This release fixes mostly bugs from 1.7.0 and is now the recommended version for production. It works together with well advanced in years NfSen 1.3.9 https://github.com/phaag/nfsen.
Changelog:
- Fix #394. Event labeling
- Implement #393 consistent logging
- Remove extra ':' in getopt of nfcapd
- Add feature #391. Add country code aggregation
- Fix #392. Fix format options with IPv6
- Implement #390. Aggregation for GeoDB's enriched AS data
- Add OpenBSD pflog decoding in nfpcapd and nfdump
- Fix Ident change
- Sync nfcapd, sfcapd code
- Fix #389 receiving IPv4 on IPv6 socket in sfcapd
- Fix #385 bug when compiled on i386 arch - 32bit alignment
- Fix #384 bug when compile with --enable-nsel
- Implement #366 Linux NFLOG link layer protocol in nfpcapd
- Fix #381 pcap overwrite in nfpcapd fixed
- Fix #380 nbar string validation
- Implement #377. Rework sampling code in general. Switch to packet interval/space notation. Map older sampling to new notation.
- Fix #375 relative timestamps with sysUptime id 160
- Rework nbar code. Use new array records and fix nbar bug in older versions.
- Fix #370. Help shows correct option -A
- Fix #369. Legacy -M for NfSen works again
- Improve nbar handling. Add private enterprise number decoding
- Merge pull request #357