nmsg 1.3.3 release

The NMSG network message encapsulation library version 1.3.3 is released. This release offers a verbose logging option for Kafka, and adjusts the debug log levels for Kafka.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.3.tar.gz
SHA256 ee4c755825f2519b9fc0d183c7cb3f9e938c93f276217450f4fcb9bdb220870b

nmsg 1.3.2 release

The NMSG network message encapsulation library version 1.3.2 is released. This release addresses bugs in the DNSQR module support when defining networks for passive DNS capture and also a bug by which idle inputs blocked SIGINT, The main improvements include:

• Add configure --with-coverage feature and make targets "clean-coverage" and "report-coverage" for code coverage analysis.
• Add more documentation to nmsgtool manual.
• Remove unused dead code.
• Lots of tests added and improved.
• Add sample statsmod plugin (nmsg_stats1_sample) with parameters "out" to define output filename and "secs" to set the update frequency in seconds.
• Various packet capture parsing fixes for DNSQR message type.
• Fix bug where idle JSON and presentation inputs block SIGINT.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.2.tar.gz
SHA256 9e7f2ea95f5a703c84632061f20bcce2a459c89b24999f3470c8a54a8a9b5b8e

nmsg 1.3.1 release

The NMSG network message encapsulation library version 1.3.1 is released. This release relies on built-in librdkafka error handling.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.1.tar.gz
SHA256 563aff4c3d0a79823cf96371143eb0c9fa81cfc039b6f8ad23a48317707fbfda

nmsg 1.3.0 release

The NMSG network message encapsulation library version 1.3.0 is released with various fixes and improvements:

• Added external configuration for Kafka IO.
• Stop IO when output fails.
• Add support and API for statistics module.
• Remove prometheus integration.
• Add NMSG_STATSMOD_CONFIG environment variable.
• Bug fixes.
• Documentation fixes.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.0.tar.gz
SHA256 b3bf2e4e8c2182b98461b177e137f53546d4b936767d2e301d2892b5ac5b4930

nmsg 1.2.0 release

The NMSG network message encapsulation library version 1.2.0 is released with various fixes and improvements:

• Add support for Kafka i/o in JSON and binary forms.
• Add support for prometheus metrics export.
• Replace mutex protected counters and flags with stdatomic operations.
• New command line options: --kafkakey, --readkafka, --writekafka, --promport
• New functions: nmsg_input_open_kafka_endpoint(), nmsg_input_open_kafka_json(),
  nmsg_output_open_kafka_endpoint(), nmsg_output_open_kafka_json()

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.2.0.tar.gz
SHA256 16d43d985f58bc816dbb57e77d86d0a293c7fa72e270219e82b73c39b46a4aa2

nmsg 1.1.2 released

The NMSG network message encapsulation library version 1.1.2 is released with various fixes and improvements:

• Now allow nmsgtool --setgroup, --setoperator, and --setsource to work with --writepres and --writejson outputs.
• Permit nmsgtool --setgroup and --setoperator to use a numerical value.
• Unmatched group and operator aliases in presentation format now display as the numerical values instead of (null).
• Ensure mis-running nmsgtool results in failure exit code.
• Fix output buffering for JSON outputs.
• Fix magic length calculation in nmsg_json.
• Terminate strbuf data at initialization.

The code also introduces more tests and a RPM spec file.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.2.tar.gz
SHA256 0727bf083fc01f9944ba40bae2936b4f09b9e284f839ba735514ee1cd1a0e3d5

nmsg 1.1.1 released

The network encapsulation library, nmsg, version 1.1.1 is released. This release addresses a bug affecting container size:

• Update estimated container size to include space for sequencing info.

A source tarball is available: https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.1.tar.gz
SHA-256: dcc17af28cc40b0f4742626b86fa9126f80fcb3a296cf4c2acc6daf31ff1afbb

nmsg 1.1.0 released

The network encapsulation library, nmsg, version 1.1.0 is released. This release includes support for a new dnsobs message type, as well as numerous fixes and performance improvements. In detail:

• Multiple performance improvements to JSON formatting.

• Multiple performance and concurrency improvements in nmsg_io loop.

• Add new dnsobs message type for raw passive DNS observations.

• Format DNS messages as JSON in base:dnsqr, base:dnstap, and base:dnsobs.

• Format base:encode payload in human readable form in JSON output.

• Replace yajl with json-c for JSON parsing.

• nmsgtool: exit with nonzero status when interrupted by signal.

• Correct container size calculation when sequencing.

• Address doxygen deprecations.

A source tarball is available: https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.0.tar.gz
SHA-256: e5931b0cfa38e50f3f9cb7100ffdef454400c5901468c6014a6a602c9215a6d8

NMSG 1.0.1 released

NMSG, the network message encapsulation suite, version 1.0.1 was released. The changes are:

• nmsgtool: Fix use-after-free bug in debug printing of statistics at shutdown (seen on Debian 10).

• nmsg/base/dnsqr.c: Initialize len in dnsqr_hash to squash code-checker uninitialized warning.

• Fix assert conditions with side effects for builds with -DNDEBUG.

A source tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.0.1.tar.gz

SHA256: 6d9c950b2bd8c507b40ccd925a85b095738f9d036abe6b0d595c1f3eba31ef35

nmsg 1.0.0 released

The network encapsulation library, nmsg, version 1.0.0 is released. This release deprecates Crossroads I/O (libxs) support in favor of ZeroMQ (libzmq). Note command-line updates enabling ZeroMQ socket connections for nmsgtool, as described in its man page. In addition the treatment of unknown rrtypes was amended for nmsgtool JSON output. In detail:

• Replace libXS with ZeroMQ and associated calls.
• Developer API functions nmsg_input_open_xs(), nmsg_input_open_xs_endpoint(), nmsg_io_add_input_xs_channel(), nmsg_output_open_xs(), and nmsg_output_open_xs_endpoint() are deprecated and replaced with respectively: nmsg_input_open_zmq(), nmsg_input_open_zmq_endpoint(), nmsg_io_add_input_zmq_channel(), nmsg_output_open_zmq(), and nmsg_output_open_zmq_endpoint().
• Update nmsgtool command-line options: --readzchan replaces --readzsock, --writezsock replaces --writexsock, --readzsock replaces --readxsock.
• Change format of unknown rrtypes in nmsgtool JSON output to "TYPE" followed by number.

A source tarball is at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.0.0.tar.gz
SHA256: 4999bba3cc84e43c4353210e015c9f80efb2d15812b4169ae6db2c1dd29888d3