Enhanced Syslog/BEEP implementation for better interoperability with Cisco’s implementation in IOS. The BEEP support has been in our products for a long time, but so far no major vendor offered BEEP support. Now that a first major vendor implementation is available, we need to tweak a few protocol parameters to make it fully interoprable. This has happened now.
Added new property $NOW, which is the local time in the format YYYY-MM-DD HH.MM.SS. Note that “.” is used instead of “:” in the timestamp to make this value suitable for filename-generation.
– Enhanced performance of debuglogging and added more debug outputs into certain areas of the Eventreporter Service.
– Implemented advanced memory management which is available on Windows XP/2003 and higher. This will speeds up overall processing in general depending on your Services and Actions.
Added property replacer option “compsp”, to compress spaces inside a property
This bugfix applies for TCP based operations of these both actions. A Send/Receive TimeOut of 30 seconds has beend added into into these actions to avoid possible lockdown of the service.
EventLog Monitor (SID Cache)
A bug has been fixed which could occur when a SID could not sucessfully resolved could lead to unexpected internal EventLog Monitor Service interruptions.
Fixed a bug where a UDP socket send returned with “WSAEMSGSIZE (10040) Message too long” when an oversize packet was tried to be sent. The message is now simply truncated, there is no other option available to handle such cases.
Fixed a bug that could cause the product to become unresponsive after a action failed to process.
Fixed a bug which could lead to invalid detections of search strings.