Skip to content

Releases: netboxlabs/pktvisor

3.1.0

12 Mar 00:29
5707c68

Choose a tag to compare

Summary

  • Major refactor of code base and build system to modularize input streams, the metrics subsystem, and stream handlers. Modules may be dynamically or statically linked, and are loadable at runtime. The first modules are the "pcap" input module and the "net" and "dns" stream handlers, which are currently statically linked into pktvisord binary.
  • Introduce --admin-api with full control plane functionality to prepare for creating observability policies. The admin API is not yet stable and should be expected to change.
  • Update to the latest version of several dependencies such as Apache Data Sketches and PcapPlusPlus
  • Begin using Conan package manager for C++ dependencies, and Github actions for CI
  • Switch the open source license from Apache to Mozilla Public License

3.0.x Compatibility Notes

  • pcap file analysis has been split out of pktvisord and into its own binary pktvisor-pcap
  • The command line UI has been renamed from pktvisor to pktvisor-cli. The old name is currently still accepted in the docker container entry.
  • The /api/v1/metrics/rates endpoint is being deprecated; it still works but the rates are always 0. Instead, the "live" bucket (bucket number 0) includes rate information under the "live" keys. pktvisor-cli has been updated accordingly, and this change does not affect typical central collection scenarios which only collect bucket number 1.

3.0.7

08 Sep 17:18
900df5f

Choose a tag to compare

  • reduce CPU usage by only fully parsing DNS on deep sample
  • the stats web server IP to bind to is now configurable via command line

3.0.6

04 May 21:52
18e315b

Choose a tag to compare

update to datasketch upstream, fixing mem leak and using new fmix solution to ip hash

3.0.5

24 Apr 21:49
0f2c6da

Choose a tag to compare

  • sync sketch lib from upstream, change IP hash algo
  • fix max-deep-sample
  • add caching to bucket merge endpoint, reduce UI refresh to 1s, remove concurrency limit
  • fix tracking of non TCP/UDP packets

3.0.4

24 Mar 21:51

Choose a tag to compare

  • new functional testing coverage
  • Maxmind support (Geo + ASN)
  • improve qname2 and qname3 aggregation
  • introduce "deep sampling" and ability to limit rate of deep samples
  • fixes