NETCAP
OverviewGitHubHomepageGoDoc
Search…
v0.5
Overview
Audit Records
Specification
Installation
Quickstart
Configuration
Bash Completion
Packet Collection
Audit Record Labeling
HTTP Proxy
USB Capture
Payload Capture
Distributed Collection
Workers
Filtering and Export
Data Compression
Internals
Metrics
Resolvers
TLS Fingerprinting
Reassembly
Deep Packet Inspection
Live Capture
Maltego Integration
Logging
Packet Contexts
Industrial Control Systems
File Extraction
Email Extraction
Device Profiles
Python Integration
Changelog
Troubleshooting
Unit Tests
Extension
Downloads
Docker Containers
FAQ
Contributing
License
Powered By GitBook
Changelog
Detailed Version History Information

v0.5 - April 2020

Fixed

  • multiple bugs in the stream reassembly
  • several panics during parsing in gopacket

Changed

  • CLI interface refactored: single binary app with subcommands, stripped size ~17MB
  • Updated units tests
  • Documentation updates
  • Updated Docker containers for Ubuntu and Alpine
  • Compiled with Go 1.14.2
  • removed custom audit records Link-, Network- and TransportFlow

New Features

  • Maltego integration
  • File audit records
  • Diameter protocol audit records
  • SMTP audit records
  • POP3 support for extracting Mails
  • JA3S support and separate audit record for TLSServerHello
  • New configuration options: via environment variables or configuration file
  • Resolvers package for Geolocation, DNS and Service lookups and whitelisting
  • Deep Packet Inspection via nDPI and libprotoident
  • DeviceProfile Audit records, to capture the behavior of a single device within a traffic dump
  • Added an integration for bash-completion support
​
Previous
Python Integration
Next
Troubleshooting
Last modified 1yr ago
Copy link
Contents
v0.5 - April 2020
Fixed
Changed
New Features