Version 8.2

Version 8.02.05

• Updated Japanese User Guide.

Version 8.02.04

• Fixed displaying Event Evidence on Flowmon OS version 8.03 and higher.
• Fixed label in MAC address context menu.
• Fixed calling external IP services URL with special symbols.
• Fixed DNS names to IP address assignment (undesired IP substring match).
• Improved performance of filtering in Event Evidence.

Version 8.02.03

• Fixed detection of UPLOAD method in special cases (disabled pairwise option).
• Fixed translation of month name on dashboard overview chart.
• SCANS - removed experimental detection of RST/ACK scans.

Version 8.02.02

• Fixed detail of hostname-based blacklist events (amount of transferred bytes).

Version 8.02.01 BETA

• Fixed start of database for data processing (after forced stop)

• Fixed displaying of long DNS records

• Fixed displaying of false positive list when auto IP address resolving is disabled

• Minor fixes of detection methods related to bidirectional flows (IPV6TUNNEL, SRVNA, DNSANOMALY, ..)

• BLACKLIST - replaced "malware activities" list with "malware domains" new one

Version 8.02.00 BETA

• Enhanced performance (switch to bidirectional flows)

• Improved flow sampling (with respect to pair-flows)

• Improved flow deduplication (only flows from different sources are compared)

• Changed the method of retrieving reverse DNS records (live during page rendering)

• MULTICAST - added detection based on MAC address

• REFLECTDOS - new detection of TFTP attacks (TrivialFTP parameter)

• SMTPANOMALY - new parameter IgnoreSYNflows (exclude SYN flows from detection)

• SYSCHECK - new parameter DeactivateOnFlood (deactivate method with huge amount of events)