Data sources and objects capture
EtherSensor EtherCAP service:
[*]ICQ protocol parser was updated.
[*]ICAP protocol parser was updated for integration with ICAP clients via passive traffic listening.
EtherSensor ICAP service:
[-]An error was fixed with writing to logs.
Captured objects analysis:
[+]Attachment translation to EML is now faster.
[+]A mechanism was added to bypass the disk subsystem when passing messages to the transport service.
[+]Message detection reliability was increased.
[+]The following detectors were updated: !generic, accounts, chanboard, cv (careerist.ru, hh.ru, hotjob.ru, jobsmarket.ru, job.ru, rabotamedikam.ru, rabotavgorode.ru, rabota.mail.ru, rabota.ru, rosrabota.ru, superjob.ru, zarplata.ru), hotmail.com, facebook.com, google.com, gorod55, icq, ipboard, linkedin.com, livejournal.com, loveplanet.ru, mail.ru, mamba.ru, my.mail.ru, mybb, myspace.com, newmail.ru, nextmail.ru, odnoklassniki.ru, phpBB, pochta.ru (qip.ru, borda.ru, pochta.com), plaxo.com, rambler.ru, search-query, smsmms (beeline.ru, megafone.ru, mts.ru, mysmsbox.ru, tele2.ru), twitter.com, vbulletinboard, vkontakte.ru, wordpress.com, yandex.ru, yahoo.com.
[-]A rarely reproduced error was fixed which resulted in memory leaks.
[-]A rarely reproduced error was fixed with message filtering.
Delivering analysis results to consumer system:
[*]DNS Round Robin is now used to distribute the load over consumers of the results of analysis of reconstructed objects.
[+]Error counters were added for the transport service cache.
[-]An error was fixed with EML envelope generation.
Logging:
[+]Counters of the results delivery service cache are now logged to counters.log.
Configuration console:
[*]Separate threads are now used for starting, stopping, pausing and restarting.
[*]User interface of the message filter editor was changed.
[+]Counter descriptions were clarified.
News 