What's new in Scrutinizer NetFlow Analyzer 10.0.0

Oct 24, 2012
  • New collector featuring improved flow rates, improved communication with the frontend, and a mechanism for sending alarms to scrutinizer
  • Add links in maps based on saved reports
  • Allow report thresholds to be set based on exceeding a rate
  • FA Top n algorithms can be configured per device
  • Upgraded MySQL version to 5.1.63
  • Scrutinizer is now using Apache 2.2.22
  • Added dotted outline underneath Dashboard gadgets when moving them
  • Added support for Riverbed NetFlow-v9 custom elements
  • Added Google Map "Hybrid" option via Show Labels
  • Google Maps remember settings when they refresh
  • Allow sFlow devices to be included in FA algorithms
  • Include the time frame in Top Interfaces for emailed reports
  • Allow direct access to Dashboards tabs by URL
  • Send a syslog when any of the services are running low on memory
  • Added informative title bar to indicate which "View" a user is in
  • Send an Alarm when users or their passwords are changed or created
  • Improved CrossCheck alert formatting
  • Added IP Grouping definition interface, reports, and filters
  • Added new Report Designer to create custom reports
  • Added a percent option to Inbound Thresholds
  • Caching of NBAR application definitions from option templates to improve report speed and ensure application names are always displayed.
  • Improved mapping
  • Improved sFlow decoding
  • Improved Exinda template support
  • Improved template naming and flexibility
  • Added Extreme IPFIX support
  • Icons can now be set to change colors based on a chosen Primary Status option (e.g. Flows, Polling, etc.)
  • Polling can now be configured with "up" and "down" dependencies per-device for more intelligent status monitoring
  • Added NBAR support for multiple vendors
  • Added more flexibility to Flash map editing
  • Added customized background images to mapping
  • Maps are now more theme aware
  • Map connections now support connecting two icons with a saved report
  • Added multiple connectors between devices in mapping
  • Added option from Device Overview to view all interfaces
  • Added an easier way to navigate to rename templates
  • Added more time interval options for reports
  • Flowalyzer data is now available beyond 1 minute intervals
  • Added Host to Host with Next Hop report
  • Added Availability by device report
  • Added connections RTT medianet report
  • Reports can now be viewed using rate or percent in maps
  • Added Barracuda device icons
  • The watcher service has been replaced
  • mIAM OSes Views report now provide a list of switches
  • The emerging threats list is now based on IP Reputation and includes categories
  • An IP / DNS button has been added in mapping
  • Added a ASA Denied Flows Algorithm
  • Added IP Group filter to reporting
  • Added a new dark teal skin theme
  • The unfinished flows and internet threats algorithms can now be configured to use source or destination IP as the violator
  • Added Cisco ASA biflow support
  • Added HD test to scrut_util
  • New view: mIAM Hosts by OS added
  • Use totals tables when there is a template filter
  • Added additional checks and balances for security between components
  • Enhance template naming capability
  • (bug 278) Don't insert noSuchObject when SNMP object doesn't exist
  • (bug 947) Scheduled reports running at times different than when they are scheduled
  • (bug 1108) Vitals skip under high load
  • (bug 1642) Scheduled alarms and top interfaces reports are emailed several hours late
  • (bug 3904) No message in Manage Exporters when SNMP fails
  • (bug 4868) Display formatted times for flowstartmilliseconds_plxr and flowendmilliseconds_plxr in Flowview
  • (bug 5710) Sonicwall HTTP_URL element id occasionally causing inserts to fail
  • (bug 6063) Images plot beyond the background of image
  • (bug 6345) Top Interface message now looks inconsistent
  • (bug 6641) Flow Hopper information that is the same shouldn't be highlighted
  • (bug 7460) Subnet filter and subnet display work differently (too much default)
  • (bug 7533) Verify credentials are in CrossCheck methods after an upgrade
  • (bug 7574) xCtrl and yCtrl are not sent back with updated values when the map is saved
  • (bug 7841) Table '...' is marked as crashed and last (automatic?) repair failed
  • (bug 7905) Can't generate PDFs for status tab reports
  • (bug 8012) Crosscheck list last 5 poll cycles out of sync
  • (bug 8196) Flowalyzer is coming into appliance, but not in the tree menu
  • (bug 8234) Pie charts percentages don't match those in table data
  • (bug 8253) Backup /files/log files on upgrade
  • (bug 8281) Stacked/unstacked control showing for pie-charts
  • (bug 8282) Policy manager report not returning results when using logical filters
  • (bug 8286) Google map icon changes to flash map icon on tree menu refresh
  • (bug 8336) Default 24-hour report option displays even when selecting reports in other timeframes
  • (bug 8355) Authentification failure on special character passwords during login
  • (bug 8368) Collector stops when expiring history
  • (bug 8376) Vitals RRDs not ported correctly after 8.6.1- 9.5 upgrade
  • (bug 8377) Pie chart by number of packets graphs incorrectly
  • (bug 8430) Orphans time stamp search has unexpected results
  • (bug 8442) PDF export doesn't include outbound traffic
  • (bug 8462) Address issue where users want threats destination vs. threats source
  • (bug 8482) Clicking on poller icon from device overview or crosscheck get error when using SSL certificate
  • (bug 8492) Calls www.google.com when not using google maps
  • (bug 8504) Upgrade always resets system skin to retro-darkalt
  • (bug 8523) Flowalyzer trending is duplicated
  • (bug 8667) Flow examiner is not showing egress flows when present
  • (bug 8715) Creating a new group with a space in the name results in in the name
  • (bug 8750) Packets column should switch between rate and total in status reports
  • (bug 8830) Emailed reports don't include comment
  • (bug 8878) Lost style in device tree tooltips
  • (bug 8921) CrossCheck notifications command line parameter is incorrectly formatted
  • (bug 8937) Removing the admin tab Privileges removes the report list from tree menu
  • (bug 8984) Bidirectional status reports don't show direction in table
  • (bug 8989) Creating a group in Mapping and then navigating directly to connections breaks the interface
  • (bug 9041) Total column in csv export should use bits or bytes in the column label
  • (bug 9046) Scrutinizer: interface exceeded threshold should have a spoof address
  • (bug 9102) Internet threats monitor shows a destination as the violator
  • (bug 9131) Allow + signs in email addresses
  • (bug 9133) Can't email reports that have no results
  • (bug 9197) (ASA) NF_F_USERNAME filter in Flowview fails if Domain included in username
  • (bug 9243) Prevent multiple entries for the same object in Service Level Report
  • (bug 9292) Missing sFlow exception
  • (bug 9343) Better data formatting in Flowview
  • (bug 9389) Alarm filters not working for timestamp
  • (bug 9401) Alarm email notifications failed if authentication was required
  • (bug 9402) Saved status report disappears
  • (bug 9443) Upgrade sometimes fails to create log folder

New in Scrutinizer NetFlow Analyzer 9.5.3 (Oct 24, 2012)

  • removed watcher service since it is no longer needed
  • bug 8657 fixed issue where scheduler and watcher services were both started

New in Scrutinizer NetFlow Analyzer 9.5.2 (Oct 24, 2012)

  • (bug 8537) fixed potential vulnerability in calls to report filters
  • (bug 8537) disabled verbose SQL errors in PHP components

New in Scrutinizer NetFlow Analyzer 9.5.1 (Oct 24, 2012)

  • (bug 8448) option template from Nexus 7k crashing tables
  • (bug 8143) fixed issue with icon colors in Google maps
  • (bug 8251,8360) fixed issue where some new views appear for SPM users
  • (bug 8254) fixed issue with login/cookies after upgrade to 9.5.0
  • (bug 8310,8359) fixed issue where dashboards would make extra AJAX calls
  • (bug 8404) fixed issue with bulk permissions
  • (bug 8414) fixed issue with Google map icons being cut off at the edge of a tile
  • (bug 8256) fixed issue with advanced filter for MAC and IP not having like/not like options
  • (bug 8260) updated mIAM views not only show entries seen in the last 24 hours
  • (bug 8379) fixed issue with alarm policy ordering

New in Scrutinizer NetFlow Analyzer 9.5.0 (Oct 24, 2012)

  • added 5 new flow count reports
  • added 18 new Cisco ASA specific reports
  • added new Cisco PfR reports and PfR Summaries views
  • added a new Cisco PfR Overview Gadget
  • added a new Cisco PfR dashboard
  • added support for Enterasys Mobile IAM (Identity Access Management)
  • flowhopper is now enabled by default
  • users can now run reports from the flow examiner
  • internet threats algorithm now identifies the source address in the alarms
  • added support for barracuda devices
  • the newest Adobe Flash Player (11.2) is now included
  • added support for Riverbed devices
  • a link to Cisco IronPort is available in Other Options Menu for a device
  • Service Level Reports can now be filtered by groups
  • 6 column option is now available in Dashboards
  • Dashboards have a new look when dragging gadgets around
  • added and updated many countries maps for Scrutinizer Maps
  • Eventlogs for Logalot are no longer natively supported. However, a 3rd party agent can be used
  • fixed several formatting issues:
  • (bug 7648) fixed issue with column sorting in the bulletin board
  • (bug 7664) the flow report thresholds gadget can now save values < 1000
  • (bug 7684) fixed sorting issues in the orphans view
  • (bug 7748) can now schedule reports for same minute on different hours
  • (bug 7784) flowalyzer will no longer crash when using SNMPv3/aes
  • (bug 7697) report menu has been reordered to simplify navigation
  • (bug 3238) the "SNMP enabled" checkbox in device details will no longer break the interface if repeatedly clicking
  • (bug 7663) sflow devices no longer give oops error when looking at 30m intervals
  • (bug 7699) sflow devices no longer give oops error when applying subnet filter
  • (bug 7817) fixed some timestamps in flowview to be human readable
  • (bug 7625) clicking save no longer removes the interval header in reports
  • (bug 5905) fixed templates and icons related to Enterasys devices
  • (bug 7770) sometimes a space was being passed to IPs causing them to fail DNS
  • (bug 7844) adding the %m in notifications manager will no long cause a script error
  • (bug 7852) report names that were too long will no longer cause save issues
  • (bug 7733) backing up plixer.ini to current directory will no longer cause upgrade issues
  • (bug 7452) fixed some formatting issues with flowhopper
  • (bug 7455) the upgrade will no longer write plixer_install.ini to the wrong place
  • (bug 7898) a couple of issue where FA gadgets were using bits instead of bytes
  • (bug 6034) the Logalot reporting interface now has a working modify button
  • (bug 7713) Passive PfR Jitter report has been removed since there will never be results
  • (bug 7715) fixed formatting issue when resizing summary views
  • (bug 7929) deleting a dashboard tab should no longer remove the main tabs
  • (bug 7958) flowalyzer RTT/availability reports were incorrectly allowing interface filters
  • (bug 7944) FA will no longer allow sFlow devices into algorithms that won't yield results
  • (bug 8006) the collector will now display the proper version from CLI
  • (bug 7955) fix issue where object list wouldn't display when configuring maps
  • (bug 7882) addressed slowness when viewing Flash Maps
  • (bug 7872) fixed issue where logalot email notifications would fail, although tests emails worked
  • (bug 8072) fixed an issue that prevented 3rd party tools from launching Scrutinizer views
  • (bug 7976) fixed an issue where thresholds would not process with a Cisco ASA
  • (bug 8074) flow view should no longer report a flow direction as unknown
  • (bug 8104) internet threats wasn't clearing its cache before repopulating data
  • (bug 8063) the getting start video should no longer say it has been removed from YouTube
  • (bug 8143) google map icons sometimes didn't register the proper status
  • (bug 8108) fixed issue where notification in status reports would not save properly
  • (bug 8183) addressed HTTP Authentication Bypass Vulnerability when creating login accounts
  • (bug 8185) restricted mib file uploads to .txt and .mib extensions
  • (bug 7832) SNMPv3 with SHA authentication and AES128 encryption will now work properly
  • (bug 8119) fixed issue with time frames in saved business hour reports
  • (bug 8121) URL filters will now work properly when a + sign is involved
  • (bug 8219) fixed issue where syslog facility always used Local0
  • (bug 8230) addressed potential php vulnerability
  • (bug 8235) fixed issue where filters were showing up twice

New in Scrutinizer NetFlow Analyzer 8.6.2 (Nov 28, 2011)

  • updated flash version bundled from 10.1 to 10.3
  • added support for NBAR 2 Application Names
  • changed the whois lookup service to http://whois.domaintools.com
  • added hard drive recommendation to Vitals
  • added support for more SonicWALL templates
  • updated message to clarify what conditions will show peaks in volume reports
  • new SonicWALL VoIP Report
  • new SonicWALL User Report
  • for some larger implementations, rollup memory use can be manually tuned
  • added Fire Fox 6 support
  • a new and Improved SonicWALL Dashboard
  • the status tab will no longer show no flow activity when there are flows
  • fixed cisco dashboards for jitter & rtt for some upgraded installs
  • paginated results for saved reports will now render correctly
  • minor corrections to language text and manuals
  • links clicked from flash maps now renders the user's default report type
  • interfaces older than 24 hours will once again be removed from status
  • users who click certain links in maps will no longer get a cfg_hash error
  • LED for flows over 1m will now report correctly
  • nbox (nProbe) will no longer crash the collector
  • fixed issue in flowview when viewing 30 min intervals with certain templates
  • fixed issue with reporting totals with high volume sFlow interfaces
  • fixed issue when displaying DSCP descriptions
  • flow direction was removed in flowview for option templates to avoid confusion
  • clicking inbound/outbound flowview links will open separate browsers for both
  • fixed issue where some users couldn't login without closing a browser first
  • changed behavior of how myview tab names are saved
  • fixed some minor text and formatting issues
  • flowview will now show user_index in a readable format
  • fixed issue where removing Alarms Tab permission removed Admin Permissions
  • fixed an issue where peaks were not showing up in volume reports
  • changed the edit icon to be clearer to what it represents
  • fixed issue where deleting all known ports wasn't working properly
  • fixed issue where DSCP description were incorrectly displayed
  • The Cisco Application Latency report should no longer cause an Oops message
  • updated apache ssl configuration to address NULL cipher attempts
  • fixed issue in FA where 4 min was being evaluated instead of 5 min

New in Scrutinizer NetFlow Analyzer 8.6.1 (Nov 28, 2011)

  • Medianet license is now defined as Cisco Advanced Reports
  • users can now partially match URLs with SonicWALL URL filter
  • For history, conversations per interval are now 1,000 (Settable up to 100,000)
  • added more definitions for various hardware vendors
  • the column that is sorted will now be more highlighted
  • SSL enabled Scrutinizers will now be SSLv3 by default
  • the upgrade installer will provide links to upgrade and hardware info
  • fixed issue where some customer reported roll ups were not occurring
  • fixed a formatting issue with tcp flags in FlowView
  • fixed issues related to scheduled vitals and alarms reports
  • calculated column filters will work properly with emailed reports
  • denika connections are now representing the proper units
  • custom reports list in the user group manager should now be alphabetized
  • the Node Details Dashboard for last 24 hours should now render correctly
  • interfaces in the Top Interface Gadget should now be in the proper order
  • fixed issue where Option Templates were not properly importing interface info
  • the long lived flows LED should now function as intended again
  • the same host will not show up multiple times in the list of devices for maps
  • LiveChat link will now properly redirect to correct department for help
  • fixed oops error when drilling into flow data that has been expired
  • new LDAP users will now have a proper status option preference
  • fixed issue with displaying CODEC in some nprobe reports
  • fixed slowness when listing interfaces in the SPM Interface Configuration
  • fixed issue were flowview wasn't rendering properly for nbox
  • optimized how data is dropped nightly to require less database resources
  • fixed Oops message with subnet filters in traffic volume reports

New in Scrutinizer NetFlow Analyzer 8.6.0 (Nov 28, 2011)

  • in the tree menu, a group 'show interfaces' option has been added
  • for VoIP ports, 'scrut_util -voip' has been added to define the ranges
  • for new installs, the default theme is now Dark
  • the default for the jitter algorithm has been set to 80ms
  • some online help videos have been updated
  • a new Top > DSCP Report is available
  • a new SonicWALL Dashboard is available
  • a new Cisco Medianet application latency report is available
  • a new nProbe application latency report is available
  • a new nProbe VoIP report is available
  • the free version is now limited to 5 devices
  • more SonicWALL template data has been defined
  • there are now ToS data between source and destination in Cisco Jitter reports
  • users can see alarms from a specific IP from the context menu
  • the graphs now show units in the y legend
  • remove the negative values in the outbound line and bar graphs
  • updated online documentation related to Service Provider Module
  • fixed some minor formatting and skin related issues
  • in mapping, the UI didn't render if you tried to save a duplicate symbol
  • new users will now default to Top 25 for Status report as intended
  • email CSV help file will no longer report a 404 error
  • email will no longer say sent if email server is not configured
  • users saving more than a year of DNS cache could break DNS Caching
  • fixed issue where all SonicWALL applications were not defined
  • The collector service is now dependent on the watcher service
  • fixed unresponsive script error when defining security per interface
  • fixed issue where some users got a can't open shared library error
  • fixed issue where PDF reports displayed bits instead of percent
  • we had 2 netflow config wizards, now we have one. it's in Flowalyzer
  • fixed issue where flowview improperly reported flow direction
  • fixed issue where flowview would not render a single minute range of data
  • the SonicWALL application filter should now work properly
  • flowview was only showing required columns instead of all when viewing a report
  • users can no longer search for ports when the ip host option is selected
  • users can no longer search for ip address when the port option is selected
  • fixed an error occurred using interface names from option templates
  • fixed an issue decoding Netflow v1
  • fixed issue launching flowview for ICMP traffic with Enterasys devices
  • peaks with sFlow should now be working properly
  • fixed issue where traffic excluded wasn't being excluded
  • filtering a report on a template no longer limits template filter choices
  • pulsating yellow on drop downs was hard to see, now its blinking red
  • fixed sort issue with bits, bytes, and packets in the Top Interface View
  • drop down options are no longer incorrectly displayed in dashboard gadgets
  • the context menu should be much faster with multiple exporters in a report
  • fixed issue where a user couldn't save a report used by a deleted report
  • some default settings for mailinizer reports were incorrectly set to rate
  • the Cisco ASA again has a connection report
  • fixed issue where the tree menu didn't show the proper icon for Cisco ASA

New in Scrutinizer NetFlow Analyzer 8.5.0 (Nov 28, 2011)

  • PDF Reports are now available in Status, Alarms, and Vital Reports
  • Mailinizer is now part of the core features of Scrutinizer
  • extensive reporting with Cisco's new Medianet (Cisco Performance Reports)
  • Added Support for SonicWALL's IPFIX Templates
  • NOTE: At the time of this release, the SonicWALL firmware is public beta)
  • additional Support for Juniper's IPFIX Exports
  • there is now a new Flow Analytics Algorithm for Cisco Performance Reports
  • more reports are available in the free version
  • new reports have been added specifically for nProbe
  • new reports have been added for VLAN information
  • new reports have been added for MAC Address information
  • columns in reports can now be sorted for more flexible reporting
  • report thresholds are now based on the column ordered
  • the Google map engine has been upgraded to APIv3
  • users can rename flow templates from Flow View
  • both inbound and outbound utilization will display on Map Links
  • mailinizer reports by count and size have been consolidated
  • a new option in reports is available to stack and unstack report data
  • the user now has the option to select a specific flow template
  • newer versions of PHP and Apache are installed
  • a newer version of jQuery has been applied to Scrutinizer
  • users can now turn off checking for new versions
  • the background of "other" flashes to let the user know when other is filtered
  • the flowview menu option is now available when no reports are available
  • a special icon has been added to represent Cisco ASA devices in the tree menu
  • drilling into single interval from flow volume now brings up connections
  • Scheduled CSV and Billing have been added to Scrutinizer
  • a new timeframe of "last full hour" has been added
  • Enterasys devices are now represented by a different icon in tree menu
  • added an IN and OUT label to bi-directional graphs
  • fixed some styling and color issues
  • when looking at 1 data point, it will now correctly switch to pie
  • bar graphs will no longer have too many labels on the graph
  • pie graphs are no longer tiny when emailed
  • fixed issue where users could disable scheduled reports but not enable them
  • fixed issue where the top domain gadget wouldn't load
  • bar graphs will no longer have too many date stamps in its legend
  • an invalid end date will no longer state the start date is invalid
  • users will no longer get an "undefined" when trying to delete all host names
  • fixed issue where the mouse over had a name when it should be an IP address
  • some users were confused in Definitions > Host Names, so SAVE is now ADD
  • fixed issue where there were same gadgets in the same MyView Tab
  • IP/DNS button will no longer incorrectly show up in Domain Reports
  • the CIDR will now correctly show up in the Subnet Gadget
  • fixed issue where pagination would incorrectly have a NEXT page available
  • fixed issue where deleted scheduled reports were still trying to run
  • long filters will now properly format. The entire filter is in the mouse over
  • horizontal scrollbars should no longer show up in Dashboards
  • flowview will no longer complain to select a column when one was selected
  • MyView will no longer give a JS error when certain custom reports are gadgets
  • reports from multiple devices now include the exporter in the tool tip
  • in mapping, textboxes will properly save when they contain single quotes
  • fixed formatting issue in flowview related to transport protocols
  • reports within report groups should not be alphabetized
  • country to country reports should render faster
  • the IP/DNS toggle in some gadgets should now work properly
  • fixed an issue with application groups would fail with large ranges of IPs
  • subnet reports will no longer error with IPv6 addresses
  • sFlow devices will now report some data on interfaces without conversations
  • SNMP timeouts greater than 60 seconds will no longer crash the collector
  • for application groups, fixed issue where IPs were not supporting properly
  • fixed issue in filters when users added a IPv6 mask to an IPv4 address
  • fixed issue related to some scrut_util command line tools

New in Scrutinizer NetFlow Analyzer 8.0.2 (Nov 28, 2011)

  • fixed issue related to MySQL files not created properly for some installs

New in Scrutinizer NetFlow Analyzer 8.0.1 (Nov 28, 2011)

  • added additional internal definitions for IPFIX fields
  • added additional IPv6 definitions to describe some undefined values
  • users can now update non-root db user passwords from CLI
  • removed util.cgi from the product. It no longer is needed
  • added option to context menu for IP addresses to launch the search utility
  • fixed IE8 compatibility issue in welcome gadget
  • The welcome gadget is no longer bound to the English language
  • users can no longer rename exporters in mapping and get a (No Label) result
  • fixed issue where SNMPv3 crashed the collector when username wasn't defined
  • service provider users will find their tree menu is working properly again
  • testing LDAP credentials from CLI will now work as it did in v7
  • in some reports, the rate calculation is no longer off by one interval
  • peak values are no longer available when multiple interfaces are viewed
  • toggling between Admin and Status Tab should now work properly in IE7
  • fixed memory leak using IE when leaving Scrutinizer up for a period of time
  • saved reports from early 7.x will now have the right rate/total setting
  • fixed issues related to advanced filters
  • fixed issue related to filtering on source or destination port
  • fixed IE8 formatting issue in the Flow Analytics Devices Gadget
  • the login page will now obey the server preference skin/theme setting
  • fixed issue where mailinizer graph had no data until you drilled in
  • the comment box was too small for email on demand pop ups
  • fixed issue in Google Maps where ploylines caused a JS error in IE
  • fixed issue related to source and destination port filtering
  • reports that are popped up from filters will once again try to resolve IPs
  • creating new SNMP Credentials should have been defaulting to SNMPv2
  • fixed issue with launching Denika Connection Reports from Google Maps
  • fixed issue with total/other in the host flows report
  • to avoid confusion, renamed flows to grouped flows

New in Scrutinizer NetFlow Analyzer 8.0.0 (Nov 28, 2011)

  • like Scrutinizer? Want to see email the same way? check out Mailinizer!
  • dashboards have been added! See multiple reports in a single report type
  • added Top Domain and Domain to Domain Reports
  • added Top Country and Country to Country Reports
  • added support for NetFlow v8
  • added provisional support for Juniper IPFIX reporting
  • The colors used in Scrutinizer v6 are available in retro skins
  • newer versions of the database and web server are upgraded
  • 64 bit version of the database will install automatically on 64 bit OS
  • a delete button was added at the bottom of Definitions -> Manage Exporters
  • updated translations for French, Portuguese, and Spanish
  • full support for IPFIX variable length strings and option templates
  • users can now upgrade from a non-SSL to SSL without uninstalling
  • direction has been added to flow view report details
  • users can now define their own top interface refresh rate
  • in bidirectional mode, flow view links available for both inbound / outbound
  • a new graph type of Sphere
  • different views are available such as exporter and top mail statistics
  • users can each set their own default view
  • flow analytics will display the columns required for certain algorithm
  • peak values are now available in sFlow reports
  • the router gadget has been added to the flow expert tab
  • additional support has been added for nProbe
  • php is now distributed as part of Scrutinizer
  • additional country icons have been added
  • 95th percentile and averages are in Traffic Volume email reports
  • a permission has been added to allow users to add/remove filters
  • the report type menu has been improved and organized for the better
  • users can a time zone in their own preferences
  • flexiflow is now a view called Exporters with additional enhancements
  • the newest version of Adobe Flash Player is included
  • the top network transport gadget has a button to manage acceptable protocols
  • application groups and filters have IPv6 support
  • devices that aren't available for algorithms are no longer showing up
  • a scrut_util command has been added to import defined domains from v7
  • users can customize domain names for any IP address
  • SNMP can identify names for some devices that use different mibs for interfaces
  • to prevent search engines from finding Scrutinizer, a robots.txt is included
  • breadcrumbs have been added to all reports types
  • a new Report List option will show available reports for a specified device
  • users can now add a filter for exported flow column using advanced filters
  • many tutorials and videos have been updated for v8
  • Flow Analytics is easier to find and configure
  • performance of the Flow Analytics Algorithms have been improved
  • the high water mark popup isn't so eager to popup when the user points to it
  • users can no longer get duplicate report filters
  • fixed issue where some dates passed to Flow View from alarms were incorrect
  • the alarm for mismatched NBAR configurations now works properly
  • fixed issues where application groups were some times not matched
  • fixed various formatting issues
  • the auto refresh option no longer checks itself off from time to time
  • fixed issue with ASA template and how they are used in reports
  • fixed caching issues with some MyView gadgets
  • users can now delete reports created when restricted by group permissions
  • removed duplicated alarm types
  • fixed a couple of time zone issues around daylight savings
  • resolved slow script error with IE
  • fixed hard to read numbers in threat overview gadget with dark themes
  • fixed pagination issues when only one page of results is available
  • some error messages now provide more meaningful feedback
  • fixed some issues when both ingress and egress are being used
  • some admin tools were not resetting to page 1 when sorting changed
  • the top country gadget no longer requires TCP flags
  • Scrutinizer and Plixer Tools are more aware of each other
  • CSV files incorrectly had peak values for 1 min intervals
  • testing email settings will no longer require username and password
  • subnet reports no longer fail if prefix length is invalid
  • fixed issue where non-admin users could search devices they can?t view
  • a new permission exists for SP users to stop removing filters from reports
  • flash maps no longer auto-update when in configuring them
  • fixed ALT tag for the ?in? and ?out? columns in interface view for non %
  • top countries algorithm is much faster now
  • fixed issue where SNMP Update had to be clicked twice
  • flow view will now filter properly for countries
  • fixed issue where the user's default unit (bits, bytes, etc) was not honored
  • fixed issue where users could select an interface from another device
  • permission has been added to prevent users from clicking links from flexiflow
  • reports scheduled on Sunday will now run properly
  • the admin tab remembers how to alphabetize its menus
  • fixed issue where the status tab auto-refreshes causes formatting issues
  • fixed scaling issues of cached DNS names
  • users should no longer have issues searching and filtering alarms
  • fixed issue in Flow View when searching with TCP flags
  • CSV will export percents properly now
  • fixed issue where an IP would have different names in tree menu vs. reports
  • the DNS/IP button was in some reports when it shouldn't have been
  • flow view now works properly with domain based reports
  • flow view drop down filters remember how to alphabetize
  • check all? option in some admin tools now will check all fields properly
  • fixed issue where alarm button in Device Details was not filtering alarms
  • fixed issue in alarms where first time stamp was newer than last time stamp
  • network volume algorithm will run much faster now
  • fixed issue where the collector would crash with badly formatted packets
  • enter key will now trigger a search in Status -> Interface View
  • top domains and countries no longer fail with less dsts than srcs addresses
  • fixed issue where MyView graphs are scaling incorrectly
  • an incorrectly typed license key will no longer blank all license keys
  • running the report wizard will now clear any current report filters first
  • to avoid confusion, a Current Filter header was added for reports
  • the UI will no longer say password is admin when scrut_util updated it
  • peak values will no longer change for multiple devices and interfaces
  • fixed issue that allowed user to create overlapping application groups
  • fixed issue where /scrutinizer/tmp/email was vanishing
  • SP users can no longer delete other peoples reports
  • fixed issue were sometimes a new user was created, but couldn't be modified
  • users can no longer be removed from all groups
  • upgrades will no longer overwrite a customized application.cfg
  • added missing (sec) label in flow analytics vitals
  • the LDAP wizard can properly handle login accounts including the domain name
  • fixed issue where Network Volume gadget wouldn't render
  • fixed 500 error when trying to access Report Behavior by clicking an IPv6 addr
  • should no longer show up in the title bar for IE
  • fixed issue where the collector wouldn't start in some XP environments

New in Scrutinizer NetFlow Analyzer 7.7.1 (Nov 28, 2011)

  • added additional definitions for SonicWALL devices
  • fixed issue with incorrect column types on roll up tables
  • after upgrading to 7.7.1, run scrutinizer\bin\scrut_util -fix_tables)
  • fixed issue where a malformed flow packet could cause the collector to loop

New in Scrutinizer NetFlow Analyzer 7.7.0 (Nov 28, 2011)

  • Scrutinizer includes support for NTOP, Providing First-of-its-Kind Advanced
  • Flow-Based Monitoring to Analyze Latency, Email, and Web URL Traffic Detail
  • the installer will alert if someone has manually changed the db password
  • the admin tab menus are now in alphabetical order
  • the mapping configuration uses blue icons instead of green to avoid confusion
  • the flow direction column will only show up if needed in flow view
  • fixed formatting issue in flow view with IE7
  • fixed several text and skin issues
  • sflow reports will no longer show overstated peak values
  • fixed issue where users couldn't toggle execution/alphabetical in FA Overview
  • fixed label for some gadgets not reporting a name for an IP protocol
  • yesterday reports now show midnight to midnight instead of midnight to 11:30p
  • a user's default report will now be used from searching and 3rd party linking
  • invalid subnet masks will be handled more gracefully in FA Top Network Gadget
  • fixed confusing error message when trying to configure Admin -> Email Settings
  • fixed template issue for ASA devices
  • several Flow Analytics Algorithms will run faster now
  • fixed issue where users couldn't rename a reports
  • the installer will create a install.log file
  • the manual in MyView will now launch when (?) was clicked
  • fixed issue where some installs would fail if Skype was installed first
  • fixed issue where FIN alarm wasn't passing correct filter to flow view
  • switching inbound to outbound, then viewing raw flows will now update properly
  • fixed issue on Network Volume gadget where in and out % may be understated
  • the collector will no longer stop due to 0 disk space if WMI is disabled
  • scheduled reports will now execute properly if scheduled on Sunday
  • when data in flowview was between < >, they would be invisible. Not anymore
  • fixed issue where 12h and 1 day intervals were not expiring correctly
  • improved IPFIX support with variable length field support