v8.6 [Jan 4, 2013]
Bugs fixed:
If an LDAP password contains a apostrophe, it causes an error on login like, ""Sawmill Alert Syntax error: Unknown operator in expression."
When the option Report Options -> Numbers & Text -> "Use base 10 for byte displays" is changed, the changes does affect for previously-generated (cached) reports.
When building with multiple processors on 64-bit Windows, if an integer field value has a value more than about 2 billion, and it will be truncated to about 2 billion, even if the database field is specified as 64-bit.
Reports filtered on a date range query the main table (resulting in slow report generation), even if a cross-reference table exists able to optimize the query.
IIS profiles do not detect web browsers properly; in particular, they identify Internet Explorer as "Unknown Mozilla".
The values are invisible in table cells in standard PDF reports.
If, after making graph changes in the Reports Editor, you click "Save Changes", and then go to Manage fields and click OK, the graph changes are eliminated.
The Scheduler gives an error, "Unknown variable 'lang_admin.snapons.device_type.report_label'", when there are profiles created in 8.5.9, which use the Web Server Package.
Large table reports (e.g., a Hostnames report with a million rows) use a very large amount of memory, and if large enough, eventually fail with an error like, 'Unable to allocate 469762048 bytes of memory; maximum memory is 2242822425, but 2098194845 is already used, and no further memory can be freed. Allocation attempted at fstring.cpp:225, description: "fstring buffer"'
Temporary tables with names starting with blitmp and join_maptable, are never removed from the database; large numbers of these can collect over time, until the database is rebuilt.
When running a "remove database data" operation against a profile which uses a MySQL 4 database as a bank end, an error can occur like, "SQL query failed: 'delete from main_table using main_table x where (main_table.date_time < '2012-01-06 21:59:37')' error=Unknown table 'main_table' in MULTI DELETE at ../src/expire_database.cpp:212"
View an Overview report for a profile with no data in its database, gives an error: "Attempt to read beyond end of LogAnalysisInfo/Databases//main/Tables//data.tbl (fileSize=0); attempted to read from 0 to 48"
Enhanced support for NetScreen, to extract virus information from a slight variant of the format, and to simplify the "message" field to improve performance and reduce database size.
The "gear" and "save report" icons in report elements, do not render in the correct places when viewing reports in Internet Explorer 7.
When clicking "Save as new report" in Reports, a JavaScript error can occur, causing the window not to load. (Clicking again will load the window).
There was a "pie chart" option for chronological graphs, in the "customize report" window in Reports, even though chronological data cannot be graphed as a pie. This caused an error when it was selected. This option has been removed.
Features:
Modified the "Device Type" reports a bit, to show a Mobile Devices report listing only mobile devices, instead of a general Device Types report (the Device Categories report remains unchanged).
Improved progress reporting while scanning a recursive log source, to show the directory being scanned.
Added support for UTM 80-E Firewall.
Improved database build performance slightly by removing the unnecessary xref on the session_sequence_number field.
Added support for IIS Advanced Logging Module Log Format.
Switched Apache Custom plug-in to use the Web Server Package, giving it the advanced functionality of the Web Server Package snapon, including a dashboard and advanced reporting of agent and referrer information.
Added a Dashboard to the Media Reports snapon; added the Media Reports snapon to Flash Media Server.
Added automatic conversion of incorrect but commonly attempted report syntax "fieldname = 'abc'" to the correct "fieldname within 'abc'"
Added a Dashboard to all formats which use the Gateway Reports snapon (which is most major gateway log formats).
Slightly enhanced the previously-seen-data skipping algorithm, so if a log file is zero length or inaccessible, and "skip files by pathname" is enabled, the file will be ignored, and not saved as "seen," so if it gets data later or becomes accessible, it will be processed at that point. This is specifically important for IIS logs, where the latest log (the log being written) is not accessible for reading, and should be retried until it becomes available.
v8.5 [Aug 1, 2011]
- [1191655] Support has been added for the Mikrotik Web Proxy log format.
