Skip to content

v0.9.15

Choose a tag to compare

@dreadl0ck dreadl0ck released this 27 Sep 14:33
· 103 commits to master since this release

πŸ“¦ Available Builds

Build OS Architecture DPI Support Description
netcap-v0.9.15-darwin-arm64 macOS ARM64 βœ… Yes Full DPI support with nDPI
netcap-v0.9.15-linux-amd64-libc Linux AMD64 βœ… Yes glibc-based with DPI
netcap-v0.9.15-linux-amd64-musl Linux AMD64 βœ… Yes musl-based with DPI (Alpine)
netcap-nodpi-v0.9.15-darwin-arm64 macOS ARM64 ❌ No Static build, no DPI
netcap-nodpi-v0.9.15-linux-amd64-libc Linux AMD64 ❌ No glibc-based, no DPI
netcap-nodpi-v0.9.15-linux-amd64-musl Linux AMD64 ❌ No musl-based, no DPI
netcap-nodpi-v0.9.15-windows-amd64 Windows AMD64 ❌ No Windows build

πŸ” Choosing the Right Build

  • With DPI (netcap-*): Choose if you need Deep Packet Inspection features (protocol classification, application detection)
  • Without DPI (netcap-nodpi-*): Choose for basic packet capture and analysis, smaller binary size
  • libc vs musl: Use libc for standard Linux distros (Ubuntu, Debian, CentOS). Use musl for Alpine Linux or minimal containers

Installing on macOS via homebrew

Builds distributed via homebrew are built with DPI support.
You need to install the libprotoident and ndpi libraries via homebrew.

  $ brew install libprotoident ndpi
  $ brew tap dreadl0ck/formulas
  $ brew install netcap

Afterwards try running 'net' in your terminal.

πŸ“š Documentation

⚠️ Notes

  • On macOS/Linux, you may need to grant necessary permissions: sudo chmod +x net
  • Live capture requires root/administrator privileges
  • Verify checksums with checksums.txt before use

Changelog

  • 4a2df67 Include database notices in every archive path
  • 64c039c Index Community ID counts with bounded Roaring bitmaps
  • 04c6734 Index aggregated vulnerability and exploit pivots
  • 7de05cf Index certificate and timeline correlation facets
  • 1e9e5eb Index connection facets and reuse chart snapshot
  • d6348d9 Merge origin/master into feat/community-roaring-index
  • 1151788 Merge pull request #87 from dreadl0ck/feat/community-roaring-index
  • a596bd8 Merge pull request #89 from dreadl0ck/feat/wireshark-sample-corpus
  • a2c288d Prefilter audit streams with Community ID bitmaps
  • cf052be Repair capture fixture and deterministic regression tests
  • 048e066 Reuse Community ID index for unfiltered record counts
  • 66ccfd0 Reuse Roaring indexes for multi-ID records and fingerprints
  • 7f8e609 Test NETCAP against pinned Wireshark sample captures
  • e20ac8e Test collector and service goroutine leak profiles (#88)
  • 8144730 v0.9.15 release

Full Changelog: v0.9.14...v0.9.15