Changes from v4.11.1
Improvements
- Fragmentation cache added.
- process/wg: Removed check for transport data length divisibility by 16.
- Enhanced DPDK memory pool creation using device socket ID.
- QUIC: Expanded flow detail extraction.
- Updated default packet queue burst size to 64 (consistent with input defaults).
- Workers CPU affinity improvements.
- Prefetch optimizations for better performance.
- IPv6: Improved header parsing and extension handling.
- DPDK: Timestamp read from hardware metadata when available.
New Features
Input Plugins:
- NDP: Support for custom packet header timestamps.
- DPDK: Added MTU size configuration and telemetry support.
Output Plugins:
- IPFIX: Introduced LZ4 compression support.
- IPFIX: Added non-blocking TCP socket option.
Telemetry:
- Introduced AppFS telemetry.
- Updated telemetry documentation in README.
Plugins:
- MQTT: Support for v3.1.1 protocol.
- TLS Extensions: Enhanced features for detailed analysis.
Bugfixes
- Fixed discrepancies in IPT PHIST features.
- Resolved issues with TCP options parsing.
- Corrected WireGuard byte order in IPFIX output.
- Addressed inconsistencies in IPv6 header parsing.
- Fixed RSS configuration in DPDK.
- Resolved DPDK queue size issues and packet parsing checks.
Documentation
- Introduced Jekyll-based documentation framework.
- Updated README with new telemetry features and examples.
- Minor fixes and revisions to improve clarity and navigation on the webpage.
Miscellaneous
- Added Docker container for processing PCAPs to CSVs.
Full Changelog: v4.11.1...v4.15.0