Skip to content

v6.9.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 14:58
· 1 commit to main since this release
v6.9.2
612a04c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Installation Instructions | 5.x -> 6.x Upgrade Instructions | FAQ | CHANGELOG | JA4+ Install | Docker Install

A db.pl upgrade is required when upgrading from Arkime 5 or earlier

Support Arkime's ongoing development! Become a Sponsor!

✨ What's new ✨

Breaking

  • #4415 uploadCommand {CONFIG} is now the -c value as given, with .hiddenconfig or urlinfile:// the dropUser must be able to read that file
  • #4415 capture -c file.hiddenconfig now reads the config location from that file like viewer does, instead of from the file without the suffix

Release

All

  • #4402 Email and Slack notifier alerts escape < and >, and Teams alerts replace Markdown link brackets, so values in the alert text can't inject HTML, links or @mentions

Capture

  • #4404 Fix "BIGGER than expected json" warnings and rare lost sessions when using GeoLite2 City and ASN
  • #4405 Fix slow session lookups when packetThreads is even, each thread only used part of its session table
  • #4423 Fix dontSaveBPFs, minPacketsSaveBPFs and rules file bpf: rules never matching with tpacketv3, bpf, netmap and tzsp readers, or after a rules file is reloaded (fixes #4421)

Cont3xt

  • #4429 Improve link url escaping
  • #4429 Fix link groups not displaying when a link uses a timeSnap date

db.pl

  • #4398 Fix expire deleting the current weekly history index when viewer runs in a timezone east of UTC (thanks @jejex0)
  • #4409 Fix RADIUS sessions with a NAS-Port above 2147483647 being rejected by OpenSearch/Elasticsearch, only sessions indices created after upgrading get the new mapping

Viewer

  • #4415 PCAP upload no longer returns the upload command and its output, use --debug to log them
  • #4429 Improve hunt display escaping
  • #4429 Fix value action urls when the field value contains a $

⬇️ Download Info ⬇️

We offer downloads for different Linux distributions and versions because of library differences. For example, use the el8 download for Centos 8 or RHEL 8 not RHEL 9. A libssl version error means that most likely the wrong download was used for your Linux distribution and version, please double check. The moloch builds have the old filesystem layouts, we will stop providing the moloch builds in 2026. The EL 8 builds will stop for Arkime 7.

Contributors

jejex0
Assets 30
Loading