# Nagios Network Analyzer 2026R2.1

Released November 12, 2026. Canonical HTML: https://www.nagios.com/changelog/nagios-network-analyzer/nagios-network-analyzer-2026r2-1/

New “First Seen” alerting when a device joins your network, as part of the new super robust Device Inventory feature. This update also adds a new Audit Log, Ubuntu 26 support, and redesigns the Source Queries and Traceroute views for enhanced insight into your network data. [[Video Overview]](https://youtu.be/Vk7Iq3y-aZg)

## Security

- Fixed a SQL injection related to sources. Vulnerability discovered by Xander Mackenzie | thetrueartist | @thetrueartist.co.uk working with TrendAI Zero Day Initiative [GL:NAN#369] – SG
- Improved file permission handling [GL:NAN#317] – SG

## Added

- Added an Audit Log to track administrative and configuration changes [GL:NAN#316, 338] – SG
- Added ARP Discovery daemon and Alerting options on changes in Device Inventory [GL:NAN#302, 350, 351] – CJD
- Added check frequency to all alerting types [GL:NAN#330] – CJD
- Added Device Inventory [GL:NAN#285, 301] – CJD
- Added roles for alerting [GL:NAN#343] – CJD
- Added support for Ubuntu 26 [GL:NAN#228] – SG
- Added the ability to display Device Inventory alias or DNS name in place of IP addresses for Flow Data, Nmap, Suricata, and Wireshark [GL:NAN#319] – SG
- Added the ability to display flow data filtered by saved queries in Top Talker dashlets [GL:NAN#313] – SG
- Added the ability to display src and dst VLAN, interface information, and router information when querying sources [GL:NAN#131] – SG
- Added the ability to search Suricata, run Nmap scans, or run Whois lookups from Wireshark data tables [GL:NAN#303] – CJD
- Added the ability to set a default sampling rate on Sources and view sampling rates in the Sources table [GL:NAN#356] – SG
- Added validation for adding and editing Suricata rulesets [GL:NAN#153] – SG

## Fixed

- Fixed an issue where a failure to update the Laravel Worker count in Global Settings prevented the remaining settings on the page from saving [GL:NAN#353] – SG
- Fixed an issue where bandwidth data was being averaged instead of totaled when chart intervals were longer than 5 minutes [GL:NAN#355] – SG
- Fixed an issue where Laravel queue workers and Reverb could fail to start after a PHP package update due to a stale copied PHP binary [GL:NAN!672] – SG
- Fixed an issue where LDAP certificate uploads failing after a package update reset the ownership of the certificate directory [GL:NAN!643] – SG
- Fixed an issue where logrotate wasn’t always installed on every distribution of Linux [GL:NAN#337] – SG
- Fixed an issue where renaming a Traffic Profile would break lookups for its nfcapd files [GL:NAN#322] – SG
- Fixed an issue where Suricata would display the wrong timestamp for imported PCAP files [GL:NAN#312] – CJD
- Fixed an issue where the configured data lifetime on a Source wasn’t always applied [GL:NAN#348] – SG
- Fixed an issue where the Data Table View button would shift when toggling column visibility [GL:NAN#320] – SG
- Fixed an issue where the Overview tab on scheduled Nmap scans showed a loading skeleton instead of “No scans found” when there was no scan history [GL:NAN#325] – SG
- Fixed an issue where Traceroute Latency Spread displayed a negative value for scans with a single hop [GL:NAN#327] – SG
- Fixed an issue where UTC being default on the install page could cause an error [GL:NAN!650] – CJD
- Improved performance of viewing Wireshark Ring Buffer data [GL:NAN#300] – SG

## Updated

- Updated check alert emails to identify the sending server and improve readability [GL:NAN#324] – SG
- Updated front-end npm dependencies to address known vulnerabilities [GL:NAN#326] – SG
- Updated Summary chart tooltips to show the time range each data point covers [GL:NAN#357] – SG
- Updated Suricata rulesets dialog to display the full URL in tooltip when the URL is longer than the input [GL:NAN#335] – SG
- Updated the Data Table dashlet to query only the selected Group By fields instead of all aggregate fields [GL:NAN#321] – SG
- Updated the Queries page on sources with a redesigned flow diagram and improved layout [GL:NAN#331] – SG
- Updated the Traceroute Scheduled Scans chart for better readability [GL:NAN!649] – CJD
- Upgraded nfdump to version 1.7.10 [GL:NAN#329] – SG

Generated 2026-11-13T18:15:09+00:00