eCapture v0.8.5

What's Changed

• feat: parse http2 data in text mode by @yuweizzz in #580
• pkg: add http2 request/response unit test. by @cfc4n in #583
• feat: allow capture ipv6 packet by @yuweizzz in #586
• workflows: remove Qodana CI workflow. by @cfc4n in #589
• Constant parameter notice by @cfc4n in #591
• user: split loggers, which are divided into loggers and event collectors by @cfc4n in #592

Full Changelog: v0.8.4...v0.8.5

eCapture v0.8.4

What's Changed

• add possible linux kernel config path by @w568w in #561
• workflows: add Qodana by @cfc4n in #563
• fix create output.log failed. by @cfc4n in #566
• pkg: fix send on closed channel by @cfc4n in #567
• fix: DumpResponse error in HEAD request by @yuweizzz in #572
• fix: truncated body dump error by @yuweizzz in #573
• kern: support openssl 3.3.* by @cfc4n in #575
• kern: Adjust the timing of key acquisition to distinguish between TLS by @cfc4n in #576

New Contributors

• @w568w made their first contribution in #561
• @yuweizzz made their first contribution in #572

Full Changelog: v0.8.3...v0.8.4

eCapture v0.8.3

What's Changed

• user: fix #553, hashLen is not allowed to be more than 64 bytes by @cfc4n in #554
• cli: update docker usage by @cfc4n in #556
• kern: Support for the non-Android boringssl library has been added. by @cfc4n in #555
• user: format clientRandom string in gotls module by @cfc4n in #557
• cli: support logger level by @cfc4n in #558
• use kprobe/__sys_connect inseated uprobe/connect. by @cfc4n in #559

Full Changelog: v0.8.2...v0.8.3

eCapture v0.8.2

What's Changed

• cli: fix undefined: config.MysqldConfig. (fix #548) by @cfc4n in #547

Full Changelog: v0.8.1...v0.8.2

eCapture v0.8.1

What's Changed

• makefile: Optimized the generation mechanism of kernel header files by @cfc4n in #536
• add dockerfile by @sancppp in #537
• cli: Use a formatted logger rs/zerolog by @cfc4n in #539
• utils: supported openssl 1.1.1w, 3.0.13, 3.1.5, 3.2.1 by @cfc4n in #540
• BPF name should be appended after _core/_noncore by @darren in #545
• user: fixed #542, masterkey being written to pcapng multiple times. by @cfc4n in #546
• user: prepare for service-oriented architecture. by @cfc4n in #541

New Contributors

• @darren made their first contribution in #545

Full Changelog: v0.8.0...v0.8.1

eCapture v0.8.0

🚀 Breaking Changes

• for User: No need to distinguish between CO-RE and non-CO-RE versions, automatically identified by eCapture.
  • 无需区分CO-RE和non-CO-RE版本，由eCapture自动识别。
• for Developer: Supports cross-compilation for both amd64 and arm64 CPU architectures, building CO-RE and non-CO-RE versions respectively.
  • 支持在amd64\arm64两个CPU架构下的交叉编译，分别构建CO-RE和non-CO-RE版本

What's Changed

• chore: rename ecapture module name. by @cfc4n in #530
• Fix keylog mode not working correctly on certain OpenSSL versions by @AmazingPP in #534
• feat: support CORE and non-CORE mode in one by @cfc4n in #532
• workflows: change steps.get_tags.outputs.VERSION to github.ref_name by @sancppp in #535

New Contributors

• @AmazingPP made their first contribution in #534

Full Changelog: v0.7.7...v0.8.0

eCapture v0.7.7

What's Changed

• [Fix] get textStart from pclnTable by @wlingze in #516
• fix: amd64, offset read error issue for PIE executable. PR #516 by @cfc4n in #517
• makefile: used CC=$(CROSS_COMPILE)gcc for CGO compile. by @cfc4n in #519
• user: return error when detect openssl version failed. by @cfc4n in #521
• user : fixed the invalid address reference of the SSL_in_before symbol OpenSSL 1.0.2k. by @cfc4n in #520
• feat: support cross-compilation for workflows. by @cfc4n in #523
• readme: improve English README.md translation and add TOCs by @zhoukuncheng in #525
• build(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 by @dependabot in #528

New Contributors

• @wlingze made their first contribution in #516
• @zhoukuncheng made their first contribution in #525

Full Changelog: v0.7.6...v0.7.7

eCapture v0.7.6

What's Changed

• fix #500 to avoid potential hang and event loss by @ruitianzhong in #501
• fix issue#504 by @sancppp in #506
• tentative fix to address bash problem #490 by @ruitianzhong in #510
• Fix cant found RET offset in gotls mode. fix #502. by @cfc4n in #512

Full Changelog: v0.7.5...v0.7.6

eCapture v0.7.5

What's Changed

• Improve makefile by @cfc4n in #488
• Fix: init GoTLSProbe.tcPacketsChan #492 by @ruitianzhong in #493
• fix: avoid printing confusing message when input contains special character by @ruitianzhong in #495
• correctly update ContentLength for uncompressed response body by @ruitianzhong in #498
• add -race flags for go test and fix data race warning by @ruitianzhong in #499
• openssl: encode the value of fd (ssl->wbio->num) to gen uuid, rather than an unexpected random number by @wuyexkx in #494

New Contributors

• @ruitianzhong made their first contribution in #493
• @wuyexkx made their first contribution in #494

Full Changelog: v0.7.4...v0.7.5

eCapture v0.7.4

🚀 Breaking Changes

eCapture supports Pcap Filter Syntax, and you can use the pcap filter expression to filter network packets like tcpdump.

In the tls\gotls module, when the running mode is pcap, the pcap filter expression is supported, which can be set in the last parameter of the command line, for example:

ecapture tls -m pcap -i wlan0 -w save.pcapng host 192.168.1.1 and tcp port 443

What's Changed

• Update probe_bash.go by @sancppp in #479
• docs: Optimized the error message in the gotls module.(fix: #482) by @cfc4n in #484
• feat: Support pcap-filter expression for pcap mode by @Asphaltt in #478
• chore: Pcap filter tidy,support ubuntu arm64 to make libpcap by @cfc4n in #487

New Contributors

• @sancppp made their first contribution in #479
• @Asphaltt made their first contribution in #478

Full Changelog: v0.7.3...v0.7.4