Data sources and objects capture
EtherSensor EtherCAP service:
[+]Protocol parser was added for httpv2.
[+]Protocol parser was added for skype: interception and transfer of files, text messages, contact lists.
[-]An error was fixed in http, ftp, and pop3 protocol processing.
[-]An error was fixed in the processing of the old version configuration.
EtherSensor ICAP service:
[+]The X-Sensor-Net-Interface-Id header value now includes the port being listened, e.g: icap-000-1344.
[-]An error was fixed in ICAP protocol header processing which resulted in incorrect message generation.
Captured objects analysis:
[+]The X-Sensor-Httpv2: Microolap EtherSensor header was added to distinguish HTTP query filter processing results during the processing of messages transmitted over the httpv2 protocol.
[+]Processing of messages transmitted over the skype protocol.
[+]The "Check network interface ID (X-Sensor-Net-Interface-Id)" rule was added to the HTTP filter.
[+]The "Remove message attachment by name" action was added to the message filter.
[+]The following detectors were updated: !generic,!fileupload,cv (careerist.ru, hh.ru, job.ru, job50.ru, job-mo.ru, jobsmarket.ru, rabotavia.ru, rabota.by, rabota.ru, rosrabota.ru, superjob.ru, zarplata.ru), facebook.com, google.com, gorod55, ipboard, linkedin.com, livejournal.com, loveplanet.ru, mail.ru, mamba.ru, mfd.ru, my.mail.ru, mybb, odnoklassniki.ru, phpBB, pochta.ru (qip.ru), rambler.ru, smsmms (skylink.ru, megafon.ru, mts.ru, tele2.ru), twitter.com, vbulletinboard, vkontakte.ru, wordpress.com, yandex.ru, xmpp
[-]An error was fixed in search query processing.
[-]An error was fixed in MIME part processing.
Delivering analysis results to consumer system:
[+]DeviceLock Enterprise Server (DLES) transport was added. It can be used to deliver messages natively to the DeviceLock Enterprise Server.
[-]An error was fixed in message translation to the EML.
[-]An error was fixed in message attachment encoding into base64.
[-]An error was fixed in sending chats to the INFOWATCH Traffic Monitor.
Logging:
[+]Debug counter logging was added.
Configuration console:
[+]The "Check network interface ID (X-Sensor-Net-Interface-Id)" rule was added to the HTTP filter.
[+]The "Remove message attachment by name" action was added to the message filter.
[+]Message transport profile was added to DeviceLock Enterprise Server.
News 