Installation Instructions | 5.x Upgrade instructions | FAQ | CHANGELOG | JA4+ Install
A db.pl upgrade is required when upgrading from 4.x
Release
Capture/Viewer
- #2694 New DNS parser that captures all the answers, enable with
dnsOutputAnswers=true (thanks @mcgillowen)
Capture
- #2674 Fix filelist not working in scheme mode
- #2679 cert.alt can be used in rules
- #2699 Disable reader s3 download timeout
- #2726 Fix ZSTD_decompress missing for some builds
Cont3xt
- #2683 lock integration settings
- #2719 snap to dates
- #2730 Arkime/OpenSearch/Elasticsearch integration had insecure logic backwards
Viewer
- #2668 fix pcap export with only default time range and no date param in url
- #2680 add default user settings to viewer config
https://arkime.com/settings#user-setting-defaults - #2681 fix unique of numerical fields
- #2701 Make sure pcap reassembly doesn't starve viewer
- #2704 Support viewUrl having a path
- #2705 Support querying non Arkime indices, enable with
queryExtraIndices (thanks @mmguero) - #2718 Green on black theme improvements, Elyse's fav now
- #2735 help improvements
- #2736 help improvements
Download Info
We offer downloads for many different OS versions because of library differences. For example, use the el8 download for Centos 8 or RHEL 8. If you have a libssl version error, it is most likely that the wrong download was used for your OS. The moloch builds have the old filesystem layouts, we will stop providing the moloch builds in 2024.
The EL7 and Ubuntu 18 builds are still available here until 5/1/2024.