for Flows were displaying Netflow data gaps on messages correctly
captured by the nGenius Collector; this problem has been fixed.
NS-68343 A problem causing Diameter user database table drops due to incorrect timestamping has been
fixed.in this release.
NS-68449 A problem that caused the nsprobe process to fail unexpectedly during mobile traffic parsing has
been fixed.
NS-69219 A problem resulting in DNS child applications stopped being classified has been fixed.

Known Issues
The following topics contain lists of known limitations and workarounds (where available) applicable
to this release.

Internal ID Description
NS-69632 After enabling and installing nPoint on an InfiniStreamNG appliance, if you later want to
disable and remove the nPoint functionality, NETSCOUT recommends that you disable and
then delete the InfiniStreamNG nPoint from the nGeniusPULSE server. Deleting the
InfiniStreamNG nPoint on the server instructs the appliance to run the netscout_npoint-
delete.sh script to remove nPoint software and release any allocated system resources If
you simply run the delete script on the appliance, the InfiniStreamNG nPoint still appears
on the nGeniusPULSE server with an “Offline” status. If you later reinstall and re-enable
nPoint on the InfiniStreamNG appliance with the same IP address originally assigned, a
duplicate nPoint device appears on nGeniusPULSE.

Security Considerations
The following security improvements have been made with the v6.3 release. New appliances will
already include the security updates. For appliances that are upgraded, the security changes are
automatically made when you install the v6.3 application update.
The table below lists specific Common Vulnerabilities and Exposures (CVEs) and how NETSCOUT has
responded to them in this release.

CVE # Solution
CVE-2019-1547 Upgraded OpenSSL to 1.0.2v
CVE-2019-1551 Upgraded OpenSSL to 1.0.2v
CVE-2019-1552 Upgraded OpenSSL to 1.0.2v
CVE-2019-1563 Upgraded OpenSSL to 1.0.2v
CVE-2019-6111 Upgraded OpenSSH to v8.1p1-1

16 733-1371 R e v .A
NETSCOUT SYSTEMS, INC.
310 Littleton Road
Westford, MA 01886-4105
Tel. 978 614-4000
888-999-5946
Fax 978-614-4004
E-mail [email protected]
Web www.netscout.com