Skip to content

Commit

Permalink
Bump version to v0.3.0
Browse files Browse the repository at this point in the history
  • Loading branch information
oshaked1 committed Jul 7, 2024
1 parent f04507e commit cb228f1
Show file tree
Hide file tree
Showing 2 changed files with 88 additions and 16 deletions.
2 changes: 1 addition & 1 deletion .env
Original file line number Diff line number Diff line change
@@ -1 +1 @@
TRACEESHARK_VERSION=0.2.3
TRACEESHARK_VERSION=0.3.0
102 changes: 87 additions & 15 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,14 +1,86 @@
# Changelog

## v0.3.0

**Added**:

- Column format preferences

- Decide whether to display host PID, namespace PID or both

- Decide whether to display container ID or name

- Decide whether to append container image

- Source and destination IP columns in Tracee profile

- Signature arguments in info column

- Event enrichments

- `security_socket_connect`

- `security_sockert_bind`

- `dynamic_code_loading`

- `fileless_execution`

- `stdio_over_socket`

- `magic_write` - add decoded magic and some recognized file types

- `security_file_open`

- Live capture

- Default capture preset
- Logs and errors can be accessed from toolbar

- Statistics

- Event counts
- Process tree
- Dissection of the new `net_packet_raw` event, which hands off the packet dissection to Wireshark
- Traceeshark logo

**Changed**:

- Reorganized dissection tree structure

- Revised "Important" filter button

- Revised "Network" filter button

- Event argument filters are now namespaced according to event name

- Live capture

- Tracee options and presets are not mututally exclusive anymore

- Simplified preset system

- Pin default Tracee docker image to current stable release

- README.md updates

**Fixed**:

- Live capture bugfixes

- Tracee event dissector bugfixes

- Makefile, build script and install script fixes

## v0.2.3

Added:
**Added**:

- Autoinstall script

- Release for Wireshark version 4.2.2 on Linux (Ubuntu 24.04 Wireshark package version)

Fixed:
**Fixed**:

- Macos build and installation fixes

Expand All @@ -18,7 +90,7 @@ Fixed:

## v0.2.2

Added:
**Added**:

- Live capture

Expand All @@ -34,38 +106,38 @@ Added:

- Added GitHub workflow for automatic builds across all platforms

Fixed:
**Fixed**:

- Live capture bugfixes

## v0.2.1

Changed:
**Changed**:

- Exclude SSH tunnel PID in remote capture
- Traceeshark version is specified once for building in the `.env` file

Fixed:
**Fixed**:

- extcap bugfixes

- Install scripts now determine the correct installation folders based on the Wireshark version

## v0.2.0

Added:
**Added**:

- Remote live capturing

- Local live capturing on Windows and Mac using docker desktop's VM

Fixed:
**Fixed**:

- Makefile and install script bug on Mac

## v0.1.2

Added:
**Added**:

- Ability to specify logfile for live capture

Expand All @@ -83,11 +155,11 @@ Added:

- []trace.DnsResponseData

Changed:
**Changed**:

- Refactored handling of complex argument types

Fixed:
**Fixed**:

- More robust identification of signatures instead of relying on "sig_" prefix

Expand All @@ -97,25 +169,25 @@ Fixed:

## v0.1.1

Added:
**Added**:

- Build and distribution for Windows

- Build instructions in README.md

Changed:
**Changed**:

- Tracee network capture dissector is now a postdissector instead of overriding the NULL/Loopback dissector

Fixed:
**Fixed**:

- Distribution and Wireshark compatibility fixes

## v0.1.0

Initial release.

Features:
**Features**:

- Ability to load Tracee JSON output files into Wireshark

Expand Down

0 comments on commit cb228f1

Please sign in to comment.