Nagios Network Analyzer 2026R2.1

  • November 12, 2026

Release Summary

New “First Seen” alerting when a device joins your network, as part of the new super robust Device Inventory feature. This update also adds a new Audit Log, Ubuntu 26 support, and redesigns the Source Queries and Traceroute views for enhanced insight into your network data. [Video Overview]

Security

  • Fixed a SQL injection related to sources. Vulnerability discovered by Xander Mackenzie | thetrueartist | @thetrueartist.co.uk working with TrendAI Zero Day Initiative [GL:NAN#369] – SG
  • Improved file permission handling [GL:NAN#317] – SG

Added

  • Added an Audit Log to track administrative and configuration changes [GL:NAN#316, 338] – SG
  • Added ARP Discovery daemon and Alerting options on changes in Device Inventory [GL:NAN#302, 350, 351] – CJD
  • Added check frequency to all alerting types [GL:NAN#330] – CJD
  • Added Device Inventory [GL:NAN#285, 301] – CJD
  • Added roles for alerting [GL:NAN#343] – CJD
  • Added support for Ubuntu 26 [GL:NAN#228] – SG
  • Added the ability to display Device Inventory alias or DNS name in place of IP addresses for Flow Data, Nmap, Suricata, and Wireshark [GL:NAN#319] – SG
  • Added the ability to display flow data filtered by saved queries in Top Talker dashlets [GL:NAN#313] – SG
  • Added the ability to display src and dst VLAN, interface information, and router information when querying sources [GL:NAN#131] – SG
  • Added the ability to search Suricata, run Nmap scans, or run Whois lookups from Wireshark data tables [GL:NAN#303] – CJD
  • Added the ability to set a default sampling rate on Sources and view sampling rates in the Sources table [GL:NAN#356] – SG
  • Added validation for adding and editing Suricata rulesets [GL:NAN#153] – SG

Fixed

  • Fixed an issue where a failure to update the Laravel Worker count in Global Settings prevented the remaining settings on the page from saving [GL:NAN#353] – SG
  • Fixed an issue where bandwidth data was being averaged instead of totaled when chart intervals were longer than 5 minutes [GL:NAN#355] – SG
  • Fixed an issue where Laravel queue workers and Reverb could fail to start after a PHP package update due to a stale copied PHP binary [GL:NAN!672] – SG
  • Fixed an issue where LDAP certificate uploads failing after a package update reset the ownership of the certificate directory [GL:NAN!643] – SG
  • Fixed an issue where logrotate wasn’t always installed on every distribution of Linux [GL:NAN#337] – SG
  • Fixed an issue where renaming a Traffic Profile would break lookups for its nfcapd files [GL:NAN#322] – SG
  • Fixed an issue where Suricata would display the wrong timestamp for imported PCAP files [GL:NAN#312] – CJD
  • Fixed an issue where the configured data lifetime on a Source wasn’t always applied [GL:NAN#348] – SG
  • Fixed an issue where the Data Table View button would shift when toggling column visibility [GL:NAN#320] – SG
  • Fixed an issue where the Overview tab on scheduled Nmap scans showed a loading skeleton instead of “No scans found” when there was no scan history [GL:NAN#325] – SG
  • Fixed an issue where Traceroute Latency Spread displayed a negative value for scans with a single hop [GL:NAN#327] – SG
  • Fixed an issue where UTC being default on the install page could cause an error [GL:NAN!650] – CJD
  • Improved performance of viewing Wireshark Ring Buffer data [GL:NAN#300] – SG

Updated

  • Updated check alert emails to identify the sending server and improve readability [GL:NAN#324] – SG
  • Updated front-end npm dependencies to address known vulnerabilities [GL:NAN#326] – SG
  • Updated Summary chart tooltips to show the time range each data point covers [GL:NAN#357] – SG
  • Updated Suricata rulesets dialog to display the full URL in tooltip when the URL is longer than the input [GL:NAN#335] – SG
  • Updated the Data Table dashlet to query only the selected Group By fields instead of all aggregate fields [GL:NAN#321] – SG
  • Updated the Queries page on sources with a redesigned flow diagram and improved layout [GL:NAN#331] – SG
  • Updated the Traceroute Scheduled Scans chart for better readability [GL:NAN!649] – CJD
  • Upgraded nfdump to version 1.7.10 [GL:NAN#329] – SG