v5.3.0

What's Changed

• TLS - Fix empty string pop_back() if all elliptic curve point formats are grease values by @Zadamsa in #296
• TLS - Update pen number and id for JA4 IFPFIX element by @Zadamsa in #297
• Ipfix-elements: update RTSP plugin ipfix elements attributes by @SiskaPavel in #298
• CI: add PR workflow to check IPFIX element consistency with libfds by @SiskaPavel in #295
• NfbPlugin: use NUMA preferred policy instead of strict binding by @SiskaPavel in #300
• Bump version to 5.3.0 by @SiskaPavel in #299

Full Changelog: v5.2.0...v5.3.0

v5.2.0

What's Changed

• spec: add support for building on EPEL 10 by @SiskaPavel in #289
• chore: add GitHub pull request template by @SiskaPavel in #290
• chore: move PR template to default GitHub location by @SiskaPavel in #291
• ipfixprobe.cpp: handle SIGABRT to support libunwind-based diagnostics by @SiskaPavel in #292
• Bump version to 5.2.0 by @SiskaPavel in #293

Full Changelog: v5.1.0...v5.2.0

v5.1.0

What's Changed

• Removing documentation and updating project logo by @hynekkar in #285
• Updating README by @hynekkar in #286
• NfbPlugin: add support for reading from multiple NFB devices by @SiskaPavel in #287
• Bump version to 5.1.0 by @SiskaPavel in #288

Full Changelog: v5.0.0...v5.1.0

v5.0.0

What's Changed

• TLS refactor by @Zadamsa in #227
• V5.0.0 - cmake & plugins by @SiskaPavel in #258
• Quic: add missing include to quic_parser.cpp by @SiskaPavel in #261
• Update RPM spec files by @SiskaPavel in #262
• Github-actions: add copr-upload workflow by @SiskaPavel in #260
• Dockerfile: Update Dockerfile by @SiskaPavel in #264
• ipfixprobe-nemea: Add dependency on libtrap library by @SiskaPavel in #263
• FlowHash: Rename flow_hash process plugin to flowhash by @SiskaPavel in #267
• Add usage to all plugins by @SiskaPavel in #269
• Fix tls plugin error by @Zadamsa in #270
• RPM spec: add conditional build of ipfixprobe-nemea-process-experimental package by @SiskaPavel in #274
• Fix Dockerfile by @janluxemburk in #273
• Dpdk: Add DPDK mbuf alignment to max_packet_size calculation by @SiskaPavel in #275
• ipfixprobed: Introduce YAML-based config format by @SiskaPavel in #271
• Fix typo in build parameter by @FestplattenSchnitzel in #277
• Clang-format: fix clang-format errors by @SiskaPavel in #278
• ipfixprobed: fix config2args by @SiskaPavel in #279
• Github-actions: speed up builds in GitHub Actions by using parallel make by @SiskaPavel in #280
• Telemetry: add per-VLAN parser statistics and size histogram support by @SiskaPavel in #283

Full Changelog: v4.16.0...v5.0.0

v4.16.0

Changes from v4.15.0

Bugfixes

• Parser - fix packet parsing issue when --with-pcap is enabled
• DPDK - fix multiple dpdk telemetry files registration

Improvements

• DPDK - set RX queue size as (mempool size / 2)
• DPDK - increase default mempool size from 4096 to 8192

Full Changelog: v4.15.0...v4.16.0

v4.15.0

Changes from v4.11.1

Improvements

• Fragmentation cache added.
• process/wg: Removed check for transport data length divisibility by 16.
• Enhanced DPDK memory pool creation using device socket ID.
• QUIC: Expanded flow detail extraction.
• Updated default packet queue burst size to 64 (consistent with input defaults).
• Workers CPU affinity improvements.
• Prefetch optimizations for better performance.
• IPv6: Improved header parsing and extension handling.
• DPDK: Timestamp read from hardware metadata when available.

New Features

Input Plugins:

• NDP: Support for custom packet header timestamps.
• DPDK: Added MTU size configuration and telemetry support.

Output Plugins:

• IPFIX: Introduced LZ4 compression support.
• IPFIX: Added non-blocking TCP socket option.

Telemetry:

• Introduced AppFS telemetry.
• Updated telemetry documentation in README.

Plugins:

• MQTT: Support for v3.1.1 protocol.
• TLS Extensions: Enhanced features for detailed analysis.

Bugfixes

• Fixed discrepancies in IPT PHIST features.
• Resolved issues with TCP options parsing.
• Corrected WireGuard byte order in IPFIX output.
• Addressed inconsistencies in IPv6 header parsing.
• Fixed RSS configuration in DPDK.
• Resolved DPDK queue size issues and packet parsing checks.

Documentation

• Introduced Jekyll-based documentation framework.
• Updated README with new telemetry features and examples.
• Minor fixes and revisions to improve clarity and navigation on the webpage.

Miscellaneous

• Added Docker container for processing PCAPs to CSVs.

Full Changelog: v4.11.1...v4.15.0

v4.11.1

Change from v4.11.0:

• fixed build on OpenWrt

Brief list of changes from v4.9.0:

Improvements:

• IPFIX: propose new variable (cmd line option) to set ipfix template refresh rate
• DPDK: improvement of config and init script
• Flow cache: improve hashing to incorporate VLAN info
• statistics: improved monitoring capability, added additional statistics

New plugins:

• GRE: add new plugin to export GRE tunnel information
• VLAN: add new plugin to export VLAN information
• NetTiSA: Add new NetTisa process plugin, see https://arxiv.org/abs/2310.05530
• OVPN: Improvements (Added RTP header validation function, Improve detection)
• HTTP: Add parsing HTTP response headers server and set-cookie names
• ICMP: Add new ICMP process plugin to export ICMP information
• Flow Hash: add new plugin to export Flow Hash field

BUGFIXES:

• templates and byte encoding (HTTP)
• QUIC: bugfixes and checks

v4.9.0

Changes in v4.9.0

Brief list of changes from v4.7.1:

• flow cache: add VLAN ID to the flow key
• ovpn: enhanced algorithm to minimize false positives
• SSADetector: add new plugin to detect possible SYN-SYNACK-ACK sequence to detect VPN within exiting connection
• Support parsing of IPv6 mobility header
• pstats: Improve Input & Output pugin stats
• pstats: bugfix of recognition of zero length packets
• optimization: do not export some additional info for short flows
• tls: fix buffer overflow error (causes crashing)
• tls: Support TLS v1.3
• tls: Support of extracting TLS version from handshake extension
• rpm hotfix: disable automatic setting of hardening flags
• DPDK: bugfix of HW timestamps
• DPDK: compliance, different constant names
• DPDK: bugfixes
• DPDK: changed RSS setting to use IP only
• DPDK: allow running as a secondary DPDK process, reading from mring
• DPDK: allow reading from multiple port of the network interface
• init/service: improved config & service to set lcores

v4.7.1

Changes in v4.7.1

• http: Removed trailing '\r' from HTTP exported fields
• tcp: fixed seq&ack tracking
• dpdk: reworked plugin
• slightly improved doc/help

v4.6.1

Compared to v4.6.0, this version contains only build-related fixes for OpenWrt compilation.