New Features
- New dnstap input module (full analyzer support) #155 and #176
- New sFlow input module (basic analyzer support) #187
- Support for dynamically linked and loaded input and analyzer modules #156 and #179 and #179
- Support chaining in policy handlers which allow execution of an analyzer only if the analyzer before it doesn't filter #169
- clang toolchain builds, creating fully statically linked executables for Linux #168
Backwards Incompatible Changes
- Unique name for prometheus TopN metric #183
The "name" label on Top N metrics in Prometheus output has changed to be domain specific - for example dns_top_qname2{instance="gw",name=".aaplimg.com"} is now dns_top_qname2{instance="gw",qname=".aaplimg.com"} and dns_top_rcode{instance="gw",name="NOERROR"} is now dns_top_rcode{instance="gw",rcode="NOERROR"}. Please update your dashboards accordingly, or use the latest community dashboard.
Other Changes
- DNS qname labels are now lower-cased before being inserted into Top N tables, reducing cardinality and improving aggregation
- optimize: reuse Tap if the same input is used by multiple policies #186
- add __all policy support for prometheus metics #142
- Support to cmd all options through yaml config file #159 and #164
- pktvisor debug/sanitized build #190
Bug Fixes
- Remove prom help from loop, removing redundancy and fixing scrapers by @weyrick in #144
- Remove stopped InputStream and StreamHandlers from Registry managers by @leoparente in #172
- policy threads exception by @weyrick in #178
New Contributors
- @leoparente made their first contribution in #159
Full Changelog: v3.3.0...v4.0.0