Changelog for
silk-3.22.0-1.37.x86_64.rpm :
* Mon Sep 25 2023 Martin Hauke
- Update to version 3.22.0
* Added the ability to control the order in which rwaggbagcat displays fields.
* Added division and scalar-multiplication to rwaggbagtool.- Update to version 3.21.0
* Added ability for rwsettool, rwbagtool, and rwaggbagtool to use an input file as an output file simulating modifying a file in-place.
* Modified the --sensors switch of rwfilter, rwsiteinfo, and rwfglob to accept sensor-group names (see the group block in silk.conf).
* Modified rwsiteinfo to print information about sensor-groups.
* Fixed issues in PySiLK when using recent Python releases.- Update to version 3.19.2
* Fix compatibility with Python 3.9 and later.
* Add support for libfixbuf-3.0.0 (v1.7.0 and later are supported).
* Fri Apr 17 2020 Martin Hauke - Update to version 3.19.1
* PySiLK + Add the SilkFile.skip() method. + Fix compatibility with Python 3.7 and 3.8.
* Building + Fix a compilation error when building SiLK without libfixbuf.
* Fri Nov 01 2019 Martin Hauke - Update to version 3.19.0
* Support using country codes as keys in the rwaggbag family of tools.
* Support logging of incoming IPFIX templates for specific probes.
* Quiet a warning message when using libfixbuf-2.4.0.
* Fri May 24 2019 Martin Hauke - Update to version 3.18.2:
* Remove unintentionally-enabled debugging statements from rwflowpack.
* Thu Mar 21 2019 Martin Hauke - Update to version 3.18.1
* Add support for logging tombstone records created by YAF 2.11.- Update to version 3.18.0
* When printing IP addresses as zero-padded values, also apply zero-padding to the CIDR designation when it is present.
* Fix a bug in several tools when printing IPv6 addresses as zero-padded decimal; the output included an extra leading zero.
* Fix a bug in rwflowpack that could cause a crash when multiple probes were configured to process IPFIX data from files.
* Add switches rwsender and rwreceiver for additional control of the TLS connection between them, and only enable TLS support when GnuTLS-2.12.0 or later is found at build time.
* Fri Jun 29 2018 mardnhAATTgmx.de- Update to version 3.17.2
* rwgeoip2ccmap + Add a --fields switch that gives the user control over which country-code value(s) are used when reading a GeoIP2 file.
* rwuniq + Use a 64-bit integer for storing a bin\'s record count.
* rwstats + Use a 64-bit integer for storing a bin\'s record count.
* rwaddrcount + Use 64-bit integers for storing a bin\'s packet count and record
* Tue Apr 24 2018 mardnhAATTgmx.de- Update to version 3.17.1
* Fix a compilation failure on RedHat EL6, CentOS 6, and other systems.
* Mon Apr 23 2018 mardnhAATTgmx.de- Update to version 3.17.0
* Add support in rwaggbagtool for removing rows when a value is above or below a threashold or when an IP address is in or is not in an IPset.
* Change how rwsetcat displays IPv4 addresses in an IPset containing both IPv4 and IPv6 addresses.
* Add support for millisecond timestamps in rwuniq and rwstats.
* Add support for the GeoIP2 version of MaxMind\'s country code comma-separated value files and binary files. (Binary file support requires libmaxminddb library support.)
* Sat Feb 17 2018 mardnhAATTgmx.de- Update to version 3.16.1
* Fix bugs in rwstats, rwuniq, rwbagcat, rwsender, rwreceiver, rwflowpack, and flowcap.
* Sun Oct 22 2017 mardnhAATTgmx.de- Update to version 3.16.0
* rwstats + When the primary value is a distinct count, compute the number of distinct items across all bins and print each bin\'s percentage of the total distinct count. + Fix bugs that may occur when computing distinct counts and not all distinct counts fit into memory.
* rwuniq + Fix bugs that may occur when computing distinct counts and not all distinct counts fit into memory.
* flowrate plug-in + Change how the flowrate plug-in handles flow records whose duration is zero in order to fix bizarre looking output in rwstats. The plug-in now assumes each of these flow records has a duration of 400 microseconds (0.4 milliseconds). + Add the --flowrate-zero-duration switch which allows the user to set the duration that the plug-in uses for flow records whose given duration is zero.
* rwrandomizeip + Read flow records from the standard input if the number of non-switch arguments is zero. + Write the flow records to the standard output if the number of non-switch arguments is zero or one.
* rwswapbytes + Read flow records from the standard input if the number of non-switch arguments is zero. + Write the flow records to the standard output if the number of non-switch arguments is zero or one.
* rwflowpack, flowcap + Change processing of NetFlow v9 records so that, when SiLK is compiled against libfixbuf 1.8.0, the OUT_BYTES and OUT_PKTS values are used when the IN_BYTES and IN_PKTS values are 0.
* flowcap + Print the probe definitions to the log file when the log-level is set to debug.
* rwflowpack, rwflowappend, flowcap, rwsender, rwreceiver, rwpollexec + Change how daemons invoke subprocesses in order to avoid creating subprocesses that deadlock and never complete. + Modify start-up scripts to be more in line with the rules in the Linux Standard Base.
* Plug-ins + Add manual pages for the cutmatch, conficker-c, and app-mismatch plug-ins. + No longer install the uniq-distproto plug-in since its functionality is available as --values=distinct:protocol.