eCapture v0.8.3

What's Changed

• user: fix #553, hashLen is not allowed to be more than 64 bytes by @cfc4n in #554
• cli: update docker usage by @cfc4n in #556
• kern: Support for the non-Android boringssl library has been added. by @cfc4n in #555
• user: format clientRandom string in gotls module by @cfc4n in #557
• cli: support logger level by @cfc4n in #558
• use kprobe/__sys_connect inseated uprobe/connect. by @cfc4n in #559

Full Changelog: v0.8.2...v0.8.3

eCapture v0.8.2

What's Changed

• cli: fix undefined: config.MysqldConfig. (fix #548) by @cfc4n in #547

Full Changelog: v0.8.1...v0.8.2

eCapture v0.8.1

What's Changed

• makefile: Optimized the generation mechanism of kernel header files by @cfc4n in #536
• add dockerfile by @sancppp in #537
• cli: Use a formatted logger rs/zerolog by @cfc4n in #539
• utils: supported openssl 1.1.1w, 3.0.13, 3.1.5, 3.2.1 by @cfc4n in #540
• BPF name should be appended after _core/_noncore by @darren in #545
• user: fixed #542, masterkey being written to pcapng multiple times. by @cfc4n in #546
• user: prepare for service-oriented architecture. by @cfc4n in #541

New Contributors

• @darren made their first contribution in #545

Full Changelog: v0.8.0...v0.8.1

eCapture v0.8.0

🚀 Breaking Changes

• for User: No need to distinguish between CO-RE and non-CO-RE versions, automatically identified by eCapture.
  • 无需区分CO-RE和non-CO-RE版本，由eCapture自动识别。
• for Developer: Supports cross-compilation for both amd64 and arm64 CPU architectures, building CO-RE and non-CO-RE versions respectively.
  • 支持在amd64\arm64两个CPU架构下的交叉编译，分别构建CO-RE和non-CO-RE版本

What's Changed

• chore: rename ecapture module name. by @cfc4n in #530
• Fix keylog mode not working correctly on certain OpenSSL versions by @AmazingPP in #534
• feat: support CORE and non-CORE mode in one by @cfc4n in #532
• workflows: change steps.get_tags.outputs.VERSION to github.ref_name by @sancppp in #535

New Contributors

• @AmazingPP made their first contribution in #534

Full Changelog: v0.7.7...v0.8.0

eCapture v0.7.7

What's Changed

• [Fix] get textStart from pclnTable by @wlingze in #516
• fix: amd64, offset read error issue for PIE executable. PR #516 by @cfc4n in #517
• makefile: used CC=$(CROSS_COMPILE)gcc for CGO compile. by @cfc4n in #519
• user: return error when detect openssl version failed. by @cfc4n in #521
• user : fixed the invalid address reference of the SSL_in_before symbol OpenSSL 1.0.2k. by @cfc4n in #520
• feat: support cross-compilation for workflows. by @cfc4n in #523
• readme: improve English README.md translation and add TOCs by @zhoukuncheng in #525
• build(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 by @dependabot in #528

New Contributors

• @wlingze made their first contribution in #516
• @zhoukuncheng made their first contribution in #525

Full Changelog: v0.7.6...v0.7.7

eCapture v0.7.6

What's Changed

• fix #500 to avoid potential hang and event loss by @ruitianzhong in #501
• fix issue#504 by @sancppp in #506
• tentative fix to address bash problem #490 by @ruitianzhong in #510
• Fix cant found RET offset in gotls mode. fix #502. by @cfc4n in #512

Full Changelog: v0.7.5...v0.7.6

eCapture v0.7.5

What's Changed

• Improve makefile by @cfc4n in #488
• Fix: init GoTLSProbe.tcPacketsChan #492 by @ruitianzhong in #493
• fix: avoid printing confusing message when input contains special character by @ruitianzhong in #495
• correctly update ContentLength for uncompressed response body by @ruitianzhong in #498
• add -race flags for go test and fix data race warning by @ruitianzhong in #499
• openssl: encode the value of fd (ssl->wbio->num) to gen uuid, rather than an unexpected random number by @wuyexkx in #494

New Contributors

• @ruitianzhong made their first contribution in #493
• @wuyexkx made their first contribution in #494

Full Changelog: v0.7.4...v0.7.5

eCapture v0.7.4

🚀 Breaking Changes

eCapture supports Pcap Filter Syntax, and you can use the pcap filter expression to filter network packets like tcpdump.

In the tls\gotls module, when the running mode is pcap, the pcap filter expression is supported, which can be set in the last parameter of the command line, for example:

ecapture tls -m pcap -i wlan0 -w save.pcapng host 192.168.1.1 and tcp port 443

What's Changed

• Update probe_bash.go by @sancppp in #479
• docs: Optimized the error message in the gotls module.(fix: #482) by @cfc4n in #484
• feat: Support pcap-filter expression for pcap mode by @Asphaltt in #478
• chore: Pcap filter tidy,support ubuntu arm64 to make libpcap by @cfc4n in #487

New Contributors

• @sancppp made their first contribution in #479
• @Asphaltt made their first contribution in #478

Full Changelog: v0.7.3...v0.7.4

eCapture v0.7.3

What's Changed

• makefile: Optimize the feature list for the Android version by @cfc4n in #457
• user: support event processor by @cfc4n in #462
• chore: remove refs to deprecated io/ioutil by @testwill in #465
• user: fix concurrent map read and map write #467 by @cfc4n in #468
• utils: support openssl 3.1.0-3.1.4 and 3.0.9-3.0.12 by @cfc4n in #469
• user: imporve dynamic link library path loading logic on aarch64 ubuntu by @cfc4n in #470
• user: imporve #463, impact on the performance of the tested program by @cfc4n in #471
• kern: support openssl 3.2.x , change ssl_st to ssl_connection_st by @cfc4n in #472

New Contributors

• @testwill made their first contribution in #465

Full Changelog: v0.7.2...v0.7.3

eCapture v0.7.2

What's Changed

• user: improve pcapng writer, flush every 2s. by @cfc4n in #455
• builder: add debian package build script. by @cfc4n in #456

Full Changelog: v0.7.1...v0.7.2