Decode of a multipart SIP-I INVITE keeps the ISUP part, and HEP mutual TLS without a CA no longer accepts every client.
-
Decode runs tshark with
--no-duplicate-keys. A multipart INVITE is ISUP and then SDP, andtshark -T jsonused to write both parts under one key, so the Decode window kept SDP and dropped ISUP. A BYE with a singleapplication/isupbody was unaffected. The built-in Q.763 summary also names the fixed indicators and decodes optional forward-call flags, propagation delay, and MLPP precedence. -
HEP and HTTPS ingest with
mutual_tlsand an empty CA now fail closed and do not listen. Before, those listeners accepted any client. -
All-in-one node reads run in the same DuckDB sandbox as a remote node.
search_bufferstill works: the coordinator copies the writer buffers into the sandbox. Unparsed SIP packets reuse the default DuckDB writer. The time-zone pickers list every IANA zone and can be searched.
What's Changed
- fix(decode): keep multipart ISUP in the tshark JSON by @adubovikov in #1139
- fix(security): refuse HEP mutual TLS when cacert is empty by @adubovikov in #1138
- feat(security): sandbox all-in-one node reads by @adubovikov in #1134
- feat(security): keep search_buffer working with sandboxed all-in-one reads by @adubovikov in #1135
- fix(ducklake): reuse the default writer for unparsed SIP packets by @pablodz in #1136
- ui: list all IANA time zones in pickers, add search by @allanfrizzo in #1126
Full Changelog: 11.0.382...11.0.384