I've found bugs in MARS software. The first one is in "Reporting" system: for each query/report MARS creates internal XML file, and it's possible to create incorrect XML without end-tags. This buggie 'report' remains undeleted in the system with "System Error" red msg. This problem is nor resolved even after system reboot, not after software update (5.3.2->5.3.3->5.3.4). MARS creates report which is impossible to delete/edit. Reports duplicated from this one are also cause the same problems.
I can provide full bug-report if someone will help to force patch releasing for that (of cource official patch from CiscoSystems) as soon as possible. TAC is still unresolve it.
Enother one is in tcpdump. Terrible - they even didn't analyze libpcap code before put it in production. I need more time to exlpore it...may be later I write about it.
Is it possible that Cisco provide full shell (bash/csh) on their appliances? It's not a sicret that MARS (and not only MARS) works on Linux and shell will help to troubleshoot issues and fix some bugs manually. I think that if someone want to hack it hi will do it even without shell.