What's Changed
New Protocols
- Added MongoDB protocol parsing, command support, protocol inference, and tests in #275
- Added DNS protocol support, including parsing, filtering, protocol inference, CLI command, docs, and tests in #309
eBPF and Capture Improvements
- Replaced tracepoint-based hooks with fentry where available to improve probe behavior and compatibility in #311
- Added
security_socket_sendmsgfentry support and fixedsecurity_socket_recvmsg/sendmsgattach handling - Added architecture-specific syscall tracing support for amd64 and arm64
- Fixed NAT flow direction handling
- Skipped unnecessary protocol inference when the protocol is specified from the command line in #310
SSL/TLS
- Added OpenSSL 3.5.0 SSL decryption support
- Added OpenSSL 3.5.1-3.5.5 version mapping support
- Fixed a concurrency issue in the global map used while tracking SSL events in #305
Stability and Memory
- Added memory monitoring utilities
- Added goroutine management utilities
- Fixed StreamBuffer timestamp cleanup to prevent memory leaks
- Added StreamBuffer memory leak tests in #333
Fixes
- Fixed cgo DNS resolution crash
- Fixed
--json-outputexit behavior after BPF is loaded - Fixed issue #300 in #302
- Updated
golang.org/x/archto v0.24.0 in #104
Documentation and CI
- Updated compilation documentation in #308
- Added AGENTS.md guidance files in #329 and #330
- Added MongoDB and DNS test coverage
- Improved RocketMQ docker compose compatibility
- Simplified CI test dependencies and updated workflow actions
- Bumped
cilium/little-vm-helperto v0.0.28
Full Changelog: v1.5.0...v1.6.0