WallWatcher Changelog

What's new in WallWatcher 3.3.34

Apr 13, 2010
  • New Router Support:
  • Netgear FVG318
  • Netgear FVS318G

New in WallWatcher 3.3.33 (Apr 13, 2010)

  • Router Support:
  • New:
  • Watchguard X20
  • D-Link DI-714P
  • Changed:
  • D-Link DIR-825 - recognize yet another record type

New in WallWatcher 3.3.32 (Apr 13, 2010)

  • Router Support:
  • Changed:
  • D-Link DIR-825 - recognize another record type
  • General:
  • New:
  • WW - when unrecoverable disk I/O errors occur repeatedly, quit with an explanatory message
  • Fixed:
  • WRV - bypass empty log files when using the "Faster" option on the MISCELLANEOUS menu

New in WallWatcher 3.3.31 (Apr 13, 2010)

  • Router Support:
  • New:
  • Untangle
  • D-Link DIR-825
  • General:
  • New:
  • BW - can analyse data collected by a copy of WW running on a different computer on the same LAN: see REMOTE ACCESS

New in WallWatcher 3.3.30 (Apr 13, 2010)

  • Router Support:
  • Changed:
  • pfSense - additional format recognition, modified usage instructions
  • General:
  • Changed:
  • W2D - documentation change explains how to try to circumvent email submission problems (posted at website as well as included with W2D download)
  • WW - increase maximum number of concurrent lookups from 2 to 8, per CPU
  • Fixed:
  • WW - new OPTION to "Remove Highlights" when they are obsolete, and instructions for alternative ways of doing so selectively
  • WW - when computer emerges from Standby or Hibernation, the WW window sometimes appeared on-screen, even though it had been minimized beforehand

New in WallWatcher 3.3.29 (Apr 13, 2010)

  • General:
  • New:
  • WW, WRV - the temporary pop-up box that appears when you click any item in the Events List will be slightly magnified. Clicking that box magnifies it further.
  • WW - the "Highlight" option on right-click menus lets you color-code all occurrences of up to ten items at a time, or remove existing color-coding
  • WW - new command-line argument to let WW relay raw log records to other computers (very special purpose, limited application; see "Other Features" for details)
  • Fixed:
  • WRV - "Run Analysis when WRV starts" option sometimes didn't work

New in WallWatcher 3.3.28 (Apr 13, 2010)

  • Router Support:
  • Changed:
  • M0n0wall - slight change in method of categorizing certain log events
  • General:
  • Changed:
  • WW - if the middle of the Summary bar is not needed to display a recent Alert condition, it will display recent Bandwidth information, if available.
  • Fixed:
  • WW - 'Hide' sometimes didn't work while Relisting current log
  • WRV - didn't filter (hide) URL's and names containing blanks (spaces)

New in WallWatcher 3.3.27 (Apr 13, 2010)

  • Router Support:
  • New:
  • CyberGuard SG-300
  • General:
  • New:
  • WW and WRV - can display Country and City Information about a Remote IP address, including a Google Map of its location. Requires some one-time setup. See About Country-City Information in WWHelp.chm for details on installing and using these features.
  • WW - if you're collecting Bandwidth information via SNMP (not all routers can do this), mousing over WW's Tray icon will show Bandwidth usage, and the Statistics Summary and the BandWidth Menu will show the current, daily, and monthly usage.

New in WallWatcher 3.3.26 (Apr 13, 2010)

  • Router Support:
  • New:
  • 2-Wire HGV-B
  • Westell 7500 (distributed by Verizon)

New in WallWatcher 3.3.25 (Apr 13, 2010)

  • Router Support:
  • New:
  • Watchguard X10E

New in WallWatcher 3.3.24 (Apr 13, 2010)

  • General:
  • New:
  • WW - the Alert menu's "Actions/Signals" list now includes "Do not alert", which lets you define exceptions to other Alert rules
  • WW - right-clicking on an IP address offers the options to "Alert on IP Address+cat" combination and to "Alert on IP Address+port+cat combination" ("cat" means "Category" or "Direction"... the record type)
  • WW - right-clicking on an 'icmp' protocol offers the option to log or not log any icmp's
  • Changed:
  • WW - Dialogs and prompts now always appear at the top left corner of WW's window. This only matters with multiple monitor systems
  • Fixed:
  • WW - sometimes did not add new custom ranges properly
  • WRV - window width sometimes became too narrow when switching from Summary to Detail view

New in WallWatcher 3.3.23 (Apr 13, 2010)

  • Router Support:
  • New:
  • D-Link DFL-500 Version 2
  • Netgear FVS336G
  • ZyXel P320W, NBG334W
  • Changed:
  • IPCop

New in WallWatcher 3.3.22 (Apr 13, 2010)

  • Router Support:
  • New:
  • Edimax BR6641
  • Changed:
  • Linksys WRT600N

New in WallWatcher 3.3.21 (Apr 13, 2010)

  • Router Support:
  • New:
  • Astaro 7.0
  • Linksys WRT600N
  • Trendnet TEW-633GR
  • Changed:
  • pfSense

New in WallWatcher 3.3.20 (Apr 13, 2010)

  • Router Support:
  • New:
  • Tipping Point X-series
  • Changed:
  • SysLog (Generic)
  • Tomato (Firmware)
  • Westell_Versalink_327W
  • General:
  • New:
  • BW - user-controllable Y-scaling on chart

New in WallWatcher 3.3.19 (Apr 13, 2010)

  • Router Support:
  • New:
  • Billion BiPac 7404 VGOM (Inbound events only)
  • Changed:
  • Linksys WRV4400N - support for new Firmware version
  • Linksys WRT54GC - detect and delete non-printable characters in log records
  • General:
  • Fixed:
  • WW - some small, miscellaneous, infrequent problems

New in WallWatcher 3.3.18 (Apr 13, 2010)

  • Router Support:
  • Changed:
  • All "IPTables" routers: the "ID" field is now included in the "Extra" column
  • all D-Link "DIR-series" routers seem to use the same log format, and are now listed that way on WW's ROUTER list. This format is the same as the DGL-series, which is listed separately. It doesn't matter which one is chosen.
  • General:
  • Fixed:
  • WW - sometimes incorrectly reported that "the logging port (514) is already in use" when it was not; but still was able to log. Now, it won't report the false error.
  • WRV - could not process logs on systems more than 2GB of memory. Now, it can.

New in WallWatcher 3.3.17 (Apr 13, 2010)

  • Router Support:
  • New:
  • Cisco ASA 5505 (similar to Cisco PIX)
  • D-Link DIR-635, 655, 665 (same as DGL-4300)
  • Fortigate 60
  • Fortinet 200A (same as Fortinet 60)
  • Linksys WRV4400N (same as IPTables)

New in WallWatcher 3.3.16 (Apr 13, 2010)

  • Router Support:
  • New:
  • Adtran Netvanta 3448
  • Juniper SSG-20 (same as Netscreen 5GT / IPTables)
  • Xincom DPG 603 (same as DPG 502)
  • Changed:
  • Cisco PIX 501: recognize additional record types

New in WallWatcher 3.3.15 (Apr 13, 2010)

  • Router Support:
  • New:
  • Cyberguard SG570

New in WallWatcher 3.3.14 (Apr 13, 2010)

  • General:
  • New Features:
  • WW - startup delay option added to SPECIAL menu, to allow other tasks to complete initialization during system boot
  • Changed:
  • WRV - more keyboard shortcuts on right-click menus
  • WRV - copying a single record ("Copy Group") no longer includes a heading. Copying a range still includes a heading
  • Fixed:
  • WW - sometimes did not send "running OK" emails during its initialization

New in WallWatcher 3.3.13 (Apr 13, 2010)

  • Router Support:
  • New:
  • 2Wire 2701 HG-B
  • Airlink AR525W
  • Linksys RVS4000
  • Watchguard Fireware Pro
  • Changed:
  • m0n0wall - added support for version 1.23b4
  • ZyWall 2 Plus (and possibly other similar ZyXel products): recognize "Rejected" Inbounds (you don't want the router to do this)
  • Fixed:
  • ZyWall 2, ZyWall 5, ZyXel P334, 660HW, 2606HW: normal "Outbounds" were categorized as "Passed Inbounds"
  • General:
  • Changed:
  • recognize VISTA version of Windows when doing IP to URL lookups. Affects WallWatcher, WallReViewer, IP-URL, and GetLog.

New in WallWatcher 3.3.12 (Apr 13, 2010)

  • Router Support:
  • New:
  • Changed:
  • XRoadsNetworks Edge Series - use special records in the router logs to collect network-level Bandwidth usage
  • General:
  • New Features:
  • Changed:
  • WW - the "Don't log IP Address+port" filter on the pop-up menu now also considers the record type (In, Out, etc.), and matches the Remote port for Outbounds or the Local port for Inbounds
  • WRV - deletion of multiple records has been modified and enhanced.
  • Fixed:
  • WW - Alert messages for 'Passed' and 'Blocked' were swapped
  • WRV - on the 'Miscellaneous' menu, the "Smaller" option didn't work properly, so an error occurred and larger files did not display.

New in WallWatcher 3.3.11 (Apr 13, 2010)

  • Router Support:
  • New:
  • AirLink AR325W (certain Firmware versions only, such as "R1.97e1"; other F/W versions may not send log records to the computer)
  • Hotbrick 401VPN
  • Linksys WTR54GS Traveller
  • XroadsNetworks Edge Series
  • Changed:
  • Actiontec MI424WR
  • Linksys BEFSR41 - identify "Passed Inbounds" for BEF-type routers that use the BEFSR41, rather than the BEFSX41, log format. "Passed Inbound" events occur when an Inbound event's destination is a LAN IP address, rather than the WAN address, and "sub-types" is selected on the LOGGING menu. If you're not running a Server, leave "sub-types" off; if you are running one, turn "sub-types" ON, and use "exception" for color-coding on the DISPLAY menu. If you're forwarding Inbounds to a non-existent LAN IP address, leave "sub-types" off so that all types of "Inbound" events will be categorized as "I".
  • Netgear FVX538 - Firmware version 2 of this router uses a variation of "IPTABLES" formatted log records, which is totally different from the format used by F/W version 1.
  • General:
  • New Features:
  • WW - the "Alerts" systems (Custom and High Activity) have been replaced in their entirety by a new, unified, more flexible Activity Alerts system
  • WW - more record types can be displayed but not logged to disk