Data sources and objects captureEtherSensor EtherCAP service:
[*]Recognition validity was improved for the XMPP/Jabber protocol.
Captured objects analysis:
[*]Message processing (detection, filtering) is now faster. Now up to N intercepted objects can be detected and filtered simultaneously. N is calculated as follows: N = CPU cores x 2.
[+]Updated the following detectors: CV (careerist.ru, hh.ru, job-mo.ru, rabota.mail.ru, rabota.by, rabotavia.ru, superjob.ru, zarplata.ru), facebook.com, livejournal.com, mail.ru, mail.ru-social, mamba.ru, moikrug.ru, myspace.com, odnoklassniki.ru, pochta.ru, vkontakte.ru, yandex.ru.
Logging:
[*]Now the EtherSensor Watcher service maintains data processing statistics and accumulates data in the [INSTALLDIR]\data\statistics directory. Accumulated information is rotated every 2 months. Daily statistics are accumulated in a separate folder inside the [INSTALLDIR]\data\statistics directory. A separate set of files is generated every hour:
top.clients.XXX.xml:
The number of connections established by the client, and the total size of data transmitted over all the sessions created by this client.
top.detectors.XXX.xml:
The number of detected messages.
top.hostname.XXX.xml:
The number of HTTP connections per hour.
Configuration console:
[*]The bugreport utility can now open reports directly from ZIP archives.
[*]You can now generate new and detect existing MINIDump files of EtherSensor services.
[*]You can now detect PCAP files with packets interception of which raised a data processing exception.