This is the version history for Sawmill 6.0 beta.
Sawmill 6.0 is shipping right now; watch this space
for details about the new features.<p>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version alpha, shipped DATE: 10/3/2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version alpha:
<ul>
<li>
Fixed session views, which were broken in several ways.

<p>

<li>
Fixed bug where filters (and the "remove" link) did not appear in Filters part of statistics.

<p>

<li>
Fixed a bug where the web browser and location fields were not hierarchical.

<p>

</ul><p>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version production, shipped DATE: 07/29/2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version production:
<ul>
<li>
Added support for Bindview Windows Event log format.

<p>

</ul><p>
New features in production:
<ul>
<li>
Enhanced "Squid (with Referrer and Agent) Log Format (Syslog Required)" log format
to support session tracking and geographic reporting of source IPs.

<p>

<li>
Added support for Check Point SNMP Log Format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version oldproduction, shipped BY_REQUEST: YES
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version oldproduction:
<ul>
<li>
Fixed a bug where certain DNS queries were not decoded properly, resulting
in reported DNS lookup failures when the DNS server actually had succeeded.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where table bars generated from values over about 100,000,000 would
be too short.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the number of database segments was set very high, and
the size of the memory write buffer was set low, then Sawmill could hang
during log processing.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could crash when cleaning up its temporary directories.
This could cause the CGI version of Sawmill to fail in some cases when it can't
create the LogAnalysisInfo directory.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "Please create the LogAnalysisInfo directory" screen
used DIRECTORY_WORD instead of "directory".

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "Please create the LogAnalysisInfo directory" screen
had a black header bar.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved wording of Overview text so it makes sense in generate HTML.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved statistics HTML so the view sidebar is always minimal width.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where failed DNS lookups were cached, so they would not be resolved
later even if the cause of the original failure disappeared.

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed the "TempImages" directory names so they didn't contain dots (.),
so Sawmill can get along with URLScan.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "temporary directory" page in CGI mode was full of
references to "DIRECTORY_WORD"

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where typing the administrative password and hitting return 
would reload the password screen in CGI mode.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Blue Coat Custom log format strings where spaces were not
used as the divider were not parsed correctly if the field values contained spaces.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would sometimes drop control connection commands 
when talking an an FTP server, resulting in errors or freezes.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where editing view filters, and clicking "Apply" without selecting any filters,
could corrupt the configuration.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some bars would be omitted from the date graph, if
they were less than one pixel wide and other bars had already been drawn in that pixel.

<p>

</ul><p>
New features in oldproduction:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where long "red arrow" URLs in the "Top entry pages" view could
be broken.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a field name was long, generating a table for that field
could cause a "Mismatched brackets" error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes when generating HTML files on Windows.
(and theoretically, in other cases).

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.11, shipped July 24, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.11:
<ul>
<li>
Fixed a bug which could cause some log entries to be ignored when DNS lookup was turned on.

<p>

<li>
Fixed a bug with Symantex Gateway Security log format.

<p>

<li>
Fixed a bug which could cause a crash while processing corrupt ZIP or gzip files
with an FTP log source.

<p>

<li>
Fixed crash bug which could occur at end of log processing.

<p>

<li>
Fixed a bug where expired days did not become unlinked in the Calendar.

<p>

<li>
Fixed Sidewinder Syslog format to support single-digit days.

<p>

<li>
Fixed some small problems with Firewall-1 (fw logexport export) Log Format,
which resulted in some web-server-style wordings in the statistics.

<p>

<li>
Fixed Safari IP-cookie warning message,
which is no longer needed for Safari 1.2.2 and later because
Apple fixed the bug.  Yay, Apple!  Warning message still appears when using
Safari 1.2.1 and earlier, which have the IP cookie bug.

<p>

<li>
Fixed a bug where certain database builds/updates would result in a DOS window temporarily
popping up on Windows.

<p>

<li>
Fixed bug where CSV header parsing would split the last field name if it contained whitespace.

<p>

</ul><p>
New features in 6.5.11:
<ul>
<li>
Added support for Interscan Messaging Security Suite Virus Log Format.

<p>

<li>
Added support for "Squid (with Referrer and Agent) Log Format (Syslog Required)" log format.

<p>

<li>
Added support for Netgear FVS318 log format.

<p>

<li>
Added support for Oracle Failed Login Attempts Log Format.

<p>

<li>
Added support for EmailCatcher log format.

<p>

<li>
Added support for BEA WebLogic log format.

<p>

<li>
Added support for Ethereal log format.

<p>

<li>
Added support for a variant of Postfix log format.

<p>

<li>
Added support for ClamAV log format.

<p>

<li>
Added support for Symantec AntiVirus Corporate Edition (VHIST Exporter) log format.

<p>

<li>
Improved "GFI Attachment & Content Log Format".

<p>

<li>
Added support for IPEnforcer log format.

<p>

<li>
Added support for NetGear DG834G Log Format.

<p>

<li>
Improved autodetection of Declude SPAM log format.

<p>

<li>
Modified Interscan Security Suite log format to accommodate a variant.

<p>

<li>
Improved support for Watchguard SOHO Log Format.

<p>

<li>
Fixed bug where CSV output was misformatted when URLs contained newline characters.

<p>

<li>
Added detection of X-Forwarded-Host; it is now used as cookie domain when present.

<p>

<li>
Improved Merak SMTP Log Format to autodetect in more cases and to track geographic
information.

<p>

<li>
Added support for Symantec Gateway Security 5400 log format.

<p>

<li>
Improved Postfix log format to report usernames of authenticated SMTP users.

<p>

<li>
Added support for Watchguard Firebox Export Log Format.

<p>

<li>
Improved ServUFTP so it correctly reads the Error lines with partial bytes.

<p>

<li>
Added support for Cisco Router Log Format (no syslog).

<p>

<li>
Added support for GFI Spam Log Format.

<p>

<li>
Improved auto date format to handle three-letter months.

<p>

<li>
Added support for Proxy-Pro GateKeeper Log Format.

<p>

<li>
Added support for Active PDF Log Format.

<p>

<li>
Added support for MailSweeper 24 Hour Log Format.

<p>

<li>
Added support for Servers Alive Statistics log format.

<p>

<li>
Added support for Anti-Spam SMTP Proxy (ASSP) Log Format.

<p>

<li>
Added support for Ironmail AV Log Format (Sophos).

<p>

<li>
Added support for mmm/dd/yy date format.

<p>

<li>
Improved Postfix log format to track "from" and "to" domains.

<p>

<li>
Enhanced Cisco VPN Concentrator log format to report disconnection reasons.

<p>

<li>
Added support for IronPort Log Format.

<p>

<li>
Improved LinkSys Router Log Format to handle a different date format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.10, shipped May 30, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.10:
<ul>
<li>
Fixed a bug where log filters could be doubled in newly-created configurations.

<p>

<li>
Fixed Common Referrer log format so it handles empty referrers properly.

<p>

<li>
Fixed bug where URL was not redisplayed properly when using HTTP log source.

<p>

<li>
Added support for Snare log format.

<p>

<li>
Fixed a bug where entry/exit pages sort did not work properly.

<p>

<li>
Fixed a bug where authenticated users were not tracked correctly in WS_FTP Log Format.

<p>

<li>
Fixed a problem where NetCache NetApp 5.5 Log Format did not handle x-localtime fields correctly.

<p>

<li>
Fixed a bug where log formats which used the carryover feature would not report hours of day properly in some cases.

<p>

<li>
Fixed a bug where durations were formatted in CSV export, instead of appearing as simple seconds.

<p>

<li>
Changed internal name of localtime field to date/time to prevent conflict in W3C logs where both localtime and #Date exist.

<p>

<li>
Fixed DNS lookup bug which could causes crashes or odd errors.

<p>

</ul><p>
New features in 6.5.10:
<ul>
<li>
Added support for GMS POP Log Format.

<p>

<li>
Added support for Merak Mail Server Control Log Format.

<p>

<li>
Added export_pathname option to specify pathname of file for CSV export.

<p>

<li>
Added support for "Symantec Gateway Security 5400" format.

<p>

<li>
Added support for "Vamsoft Open Relay Filter Enterprise Edition Log Format".

<p>

<li>
Added support for Aladdin eSafe Sessions Log Format.

<p>

<li>
Added support for Fortinet Log Format (syslog required).

<p>

<li>
Enhanced "Windows 2000/XP Event Log Format (export list-CSV) ddmmyyyy" to handle AM/PM times.

<p>

<li>
Added a version of Unix Syslog format which extracts date from m-d-yyyy.log filename,
working around the problem caused by lack of year information in Unix Syslog.

<p>

<li>
Added support for Apache/NCSA Common Agent Log Format.

<p>

<li>
Enhanced Common Proxy Log Format to use GeoIP to compute countries/regions/cities of
source IPs.

<p>

<li>
Added support for Amavis Log Format Log Format.

<p>

<li>
Added country/region/city tracking for NetScreen Traffic Log Format.

<p>

<li>
Added support for Watchguard WELF Log Format.

<p>

<li>
Added support for FortiGate Space Separated Log Format.

<p>

<li>
Added support for Netgear Security Log Format (logging to syslog).

<p>

<li>
Added support for Netilla Log Format.

<p>

<li>
Added support for FortiGate Traffic Log Format.

<p>

<li>
Fixed a bug with expanding/collapsing subviews in non-English installations.

<p>

<li>
Added support for WebNibbler log format.

<p>

<li>
Added support for Eventlog to Syslog Format.

<p>

<li>
Added support for Packet Dynamics Log Format.

<p>

<li>
Added geographic country/region/city reporting of source IPs for Cisco PIX/IOS log format.

<p>

<li>
Added support for Nagios Log Format.

<p>

<li>
Added support for Bind 9 Query Log Format (without timestamp).

<p>

<li>
Improved Postfix support to report Vexira virus scanning lines.

<p>

<li>
Improved support for Bind 9 Query Log Format (with timestamp) to report
day of week and hour of day.

<p>

<li>
Added support for IPCop Syslog.

<p>

<li>
Added support for NetCache NetApp 5.5 Log Format.

<p>

<li>
Added support for Trend Micro ScanMail For Exchange Log Format.

<p>

<li>
Added support for NetApp Filers Audit Log Format.

<p>

<li>
Added support for Symantec Enterprise Firewall 8 Log Format.

<p>

<li>
Added support for Message Sniffer Log Format.

<p>

<li>
Improved LogSat SpamFilterISP Log Format to report Bayesian filter lines.

<p>

<li>
Enhanced LISTSERV format to support single-digit dates.

<p>

<li>
Added support for a slight variant of NetCache NetApp Log Format.

<p>

<li>
Improved auto data format to allow only reasonable values for year, month, and day.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.9, shipped April 03, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.9:
<ul>
<li>
Improved detection of corrupt TAI64N date/times.

<p>

<li>
Fixed a bug where if an Apache or Blue Coat format string contained characters which were also regular expression operators (like |), all log entries would be rejected.

<p>

<li>
Fixed a bug where if a timestamp field was used in W3C logs, and a
#Date line was also present, date/time information was not reported
properly.

<p>

<li>
Fixed Blue Coat W3C format to support explicitly listed URL fields in
the log data (it no longer attempts to build the URL from pieces if
it's there in the log data).

<p>

<li>
Fixed a bug where corrupt compressed log data would halt all log
processing, instead of just skipping the corrupt file.

<p>

<li>
Fixed a bug where CSV export of a multi-table view like Single-page
summary would incorrectly add a comma to the beginning of most of the
header rows.

<p>

<li>
Fixed a bug where Sawmill would try to create a file called last_format_line.txt at the root of the disk, sometimes resulting in a permission error.

<p>

<li>
Fixed a bug which could cause a crash in some cases while processing
complex log formats with DNS lookup turned on.

<p>

<li>
Fixed a bug where quotes in field values were not escaped properly when running commands.

<p>

<li>
Fixed a bug where using # characters in some cases (like field names)
would cause errors when viewing statistics.

<p>

<li>
Fixed a bug where using the filter: format for expiring database data would cause the remaining data to be tripled.

<p>

</ul><p>
New features in 6.5.9:
<ul>
<li>
Enhanced LogSat SpamFilterISP Log Format to handle a slight variant.

<p>

<li>
Enhanced Lucent Brick format to extract data from 144-code lines.

<p>

<li>
Improved iPlanet Messenging Server 5MTALog format to support a slight variant.

<p>

<li>
Fixed a performance issue which could result in significant periodic
slowdowns while processing datasets with very large numbers of unique
values for multiple fields.

<p>

<li>
Improved support for Zone Alarm Log Format, to handle an alternate date format.

<p>

<li>
Added support for Syslog NG Log Format, including full message tracking.

<p>

<li>
Added support for Passlogd syslog format, including full message tracking.

<p>

<li>
Added support for Unix Syslog full message tracking.

<p>

<li>
Added support for InfiNet Log Format.

<p>

<li>
Added support for MailEnable Log Format.

<p>

<li>
Improved Novell NetMail to report on antivirus and antispam logging.

<p>

<li>
Added support for Sendmail NT Log Format.

<p>

<li>
Added support for Array 500 Combined Log Format.

<p>

<li>
Added support for MTS Professional Log Format.

<p>

<li>
Improved tcpdump log format to support resolved IPs.

<p>

<li>
Added support for Servers Alive log format.

<p>

<li>
Added support for GW Guardian Spam Log Format.

<p>

<li>
Added auto-detection of Domino Access log format.

<p>

<li>
Added support for Fountry BigIronII Log Format.

<p>

<li>
Added support for Microsoft ISA Server Packet Logs.

<p>

<li>
Added support for GW Guardian Antivirus Log Format.

<p>

<li>
Added support for Watchguard WSEP Text Exports Log Format (Firebox II & III & X)".

<p>

<li>
Enhanced d/m/yyyy date format to allow arbitrary dividers.

<p>

<li>
Added support for Cyberguard WELF Log Format.

<p>

<li>
Enhanced Bulletproof FTP log formats to track uploads

<p>

<li>
Improved NetScreen log format to handle any ordering of fields in log data.

<p>

<li>
Added support for a variant of Microsoft Exchange Internet Mail Log Format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.8, shipped February 14, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.8:
<ul>
<li>
Fixed a bug which could cause a crash in session calculations if all sessions were filtered out.

<p>

<li>
Fixed a problem with MailSweeper Log Format which could cause all log entries to be rejected.

<p>

<li>
Fixed N2H2 / Novell Border Manager Log Format to support single-digit days.

<p>

<li>
Fixed a bug where if the log data contained "format" comments (like W3C or WebSTAR),
then during a database update, the first data seen would be processed with default
format rather than honoring the preceding format line, possibly resulting in
all the data being rejected or mis-categorized.

<p>

<li>
Fixed a bug where sorting some session views alphabetically could cause
a crash.

<p>

<li>
Fixed a bug where some types of sort were not available in the
Session Pages view.

<p>

<li>
Fixed a bug where if there was only one page view in the session
information, the Session Pages and Session Visitors views would be
empty.

<p>

<li>
Fixed a bug where if the Licensing page was cached, and the 30-day
trial button was clicked each time the page appeared, a 30-day trial
would run out in two sessions (possible less than 1 day).

<p>

<li>
Fixed a problem with WebSTAR analysis where if both URL and CS-URI were present in the same log, URLs would only be shown two levels deep.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in Unix Syslog which could cause it to reject entries from certain variants.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the running server URL didn't have a slash after the hostname,
it would not be used to create full URL.

<p>

</ul><p>
New features in 6.5.8:
<ul>
<li>
Added support for Winproxy 5.1 Log Format (yyyy-mm-dd dates).

<p>

<li>
Added support for Astaro Log Format.

<p>

<li>
Added support for PortalXPert Log Format.

<p>

<li>
Added support for FirstClass Server Log Format.

<p>

<li>
Added support for iChain Log Format.

<p>

<li>
Added support for Socks 5 log format.

<p>

<li>
Added support for Windows Event Log Format (dumpel.exe export) Log Format.

<p>

<li>
Improved mm/dd/yyyy:hh:mm:ss format to handle all-lower-case months.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Trend ServerProduct CVS Admin Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced Netscreen IDP format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Netgear Security Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Interscan Messaging Security Suite Log Format to a handle a slight variant.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.7, shipped January 25, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.7:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the built-in web server did not respond properly to HEAD commands.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where date/time fields were not handled properly in some formats,
including Squid with epoc timestamp, resulting in all log entries being rejected.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in the mmmmm/dd/yyyy date format which caused some dates to be ignored.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where view URLs of the format rfcf+configname+cm+vs did not trigger
an auto-update-on-view.

<p>

</ul><p>
New features in 6.5.7:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed Netscape Directory Server to handle a positive time zone offsets.
Removed the default renaming of "method" to "operation", which could cause
problems in log formats which had both.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Symantec Enterprise Firewall log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Unix Syslog format to handle a couple small variants.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved PIX Firewall format to support a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced Cisco VPN Concentrator format to handle formats with
data split across multiple lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco Access Control Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Microsoft Media Server Log Format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NVDcms log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall-1 Log Viewer 4.1 Export Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved "alphabetical" table sort to ignore leading whitespace.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.6, shipped January 11, 2004
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.6:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed support for WebSTAR log formats-- search engines and search phrases
were not being properly reported.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where submitting some forms (in particular the "Make This Data Available" button)
could generate a strange error with some browsers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a serious bug where the "update" and "rebuild" links (and auto-update-when-older-than)
did not work in CGI mode,
and clicking them could cause an arbitrary number of processes to be created, possibly
overloading the system where Sawmill was installed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where for certain log formats (including Eudora Internet Mail Server),
Sawmill would get confused about the date format, and would reject valid log entries.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the pie chart legend for the last row in the table was sometimes
gray when it should have been colored.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could use too much memory, and generate strange errors,
when DNS was turned on in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where progress information was not displayed for background database builds, like those
started from the "update" and "rebuild" links in the statistics.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where adding an extra "filter" option after view+config
in the URL did not apply the filter properly.

<p>

</ul><p>
New features in 6.5.6:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved Postfix log format to handle a variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Cisco Router log format to extract more information from the messages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Minirsyslogd log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Cisco Router format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WebSEAL Error Log Format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.5, shipped December 13, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.5:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if session memory was exceeded in the Paths Through A Page view,
no error would be generated.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved/fixed active FTP transfers so they choose the client connection port
in a way that ensures it isn't still "lingering" from the last time; this
eliminates a bug which could happen on some systems, where an attempt to rebuild
or updated immediately after a previous build/update would fail with an FTP error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in ISC DHCP Log Format which could cause an error when creating a configuration.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where expiration expired the highest-numbered day in the
database (usually the last day) even when it shouldn't, in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where turning on DNS lookup 

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in the Microsoft Media Server log format plug-in which 
caused the number of visitors to always be 1.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes when resolving IP addresses.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed Squid (syslog required) log format to handle usernames and mime types properly.

<p>

</ul><p>
New features in 6.5.5:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Added support for "Microsoft ICF Log Format" log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Zyxel Firewall WELF format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for BroadVisionError log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco NetFlow log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ISC DHCP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved "iPlanet Messaging Server 5 MTA Log Format" to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Renamed the "time spent per page" view to "session pages", and added a columns showing
the number of sessions that visited each page; also, changes the page views column
to be visible by default (it used to be off by default, available as an Option).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Norton Personal Firewall 2003 Connection Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved FTP progress indicator to show which file is being downloaded.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a field value in the log data was a single double-quote ("), it could
cause a crash while processing the log data.

<p>

<li>
[<font color=#ff5050>by request</font>]
Locked down browse_only mode a little more by eliminating the options to rebuild/update
a database from the statistics, even when logged in as administrator.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Symantec AntiVirus Corporate Edition 8.0 Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetKey Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco Border Manager Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Unicomp Guinevere Virus Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved table toolbar to dim the "10 rows" button if there are less than 10 rows.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall-1 (fw log -ftn export) Log Format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.4, shipped November 08, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.4:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where when both FTP and DNS were being used,
they could step on each other's sockets, causing networking errors.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where database expiration did not work at all in some cases,
adding data to the database instead of removing it.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause a crash if the last character of a configuration
file was a #.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed IAS log format to work properly with the new allow_spaces_in_listed_field_values option.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed view and subview editing so the "incremental" checkbox was used and 
saved properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if an item contained an asterisk (*), and it was used in
a statistics filter, it would cause an error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where referrer, referrer description, search engine, and search phrase fields
were not automatically added to the database when a referrer field was present in W3C log
data (and other data with a field header).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Helix Universal log format to handle negative GMT offsets and spaces in URLs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there was no maximum session duration for a configuration (which is rare)
then the last session in the data would be ignored.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the default configuration had been modified to turn on 
visitor tracking by default, and a W3C log (or other log with field headers)
was being analyzed, then an error would occur ("multiple visitor id fields").

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if field values contained pointy brackets (greater than or less than signs),
quotes, or certain other characters, the generate HTML statistics could be displayed incorrectly 
in some browsers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some older IIS configurations did not trigger the 6.4-to-6.5
converted, and therefore showed only 1 visitor in the statistics.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved instant messanging formats so they don't show screen info or worm fields, which are
meaningless for those formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed (again) a bug where Blue Coat IM format did not report sessions properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where sessions tracked was not enabled properly unless visitor tracking
was also turned on.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "rebuild" link in the statistics actually updated the database, rather than rebuilding it.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in SonicWall5 log format plugin which caused an error without reading logfile
translated properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where certain log filter values were English and were not
translated properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the Instructions were missing from many of the views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where all individual IP numbers appeared as part of the hostname
hierarchy, under the "IP Numbers" item, when omit_ip_numbers_from_host_hierarchy
was true.  Now, it correctly shows the IP Numbers item, but with no subitems--
IPs are omitted as they should be.

<p>

</ul><p>
New features in 6.5.4:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved Interscan Proxy Log Format log format to handle a slight difference.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Critical Path Mail Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for BroadVision Observation log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added username tracking to Blue Coat RealMedia log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Novell NetMail Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iMail to track source and destination emails by domain.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for N2H2 Sentian Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a feature to automatically open or view the single configuration in the list,
if there is only one, when Open Configuration or View Statistics is clicked 
in the Administrative Menu.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for iPlanet Messaging Server 5 MTA Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Blue Coat Custom log format so it includes information about all
log fields in the database, not just those known by the log format plug-in.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Ascend Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Siteminder WebAgent log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Windows 2000 event log CVS export log format,
Windows 2000 event log "Save" log format,
and Windows NT event log CVS export log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for x-localtime field in W3C logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for FortiGate log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Blue Coat IM log format in several ways, to report better who messages are sent from and to,
and to eliminate some meaningless reports (including worms).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for uw-imap log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Tellique log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for XMail SMTP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the built-in HTTP/1.1 server to handle the "100 Continue" message in a way more in line with the
latest HTTP/1.1 specification (it now honors the "Expect: 100-continue" request from HTTP clients).  This
*may* eliminate some issues where pages were not loading properly, and should in general improve compatibility
with modern web browsers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Tivoli Storage Manager TDP for SQL Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WallWatcher log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco SCA log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed several problem with Netscreen IDP log format, which prevented it from
being analyze properly in most cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetForensics Syslog Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where background updates (like the one generated by clicking "update" in the statistics) would display output and progress information on the command line.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where errors during background updates (like the one generate by clicking
"update" in the statistics) were not reported properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cognos Powerplay Enterprise Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for EzProxy log format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.3, shipped October 12, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.3:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where IM sessions were not reported properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could crash when running out of memory.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a problem with SonicWall format which could result in some fields being mis-reported.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved/fixed the automatic creation of database field for log formats like W3C
and WebSTAR (formats which use fields headers) to work in more cases,
and to handle cases where multiple fields of the same type exist.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where when tallying hits on complete IPs, Sawmill would
treat each octet in the IP as a character (using its ASCII code), and would
compare them case-insensitively, with the result that IPs like 123.124.125.71
and 123.124.125.103 were treated as equal (because 71 is ASCII for G, and
103 is ASCII for g), and all hits from either IP would be grouped under one of the two IP,
but would not be reported separately.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in Squid (syslog required) log format which prevented the last few fields
in the line from being extracted properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in IIS SMTP W3C log format where sessions information was apparently (incorrectly) available.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed ISA W3C log format, which was generating errors about duplicate fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in Websweeper log format which caused it to generate an error when processing log data.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "rekey" operation (used to parse certain complex log formats)
was not working properly when the key contained uppercase letters.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the 404s view did not appear for W3C log data.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the 6.4-to-6.5 configuration converter to work properly with more
W3C configurations.

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed automated updates and updates generated by the "update" and "rebuild" 
links so they run as separate processes, rather than running two tasks
(the update and then the view) in a single process.  This reduces the chance
of memory conflicts between the two tasks, eliminating some sources of database
corruption.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where the "View to send by email" menu only showed visible views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "incremental HTML generation" feature did not correctly
determine when data needed to be regenerated.

<p>

</ul><p>
New features in 6.5.3:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Added allow_spaces_in_listed_field_values option, which allows there to be spaces
in name=value pairs in log data.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved/fixed SonicWall Alternative Log Format to handle tabs as well as spaces,
and other small improvements.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetGear FR328S Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for bpft4 format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Quicktime Streaming Server log format support to automatically set
up database fields and views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Snort log format to categorize the "rule" field in English.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Snort 2 log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailSweeper (long) Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "active" mode FTP transfers (previously, Sawmill supported only passive),
and made that the default, and added an option to choose which to use.  This should
solve an increasingly frequent problem where some firewalls or routers were blocking passive FTP
transfers (but allowing active).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IIS SMTP Common log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SmoothWall log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Postfix log format plug-in to handle Postfix 1.x logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SimpleDNS log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced the expiration feature to that any date/time filter set can be used
to expire data (not just "old than X").  This makes it possible to remove
sections of data that are corrupt, and re-add them.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a process_previously_seen_data option which forces all data in the log
source to be added on update, even if it has been seen before.  This can be used
together with the enhanced expiration feature to, for instance, remove a month
of corrupt data from a log-term database, and add it back in easily.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.2, shipped September 14, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.2:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the Start Over link was broken in generated HTML files.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where W3C log field names were not properly converted when
using a 6.4 configuration with 6.5.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking a hostname which had no page views, and then
switching to the session information, would cause an internal error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for POP tracking in MailerDaemon log format; added categorization
of sessions into POP, IMAP, and SMTP.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would try to create the logo.gif file in the installation
directory, resulting in a "Can't create file logo.gif" error in CGI mode if the CGI
directory was read-only.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the selected date range was entirely outside the
range of data in the database, the Overview (and possibly other views)
would display strange results, or show an Internal Error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause a crash while creating a configuration
for certain circumstances (including IIS logs).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes while processing log data, especially
if DNS lookup was turned on.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed the error message you get when you try to use a 6.4 license with 6.5;
previous versions would report an expired license with a very old year.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the -laid option did not work when running in web server
mode from the command line.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where compound filters selected by checking multiple boxes in the
Filter Editor did not work properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking a "sort column header" link in a multi-subview view
(like Single-page summary) did not work properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking the "sort column header" link in the session visitors
view could cause a crash.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where alphabetical sort was not available in the Session visitors view.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed Lucent Brick log format, which was extracting fields incorrectly.

<p>

</ul><p>
New features in 6.5.2:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Enhanced Declude Virus log format support to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the "Session visitors" view to include a "sessions" column showing
how many sessions each visitor contributed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailScanner Log Format (testfase) format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced IAS log format to support 5000-class error codes; added
ip:source-ip, ip:source-port, ip:destination-ip, and ip:destination-port
to the default fields list.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Intermapper Outages log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new "auto" time format (for log format creation), which automatically
handles most standard time formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Apache Custom log format to create database fields automatically
(like W3C) based on the log fields; this allows easy analysis of unknown
(custom) fields in Apache Custom log files.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Netscreen IDP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed ISA W3C log format, which was not naming fields correctly under the new
auto-W3C-setup feature.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Stonegate log format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.1, shipped August 23, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.1:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved/fixed DNS queries to ask for only PTR responses; this improves the number
of successful DNS queries.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there were multiple subviews in a view, and one of the
subviews did not have a matching single-subview view elsewhere, then the
items in that subview would not be linked.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where certain DNS queries (those with two answers, where the first wasn't
a PTR or A) would be seen as failed lookups, even if they weren't.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking "remove" in the Filter Editor would take you back
to the statistics without removing the Filter.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the Date header in the HTTP response would be garbled in 
certain cases (including certain Italian versions of Windows XP).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug on Tru64 UNIX where builds could terminate with a divide-by-zero error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "Day by day" checkbox did not properly add date/time 
cross-reference with IIS W3C log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where screen depth/size info was not tracked properly for IIS W3C logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where FTP log sources would fail, generating "errors" that were just
normal FTP server responses, when the server was using multi-line responses.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the shortcut was wrong for the new "remove_reloads_from_sessions" option,
resulting in documentation errors and other problems.

<p>

</ul><p>
New features in 6.5.1:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Updated GeoIP database to version 352.  This will cause a new GeoIP database
download (14 Meg) the first time a database is built with this new version.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Privoxy Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved country/region/city reporting so it omits "unknown" regions, which
are often associated with large metro regions.

<p>

<li>
[<font color=#ff5050>by request</font>]
Limited the number of items displayed in the "Edit Filter" page to 1000,
to keep it from being too slow.  If more than 1000 items are available, it will
display a button that shows them all.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a warning message to the login page when Sawmill detects the Safari web browser
is being used with an IP URL-- Safari contains a bug which prevents login information
from being saved properly in this case.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved DNS caching so it saves failed lookups in the memory cache, but 
doesn't save failed lookups in the disk cache--
this allows Sawmill to keep trying to lookup failed IPs once per build
without slowing things down by trying to do it on every line where they occur.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Vidius Combined Log Format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.5.0, shipped August 13, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.5.0:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed bug where clicking Back after editing a particular statistics filter,
and then clicking Apply Filters, would re-edit the filter.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where custom hierarchical fields were grouped incorrectly in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where Snort format did not work with certain syslogs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where GNATbox syslog was not always detected properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Webtrends Extended log format conflicted with Kiwi log format
over who got to track the "priority" field, resulting in an error when they both
tried to.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where country/region/city information would sometimes be garbled.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a problem with the date getting corrupt in the accept_carryover scenario.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where, with certain log formats (including iMail), when Sawmill
accepted the "orphan" log entries that had never been accepted before,
it would not run the Log Filters on them, resulting in log entries appearing
in the database which violated the Log Filters rules.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a parsing problem in Unix Sendmail log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where statistics filtering did not work properly in some cases if filters
were applied simultaneously to two or more fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where "week" links in the Calendar did not work properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there was no date/time database field, all log entries would
be rejected.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in Microsoft Exchange 2000 log format to accept only if message processing ends.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where senders were not reported in McAfee WebShield log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the Sort menu of the "Session visitors" view did not contain 
an option to sort by duration, and did contain a few options that did not make sense.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where CGI mode did not return pages on Windows.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where applying a session filter, and then removing non-session filters,
could generate an error about "unknown session ID".

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where in some cases, session information would not be tracked,
even when it was enabled in the configuration.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes while analyze some log data with the
GeoIP database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where items would disappear from the Task List after 10 minutes.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where filter values containing commas could cause errors.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the 95th percentile calculation could crash if there was
just one data point in the graph.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where attempting to sort the "Individual sessions" view chronologically
would generate an "internal error".

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "session visitors" table in the Single-page summary
was actually a time-spent-per-page table.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved and fixed Netscape format support so it sets up database and log fields intelligently
(and correctly!).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed detection of Generic CSV format.
Fixed detection of date and time fields in Generic CSV format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would incorrectly detect the IP address on MacOS X.
in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would skip some lines (those with + in the time)
in Lucent Brick log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause a crash while regenerating HTML files.

<p>

</ul><p>
New features in 6.5.0:
<ul>
<li>
[<font color=#ff5050>by request</font>]
NOTE: This list includes all changes since 6.4, including the changes from each 6.5 beta version.
Many of the bugs listed here may be intra-beta changes; e.g. they may have been introduced in one
beta version and fixed in a later one, rather than being bugs in the 6.4 branch.

<p>

<li>
[<font color=#ff5050>by request</font>]
Version 6.5 uses new licenses.  You will need to get a 6.5 format license to use this
(or use a 30-day trial license).
Contact ferrar@flowerfire.com to upgrade your license from 6.4 or earlier.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Squid Common format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iPlanet Error format to extract hostname, type, and other message information.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco IDS Netranger logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "Kiwi (mm-dd-yy dates, with type and protocol)" syslog format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for GFI Attachment & Content logs.
Added support for GFI Spam logs.
Extended support for IPTraffic log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IPTraffic LAN Statistics, and IP Traffic TCP/UDP Services log formats.
Extended support for IPTraffic log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for decimal seconds on mm/dd/yyyy hh:mm:ss.sss.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Win2KPerformance Monitor.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of Microsft Exchange Log to only count messages that are sent not just queued and to count multiple recipients.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Free Radius Detail Log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved default_log_date_year option so it uses the current year by default.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Lucent Brick log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new log filter type; convert_field_map, which maps specific field values to specific other field values;
i.e. you can remap 1->cat, 2->dog, 3->lemur, etc.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Bind 9 Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WebSEAL Authorization (XML) Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added explicit support for WebSTAR W3C Log Format (it was already supported indirectly through the
Generic W3C Web Server Log Format).

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of CiscoVPNConcentrator logs formats Unix Syslog.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IAS Alternate Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for mm/dd/yyyy variant of Interscan Proxy Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Interscan Proxy plug-ins to report virus activity.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Filemaker 3 Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added lock_database_when_in_use option.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for iPrism Log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetScreen Traffic Log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Squid log format (syslog required).

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for Cisco PIX/IOS logformats to collect information from audit lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Sawmill Task Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ISC DHCP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved EIMS SMTP format to track domains/emails hierarchically.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Cisco VPN Concentrator format to work with a wider variety of syslogs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ipfw log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Borderware log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Unix Syslog With Year format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended Kiwi dd/mm/yyyy format to handle Kiwi UTC dd/mm/yyyy format too.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of Communigate Pro logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added tracking of regions and cities, using the GeoIP database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Created a SidewiderSyslog and a SidewinderFirewall plugin pair to support a SidewinderFirewall format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed Postfix logformat to accept only on sent messages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of ImageMaker Microtech Media log more variations.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of Merak SMTP log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Lyris MailShield log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Windows Event (Tab Delimited) log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for XMail Spam log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for d/mmm/yyyy as dd/mmm/yyyy.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support if IPMon format to work as a syslog_required format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for a time format without leading zeroes.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added for WAP Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MicroTech Image Maker Media Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MicroTech Image Maker Error Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for eManager Spam Filter Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SonicWall Alternate  Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Kerio Network Monitor Log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Postfix log format plug-in to work with arbitrary syslogs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Lyris MailShield log format to handle many specific types of messages
(including spam blocking messages).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Mail Daemon Log Format to handle SMTP lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed the "Report It" bug reporter to use HTTP instead of SMTP to send
bug reports-- this works better when reporting bugs through some firewalls.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a field value contained a comma or semicolon, Filters would not
work properly for that value.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved hh:mm:ss time parser to accept non-colons between the numbers.
This allows Sawmill to handle a Kiwi syslog variant which uses periods.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for Netscreen log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved WUFTP log format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Miva Common Access log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new "Rename Configuration" option to the administrative menu, which
changes the name of an existing configuration.  Unlike the "Save As" option 
in the Configuration Menu, this deletes the original configuration (after
successfully writing the new one), and moves the database over from the old
configuration to the new.

<p>

<li>
[<font color=#ff5050>by request</font>]
added support for RadiusAccounting Log II.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved DNS lookup so it looks up *all* IP addresses, not just those in
the "host" field.  Previous version would only look up IP addresses for one
field-- the one whose type was "host" in the Log Fields tab.  Sawmill now
looks at all fields when DNS is on, and resolves all IP addresses.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of UnixSendmail logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for msg= bandwidth in WELF logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for Netscreen logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SyslogYYYYMMDDHHMMSS.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SmartMaxSMTP & SmartMaxPOP logformats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Kiwi (mmm/dd dates, hh:hh:ss.mmm UTC times) syslog format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetScreen Syslog Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Sophos Mail Monitor for SMTP Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added ignore_newlines_after_log_line_regexp option, which makes it possible
to create log format plug-ins that automatically combine certain consecutive lines
into single lines on-the-fly (useful if a KEY field on one line is needed to
parse the next line).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WinSyslog log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Youngzsoft CCProxy log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Microsoft Exchange Internet Mail Log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IIS SMTP Log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new "Session visitors" view which shows the visitor ids from the session
information, along with the number of page views and total time spent for each.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved export of "Single sessions" view so it exports the clickstream also.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Interscan Email Viruswall format to report "Forwarded" messages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Seconds since Jan 1 1970 timestamp syslog.
Extended support for Squid syslog required log format.
Extended support for Webtrends syslog required & syslog log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the layout of the Session Filters description (at the left of the Session
Filters editor).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved table headers so clicking a header name will re-sort the table
by the corresponding field.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of Squid Common Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for iPrism-rt, iPrismMonitor, Webtrends syslog, Webtrends syslog required log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Cisco PIX/IOS format to extract IDS error messages better.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved instructions for "top countries/regions/cities" view, and added
a section in the documentation on using the GeoIP database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Bind 9 Query log format to handle a slightly variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall1 Next Generation Full logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for another (brand currently unknown) syslog format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall1 Next Generation General logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for AladdinEsafeGateway logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for CiscoVPNConcentrator logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IIS log with mm/dd/yyyy dates.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved line parser so it strips off linefeed and newline characters at the end
of blank lines; this makes it possible to write parsing filters that identify
blank lines (for instance, to accept on blank lines).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iPlanet Error Log Format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended Support for EIMSSMTP logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved "Generate HTML Files" so it updates an existing HTML files set
incrementally.  Previous versions of Sawmill would generate all files every
time.  Now, Sawmill breaks the files down by date grouping (year/month/week/day),
and only regenerates a group if the number of hits/pageviews/visitors/bytes
have changed since the last generation.  This gives the same results as 
the previous version, but can be much faster if the changes are small (or if
there are no changes).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Helix Universal log format.

<p>

<li>
Fixed a bug where the column headers were links even when the page was an offline page.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "Windows Event Log (dumpevt.exe export)" format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "Timestamp (mm dd hh:mm:ss)" syslog format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced Cisco VPN Concentrator format to track "visitors" (unique users)
and "session" information (including individual user sessions and time connected).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for InterScanViruswall log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced W3C and CSV "generic" log format plug-in so it builds the list of database fields
from the detected log fields; this allows Sawmill to analyze W3C logs which have
log fields it has never seen before.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Websweeper log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended Kiwi/ISO syslog format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for SnortStandalone.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailSweeper log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WatchGuard log format (with arbitrary syslog).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved browser identifier to better identify IE, Netscape, Mozilla,
Chimera, Phoenix, Opera, Safari, and other major browsers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Separ URL Filter Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a command-line documentation blurb which is printed when Sawmill is run
with just --help, -help, -?, and a few other variants.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Unicomp Guinevere log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for LSMS Admin log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Kiwi Cattools Port Stat log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed web server mode binding behavior so it binds to 0.0.0.0 when no
server_hostname is specified.  Previous versions would bind to the first server
IP, which was sometimes difficult to determine; binding to 0.0.0.0 causes 
Sawmill to bind to *all* interfaces, so at least http://127.0.0.1:8987/
(the loopback interface) is guaranteed to work.  It still prints the first
IP of the server, as well as it can compute it, but if it gets it wrong,
you can use the actual IP and it will work, without having to reconfigure
Sawmill to tell it what that IP is.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Iplanet Messenger Server 5 log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for InterScanSecuritySuite log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WinProxy Alternate log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "Generic CSV" log format, which handles all types of CSV
files somewhat intelligently, even if it doesn't know the fields in advance
or what they represent.

<p>

<li>
[<font color=#ff5050>by request</font>]
Modified the gnatbox logformats so that they are syslog & syslog required format combinations.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for MicrosoftExchange2000.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SL4NTDDMMYYYY.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved SonicWall format to track page views and session information,
by building the URL from the proto, dstname, and arg fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended UnixSendmail log format to support rejects .

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Filter Bar display in the statistics to include a dark sidebar 
and other ways to bring attention to the fact that Filters are active.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Imail7  log format (syslog required).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for VeritasNetackup log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Intel NetStructure VPN Gateway log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Exim log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Bulletproof "sessions" log format to handle multiple download lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Yamaha RTX log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SpamAssassin log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Shorewall log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new "skip most recent file" feature which skips the log file
which has been most recently modified, when processing log data. 
This is useful when attempting to optimize log processing performance by skipping
previously-seen files by filename-- in IIS and other situations, we don't want to process (and later skip)
the most recent file because it's still being built.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Arcserve NT Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced the "allow empty log source" option to skip non-existent directories
and files in the log source (files which were there when the build began, but
disappeared during the build), without an error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Bulletproof/G6 FTP format with dd/mm/yyyy dates and 24-hour times.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Helix Univeral format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved/fixed support for Microsoft Media Server, to track all fields
automatically.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco Access Register log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved PIX/IOS format to handle a different line format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Watchguard Firebox Export header format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Bulletproof FTP log format to handle a variant where RETR lines
are replaced by "started download" lines.  Also improved bandwidth tracking
to handle KB notation.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Watchguard format to accept multiple spaces between fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended NetScreen Traffic Log format to handle either spaces or arrows (->) between some fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Watchguard SOHO log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved NetScreen Traffic Log to handle translated addresses and ports, when present.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for htdig log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Windows Event Log Format (ALTools export).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for PostWorks IMAP format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for PostWorks POP3 format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for PostWorks SMTP format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Merak POP/IMAP format to support USER lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for tcpdump log format with no command-line options.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added automatic transfer of "summary" filter value to a "session" visitor id filter
when it seems appropriate.  Sawmill now looks through all normal statistics filters
to see if there is any field which is a single filter item, where that item is
a known visitor id value.  If there is such a filter, and if there are no session
filters active, the session filters are set to show only sessions for that visitor id.
This provides a simple way to apply visitor id session filters through the view
corresponding to the visitor id field ("Top visitor domains/hosts", "Top users", or
whatever it happens to be for a particular log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an omit_database_fields option (intended for use in log format plug-ins)
which allows some log fields to be explicitly omitted from the database fields,
in formats where the log and database fields are automatically generated.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added visitor_name option, which makes it possible for the term "visitor"
to change for formats (like proxy servers) where the term "visitor" isn't
appropriate.  This option is used when creating log format plug-ins.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved IIS Web log format plug-in to use the new "generic W3C" features,
so its log and database fields are generated automatically.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Netscape Extended log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall1Webtrends logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Netwall logformat.

<p>

<li>
[<font color=#ff5050>by request</font>]
Tightened autodetect expression for Generic CSV.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved handing of FTP log source where hostname is entered as hostname/path.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new $notsupported option which removes the entry/exit page views
and other session-page-related views, for formats where there isn't really a
concept of a "page" in the session information.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Blue Coat IM log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added new "session logout regular expression" option, intended for use when
creating a log format plug-in for a format which has session information and
has a "logout" operation in the session information (unlike most web logs, which
have no logout operation, requiring the use of a timeout to determine session endings).
This allows for more accurate tracking of sessions for these types of logs,
including Cisco VPN logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved session information by eliminating duplicate sequential page views
in a single session, so reloading a page (or having the browser reload it)
will not result in multiple events in the session displays.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved progress page to show major and minor operations in progress, even
when "Details" is collapsed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved detection of W3C and other log formats with format headers,
so many more field names are converted to their "human readable" equivalents,
and database fields and views are set up automatically for those fields, even
if the fields are not explicitly mentioned in the log format plug-in.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added automatic download of the GeoIP database file when it is first needed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the convert_field_map Log Filter type so it can handle maps stored in text files.

<p>

<li>
[<font color=#ff5050>by request</font>]
Enhanced country/region/city detection so region is reported by its FIPS name, rather
than its FIPS code.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved WUFTP log format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Cisco VPN Concentrator log format to handle a variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firewall-1 NG formats with any fields (added support for
parsing FW1 NG headers, and building log and database fields lists from them).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetGear log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iPrism (with syslog) log format plug-in to fix several typos and
add support for session information, and support a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Microsoft ISA CSV format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Bulletproof FTP log format with d/m/yy dates and 24-hour times.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WinGate log format with dd/mm/yy dates.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for iScan log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for y/m/d date format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IIS (yy/mm/dd dates) log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Ingate Firewall log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new date format, "auto", which attempts to auto-detect the date.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iptables format to work with any syslog.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Radius ACT support to use the new auto-date and generic CSV features
(which lets it analyze a wider range of Radius logs, and adds reporting of only
those fields which are actually present in the logs).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Bind 9 Query logs with any syslog.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Foundry BigIron log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Riverstone Router log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved GeoIP download so if www.sawmill.net can't be resolved, it tries
the IP address, and if the HTTP connection fails, it fails quietly and just
doesn't include GeoIP information in the build.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an option to turn off GeoIP for a configuration, so the GeoIP database
doesn't have to be downloaded.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for a variant of Lucent Brick format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Snort Standalone log format with mm/dd/yy dates.
Improved Snort standalong formats to extract interface when available.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NTsyslog format.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.8, shipped June 15, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.8:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved session information so page views tracking "screen information"
does not appear in the session views (e.g. paths through the site).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the DIRECTORY_WORD language module variable was not being
translated properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "server response" field name was not translated properly 
for non-English translations, resulting in an error when the Broken Links
view was displayed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some Solaris versions of Sawmill would display "alarm clock"
errors on the command line.

<p>

<li>
[<font color=#ff5050>by request</font>]
Cleaned up statistics HTML slightly to make it more standard-compliant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where emailed views showed up as attachments in Outlook.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the language module was out of date, and new options had
been added since the previous version, Sawmill would
generate an error while creating a configuration.

<p>

<li>
[<font color=#ff5050>by request</font>]
Corrected Blue Coat Squid log format plug-in so it expects fields in the places
where Blue Coat puts them (some fields, including authenticated user, were not
being extracted correctly).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the GUI component of Sawmill (Sawmill6CL.exe on Windows)
did not honor a LogAnalysisInfoDirLoc file, if one was present.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the last session in the session information was not being
properly discarded if its length was over the limit.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where ipchains log format would fail to analyze data with a
"regular expression" error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where double-quotes in field values would cause "command line
log filters" to break.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there was more than one field of type "hostname" defined
in a custom log format string, Sawmill could get confused about which
field was the "real" host field, causing it to structure the host field
incorrectly (for instance, not showing only bottom-level items even if you
had asked for it when the configuration was created).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where HTTP log source URLs were not shown properly in the Log Source
tab of the Configuration Options.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where certain W3C log formats, including Blue Coat W3C with a
"timestamp" field, would not process properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes when viewing statistics if there was
no date/time field in the database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added charset customization to emails, using the CONTENT_TYPE_CHARSET language
module variable from the Stats module.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where only one 30-day trial was allowed before the "Try Sawmill For
30 Days" button disappeared-- now two trials are allowed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if visitor ids contained double-quotes, you could get an error
trying to apply a session filter.

<p>

</ul><p>
New features in 6.4.8:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Changed default view names so they wouldn't contain a slash (/).  Internet Explorer
insists on breaking lines at the slash, which caused some view buttons to span multiple
lines even when there was no need for it.  

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved dmmmyyyy format to allow a leading space when d is one digit.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new FILTERS_DESCRIPTION language module variable, which can be used
in the subject of emails to describe the filters.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.8a, shipped June 15, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.8a:
<ul>
</ul><p>
New features in 6.4.8a:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if you had only an "unlimited" license, you would not be 
able to use any configuration because Sawmill would report that you were
licensed for 0 configurations.         

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.7, shipped May 10, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.7:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some HTML tables were closed incorrectly, causing emailed
statistics to render incorrectly in some mail clients.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the installer would not install all components properly on Windows 2003
(and sometimes failed on Windows 2000).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where in CGI mode, the licensing page would generate a permission
error if the CGI directory was not writable by Sawmill.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where database expiration would sometimes fail, not modifying
the database.

<p>

</ul><p>
New features in 6.4.7:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Added a FAQ entry discussing log processing performance, and providing detailed tables
of performance numbers of Athlon and SPARC.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the configuration script's behavior (in the encrypted source distribution)
in the case that there is no C++ compiler installed on the system.

<p>

<li>
[<font color=#ff5050>by request</font>]
Change the dots in the IP address in a temporary URL to underbars; this works
around an issue where URLScan was being picky about URLs with too many dots.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where in CGI mode on Windows, result pages could be truncated.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.6, shipped April 26, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.6:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if you rebuild a database where there was no log data,
and the "allow_empty_log_source" option was true, it would result in a 
corrupt database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "database structure" page of the Create Configuration
interview was not set from the Default Configuration's Database Structure tab.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed support for %X directive in Blue Coat log format strings.

<p>

</ul><p>
New features in 6.4.6:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved LSMTP format to handle logging with job number, event id, and egroup
information.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved LSMTP format to handle a slightly variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved granularity of the reported bytes-per-second in the processing page,
to show hundredths of a unit.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Task List so it shows whether processes are complete
(and turns them grey id they are), and so it shows tasks during 
the "safe update copy" stage of database updates, and so it
shows "stalled" next to tasks which may be stalled or terminated.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new entry to the Database Info window showing which log format is in use.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.5, shipped April 21, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.5:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the configuration file contained a space, export would
fail on Mozilla.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where custom log format strings with single-quotes (') in them would
cause an error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "hostname" field was not being extracted properly
in W3C log formats in non-English installations, resulting in all visitor
counts being 1.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if you logged in to a password-protected config, and then
tried to go to another password-protected config without logging out,
you would get the Administrator login.  Now, it shows you the login for
the new config.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes while generating the "Paths through a page" view.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "visitor id" sort did not work properly in the 
Individual Session(s) view.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where updating a database that had never been build would not
properly build the database (as it should).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there were multiple date/time fields in Blue Coat Custom log format,
Sawmill would reject all log entries.

<p>

<li>
[<font color=#ff5050>by request</font>]
Removed "Export All" link from the clickstream table, since it was redundant--
The clickstream table always shows all rows, so Export Table is the same as
Export All.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug were exports of the Individual Sessions views could contain
HTML in the CSV table header, if the Start Time or End Time columns were
turned on.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where generating the "Top weekdays, avg" view with Filters applied
could generate an Internal Error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would not email a view that was "invisible offline".

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there was a double-quote in the "extra options" in the 
Scheduler, everything after the first double-quote would be stripped off.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if an error occurred during a database build, the database
would be left in a state where it looked built to Sawmill (so "View Stats" was 
available), but it wasn't actually, so viewing would generate an error about
a critical file being missing from the database.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where error messages in bug reports had unreplaced variables
like {QUOTEVAR:PARAM1}.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some of the values in the Sessions Overview would be
random if there were no page views in the dataset.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where %X support was not working for Blue Coat Custom Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause an Internal Error (or a bunch of them) if
a day_of_week_computed or hour_of_day_computed subview was used, and there
was not day_of_week or hour_of_day database field (which shouldn't be necessary).

<p>

</ul><p>
New features in 6.4.5:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Updated CiscoPIXIOS log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Options menu in multi-subview views (like Single-page summary) so
it affects all subviews.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added detection of Safari browser.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Individual Sessions export so that if there is only one session
(so the clickstream for that session is exported), the session list itself
is omitted, and only the clickstream table is exported.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new extra_session_columns option which adds addition columns to the
Individual Sessions clickstream table.  This option, together with specially-
formatted Log Filters which append additional field values to the "page" field,
make it possible to have any number of columns in the clickstream table, for
instance to show the category of the hits, or the country, or anything else.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.4, shipped April 05, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.4:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where authenticated user information was not being extracted
correctly from Squid logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause crashes when analyzing certain types of
logs (those parsed with the log_file_format_regular_expression option),
especially on Solaris.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if pie charts were turned on for the entry/exit page views,
Sawmill could crash while generating those views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where %Z fields in Blue Coat Custom logs were not parsed correctly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if you used a double-quote (") in the Matches field of the
log field editor, it would generate an error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where on some Solaris platforms, Sawmill would terminate 
periodically with an "alarm clock" message on the terminal.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where "--==LogAnalysis-Boundary-Alternative" would appear at the bottom of some emailed views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause a crash when duplicating a Scheduled Task.

<p>

</ul><p>
New features in 6.4.4:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Added support for a "localtime" token in W3C logs.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.3, shipped March 23, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.3:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "Sawmill" logo was tiny in the header of CGI mode administrative pages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a item in a table contained a plus (+), clicking it would
generate an error message.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where long operations could fail with "Can't rename file" errors.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "timestamp" fields in W3C logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there were multiple log sources, Sawmill could get confused
while updating the database, and could re-add some data that it had already added.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a field value contained a quote, command-line filtering would fail.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the Scheduler cached the names of configuration files,
so deleted configuration files would still be used by the Scheduler, 
and newly-created ones would not.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the last character on a white-space-separated log line
was a quote, Sawmill would include that quote in the value of the final field.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where tasks disappeared from the Tasks list after 10 minutes,
even if they were still running.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where exported data had semicolons as thousand dividers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could crash when displaying a view with no subviews.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking "remove" on a particular filter in the Filter Editor
would not remove that filter.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where the "Top days" view was not created by default.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug which could cause a crash on database rebuild, if there was 
a page log field but no page database field.

<p>

</ul><p>
New features in 6.4.3:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where 95th percent calculations were randomly incorrect
(and often showed 0).

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Sawmill's compatibility with the Safari beta browser.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where command-line CSV exports used "Meg", "Gig", etc. format
for bandwidth, instead of integer byte counts.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in the Cisco PIX/IOS plugin which could cause source IPs to
be extracted incorrectly in some cases, from Teardown Local lines.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the authentication command line didn't work on Unix--
it ignored lines past the first one.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a rare bug which could cause crashes when sending views by email, when viewing statistics,
when generating HTML files, and in other situations.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added detection of Wget as a web browser type (it was already detected as a spider).

<p>

<li>
[<font color=#ff5050>by request</font>]
Added information to bug reports showing which mode (CGI or Web Server)
Sawmill is running in.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the "Hints" Option so it controls whether the paragraphs in the 
Overview are displayed.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added CONTENT_LANGUAGE and CONTENT_TYPE_CHARSET variables to the language module,
which are used in the HTTP headers to set the charset and Content-language.
These are needed when generating statistics in some languages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved WU-FTP log format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added sub_view_header and sub_view_footer options that can be used to add custom
HTML above and below each subview.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.2, shipped February 15, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.2:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in the Configuration Editor which could generate invalid HTML,
causing problems with some browsers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where on some operating systems (including BSD/OS), database updates
would fail with the error message "Can't rename {config}__old/ to {config}".

<p>

<li>
[<font color=#ff5050>by request</font>]
Worked around a bug which could cause a "Can't rename ...Result-old to ...Result" error
on Windows, especially during long builds.

<p>

<li>
Fixed a bug where Sawmill could crash if there was no data after session filters were applied.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where the progress description was incorrect for Scan and Summarize
progress pages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the TempLogs folder (where Sawmill stores log data temporarily
when processing compressed logs from an FTP or HTTP server) was not cleaned out
properly when an error occurred.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there were custom numerical filters on a field,
Sawmill could crash in several situations, including while generating
HTML files.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where clicking "update" in the statistics, and then clicking something else,
would sometimes re-update, doubling the data in the database on the second update.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed memory management during CSV export, so it doesn't use arbitrary
amounts of memory.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if DNS lookup was enabled, 
and a series of IP addresses were very slow to resolve, Sawmill could
get in a loop where it stopped processing log data and consumed all available memory.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where %A was not processed properly in Blue Coat Custom Log Format,
causing some log entries to be ignore.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "paths through the site" view showed variable names like {VISITORS_THEN_EXITED}
instead of proper descriptions.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug in PIX/IOS parsing where bandwidth information was not tracked in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where month formatting was off in the Calender in some cases,
when the first day of the week was not Sunday.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if you created a View or Subview filter, and then rebuilt the database
with different parameters, the item numbers in the database would no longer match up with
the item numbers in filter you created, causing the filter to change, or even causing a
crash.  Filters are now always saved using symbols, rather than numbers, so that rebuilding
will not cause this problem.

<p>

</ul><p>
New features in 6.4.2:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Added support for 24-hour d/m/yyyy in Windows Event Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved statistics footer so it doesn't show the "Log Out" item if the configuration
does not require a password to log in.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved screen info tracking, so the /loganalysis_screen_info.gif file is
converted to (screen info) in the statistics.  This serves two purposes:
1) it omits it by default from the "top pages" view, and 2)
it causes it to be counted as a page view, so screen information is available
in configurations where only page views are tracked.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added tracking of the "server IP" field in IIS W3C log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the default order of the views for web server log analysis, to
"Top pages/directories" follows immediately after "Top pages" and
"Top search terms" follows "Top search phrases".

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved language module loading so if the specified language doesn't have files
of the appropriate language and version, Sawmill will scan the Languages folder looking for
ANY modules of the correct language, regardless of version, and will use them if
it finds them.  This makes it possible to install, say, a German module once,
and have that work forever even if you install newer English versions on top of it.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.1, shipped February 01, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.1:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill would crash on exit on MacOS X, in some cases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where CGI mode did not work at all on Windows.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where cookies were not being sent properly in some cases,
making it impossible to stay logged in.

<p>

<li>
Fixed a bug where very large form submissions could causes crashes.

<p>

</ul><p>
New features in 6.4.1:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Improved date/time range display so if you choose a date/time range,
and there are gaps in that range in the data, Sawmill displays the range
in the Filter bar, rather than all the little ranges you get after the gaps
are removed.

<p>

</ul>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
  <tr>
    <td colspan=2 bgcolor=#F7C983>
      <font color="#400000"><b>Version 6.4.0, shipped January 17, 2003
</b></font>
    </td>
  </tr>
</table>
<br>
Bugs fixed in version 6.4.0:
<ul>
<li>
[<font color=#ff5050>by request</font>]
Disabled numerical and alphabetical sorts for views where it didn't make sense.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where database updates would fail if 1) they were safe updates, and
2) the configuration name contained a space.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where safes updates would fail on Windows because it couldn't delete
the "writeLock" file.

<p>

<li>
Fixed a bug where the date/time range controls would appear in static pages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where some of the log format plug-ins were
corrupt, causing errors when autodetecting log formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug that could cause floating point exceptions during command
line database builds.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where Sawmill was not communicating correctly with some FTP servers,
including UNIX servers, resulting in hung FTP transfers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved behavior when no log format is selected; Sawmill redisplays 
the "choose log format" screen with a red prompt now,
rather than showing an error screen.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where exported session tables sometimes contained <br>.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added "total session page views" and "average page views per session" to the
Sessions Summary view.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved support for iMail log format, so it picks up more information,
and reports more accurately.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Squid log format to accept resolved hostnames as well as IPs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where updating a database using "safe update" could cause an error on Windows.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where file types were not detected properly if there were URL parameters.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the "page" field was not deep enough, session information
would be incorrect.  This was not usually a problem because the page field is usually
very deep (9 levels).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed incompatibility with OmniWeb which would result in empty pages when
forms were submitted.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "visitors" column did not use thousands separators
in its numbers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed the "Kill Server" button, which stopped working around 6.4b2.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Eurodate SYSLOG

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where CSV export would fail if the configuration name
contained a space.

<p>

<li>
Fixed a bug where if you used a Syslog and Generic log format plug-in,
and clicked the "visitors" checkbox, Sawmill would generate an error.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could crash while processing certain types of log 
formats, including iMail logs.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill could crash under certain circumstances, in particular
when you click "Make Data Available" when running Sawmill on Windows.  In theory,
this could cause crashes on any platform, under various circumstances, but it
was especially noticeable (and reproducible) on Windows.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the syslog format menu would not appear if there were
multiple possible formats, and the first one was a generic format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the bookmark URL would sometimes get mangled.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed WebServerAccessLog logging so it reports the IP address correctly
(as it did in 6.3.x).

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if there were two formats detected, and one of them was a "Generic" format,
Sawmill would (correctly) throw the Generic out of the matching list, but would still prompt
for a choice with a list containing just one item.  It now assumes you want the only one available.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill and IE were using different timeouts, causing
clicks to result in broken pages if the click was between 10 and 35 seconds
after the previous click.

<p>

<li>
[<font color=#ff5050>by request</font>]
Corrected date format for Centrinity First Class

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed problem with bandwidth support with syslog required log formats

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where pattern filters containing curly brackets did not look right
in the Filters bar and the Filter Editor.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if pattern filters contained curly brackets, they would not
bookmark or link correctly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if the database was auto-updated-on-view, and safe updates
were on (the default), Sawmill would fail to update, and would give an error
about not being able to copy some directory to itself.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where the "Don't autodetect log format" checkbox wasn't working
properly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where #Fields: lines in W3C logs with tabs after the colon were not handled
correctly.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where if a format matched a single non-syslog-required plugin
and also a syslog, Sawmill would use them both.  Now it uses only the 
non-syslog-required plug-in.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved error reporting in the case that a syslog-require plugin matched
but no syslog did.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where Sawmill did not handle format= lines correctly when
field names were surrounded by quotes.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where "show logo in docs header" wasn't working.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed bug where full URLs (like bookmark URLs) were computed incorrectly
in some cases in web server mode.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed hostname problem in NetCacheNetApp log format

<p>

<li>
Fixed a bug in session median computation where the wrong two data points
were being averaged in the even-number-of-sessions case.

<p>

<li>
[<font color=#ff5050>by request</font>]
Fixed a bug where editing preferences (and certain other operations)
could cause an internal error.

<p>

</ul><p>
New features in 6.4.0:
<ul>
<li>
[<font color=#ff5050>by request</font>]
NOTE: These are *all* features added since 6.3.16; i.e. they are all the new 6.4 features.
Many of these features have been listed in previous 6.4 "beta" and "stabilizing" releases.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of OpenwaveIntermail Server Logs to capture bandwidth information

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of Postfix Mail Server Logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed language module version numbers to match Sawmill version numbers.
For instance, where the language module version for Sawmill 6.3.10 used to be
v88, it is now v6.3.10.  This makes it easier to find the language module
for a particular version, and eliminates certain types of uncommon errors
where a pre-release version would not be able to find recent language module variables.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for War FTP logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added date range filtering-- the current shown date range now appears
at the top of the statistics, in the Filters bar, and you can choose the starting and ending
year/month/day to zoom in on a particular date range.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a "safe update" feature (on by default) which backs up the database before updating it.
This all but eliminates the possibility of an update corrupting the database on an error,
but it requires twice the disk space and some additional time for an update.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an "If A, then do B followed by C" filter type.

<p>

<li>
[<font color=#ff5050>by request</font>]
Optimized database updating in the case where the is no new data in the log source.
Previous versions would re-consolidate the database and re-write the index, even though there was no change.
This version skips that step, resulting in a much faster update in this situation.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Apache Combined with Server Name after Agent

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco IOS (Unix syslogd) as well as created language variable IOS_PARSING_FILTERS logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco CE Common logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed sort order to list directories first in the Browse... window.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco PIX SL4NT logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new "paths through a page" view, which shows all paths through
a particular page by showing the immediate predecessors and successors
in the clickstream.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for a LOGANALYSISINFODIR environment variable which, when set,
determines the location and name of the LogAnalysisInfo folder.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a number_thousands_separator option, which is a comma (,) by default,
and which is used to separate thousands in large numbers.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for SonicWallKiwi logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for Netegrity Siteminder logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for OpenwaveIntermail logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support in CiscoIOS log format to support AUDIT_TRAIL information

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SonicWallKiwi (yyyy-mm-dd) log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Firebox log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Sambar Server log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco IDS IOS log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Net-Acct log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for PostOfficeMailServer log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IISFTP log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new option to make graph bars non-clickable (by default, they are clickable).
This is useful in cases where there are so many bars that the overheard of making them
clickable bogs down the network, Sawmill server, and/or browser.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Sidewinder log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for InterscanEmailViruswall log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support of TinyPersonalFirewall to include a new variety of log

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for TomcatAlt log format, also Greg modified Sawmill so that it can collect and carryover

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for SquidGuard log

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an accept_collected_entry_regexp_carryover filter, which works like
accept_collected_entry_regexp except that it carries the collected values over
rather than resetting them.  So a single field value can be collected early on,
and later acceptances will all use that value, even if it does not appear again.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailerDaemon log

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Performance for Cisco PIX KIWI ISO

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco PIX KIWI ISO.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Whistle Blower Performance Metrics Log.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Netscape Directory Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added "numerical ascending" and "numerical descending" table sorts.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved W3C formats to support x-datestamp fields.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailMax SE POP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetCache NetApp log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MailMax SE SMTP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Atom Mesge log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for RealProxy log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ColdFusion Web Server log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ColdFusion Application log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Microsoft SQL Profiler log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for "m/d/yy h:mm" date/times.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for files (like CSV files) which can have line breaks
in the middle of a field, as long as the field is quoted.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WhistleBlower log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Windows Event log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for FedEx tracking log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for FastHosts log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved Postfix log format to handle some different types of log entries.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Network syslog format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Merak SMTP Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Merak IMAP/POP3 Log Format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved IPTables format to handle a slight variant.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for WebShield SMTP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Webtrends Extended log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Zyxel/Kiwi log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved session IDs so they contain the visitor id, for easier identification of the source of the session.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added a new type of session filter, which lets you zoom in on particular session using its ID.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Sessions view (now called "Individual Session(s)" so the session IDs
are clickable, and apply a session filter to show only that session.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Sessions view (now called "Individual Session(s)" to show a click-by-click
listing of the session, if there is only one session selected.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco VPN Concentrator (Comma-separated) log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved iMail log format to track local domains and "ldeliver" messages.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Hosting.com log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Cisco PIX (NT Syslog, With Hostname) log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for NetScreen log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for X-Stop log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Microsoft Proxy logs with m/d/yyyy dates.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for ProFTP log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for URLScan log format.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved error messages to eliminate the ugly traceback information; on a related topic,
you can now click Report It to email any error message to our support email address.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an "expand all" link to the "paths through the site" toolbar, 
to fully expand the entire paths tree.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for %{%Y-%m-%d}t and %{%T}t dates and times in Apache custom 
log format strings.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Quicktime Streaming Server logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for CacheFlowRealMedia & CacheFlowerWindowsMedia logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for LSMTPAccess logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Changed the way Sawmill handles GUI requests.  Previous versions would
handle requests by creating a separate thread within the main web server process;
Sawmill now creates a separate process for each new request.  This has some
major advantages.  Most importantly, it improves stability by making it impossible for
separate tasks to stomp on each others' memory.  This was a particularly big problem
on Solaris, where there has been a bug which causes crashes when using Sawmill in web server mode;
this bug is now fixed.  Other lesser bugs (including some unknown ones) may also be fixed by this change.
This change also makes other features possible, including the improved progress feature
and the web server administration improvements in this version.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved progress reporting in CGI mode and in single-threaded mode.  Sawmill now uses
the full progress page in all cases.  Previous versions used a similar version in CGI/single-threaded
mode with Netscape, but the feature used was not available in other browsers (like IE), so
it was forced to fall back on a "stacked lines" progress indicator, where the progress
information appeared as a series of tiny lines at the top of the page.  That is gone--
Sawmill uses reloading progress in all cases now.  It even uses reloading progress pages
when it's used from the command line, and the new Web Server Administration task list
lets you tap into a running command-line build to see full progress information.

<p>

<li>
[<font color=#ff5050>by request</font>]
Improved the Web Server Administration page so it shows a table of active tasks.
You can click a task to see progress information for that task.  This works even
if the tasks are CGI-based, Scheduled, or command-line-- any task will show up
in the list, and you can get full progress information for any task by clicking it.
The Web Server Administration was not available in CGI mode in earlier versions,
but now that it has a useful purpose, it has been enabled.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support CacheFlow RealMedia logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added command-line CSV export of the Sessions (summary) and Overview views.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support Watchguard WELF log format

<p>

<li>
[<font color=#ff5050>by request</font>]
Added expansion of path segment larger than a certain size,
automatically in offline pages and manually through an "expand all" link in dynamic stats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Extended support for Netegrity SiteMinder 4.X logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for Centrinity FirstClass logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added checkbox to view/subview filter editor so "incremental" filters
can be specified from the GUI.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for syslog-only log format plugins, and "generic" log format plugins.
Previous versions of Sawmill supported separately each combination of logging device and syslog server.
This could get very ugly, with Cisco PIX as the classic example-- 6.3b3 supported 15 versions
of Cisco PIX, all similar but using different Syslog servers.
Now, there is a "generic" Cisco PIX plugin, and a simple Kiwi Syslog plugin that is not
tied to any particular device, and Sawmill lets you choose both of them, and combined them
to support Cisco PIX logged through Kiwi (if only one "generic" and only one "syslog" format match,
it will be chosen for you automatically, comparably to how it's done now).
We will continue to add new "generic" plug-ins
and "syslog" plug-ins until all previous syslog-based plugins have been obsoleted, but
there will be a period of overlap.  When we're done, the total number of formats supported
by Sawmill will be dramatically higher than before, because every one of 20-some syslog formats
will work with every of the 20-some generic formats, for 400 new effective supported formats.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for IST logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for CiscoVoiceRouter (KIWI) logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MonitorWare logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added support for MonitorWareAlt logs

<p>

<li>
[<font color=#ff5050>by request</font>]
Added an "allow viewers to rebuild" option.  When this option is checked,
there will be rebuild/update links in the info bar of the configuration,
even if the user isn't administrator, and the user will be able to manually
update/rebuild the database by clicking the links.  No other administrative
operations will be available.

<p>

<li>
[<font color=#ff5050>by request</font>]
Added ignore_quotes option.  This option, which is generally of use only if you're 
creating a custom format, tells Sawmill to treat quotes ("