Fixed Issues

Fixed issues in Splunk App for Stream 6.0.2:

• Installing Splunk App for Stream through the Splunk Web (Apps > Find more apps) menu resulted in a corrupted download/installation. (STREAM-1205)

• streamfwd sometimes crashed and generated bad_alloc errors when processing LDAP traffic on Linux. (STREAM-1263)

• Using command line options (repeat mode) to configure streamfwd binary generated segmentation faults for some pcap files. (STREAM-1179)

• Enabling src_headers and/or dest_headers for an http stream required restart of the streamfwd process. (STREAM-1218)

• On Linux, the src_ip did not correctly populate from the X-Forwarded-For header when alternate capitalization was used (such as x-forwarded-for). (STREAM-1219)

• Unexplained AdminManager ERROR messages appeared in splunkd.log during startup. (STREAM-1127)

• streamfwd did not return POSIX compliant exit codes. (STREAM-1232)

• Flow metrics were calculated incorrectly for certain application-level event types. (STREAM-1112)

• SMTP stream event reported bytes_in incorrectly. (STREAM-1237)

• For SIP protocol call_duration and session_duration were reported incorrectly in seconds, instead of milliseconds. (STREAM-1166)

• The interval value of an existing aggregation stream could not be saved without first making another change on the page to "trigger" the save button. (STREAM-1167)

• The Network Metrics Total Packets graph did not display the number of packets correctly. (STREAM-1180)