nmsg 1.3.1 release

The NMSG network message encapsulation library version 1.3.1 is released. This release relies on built-in librdkafka error handling.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.1.tar.gz
SHA256 563aff4c3d0a79823cf96371143eb0c9fa81cfc039b6f8ad23a48317707fbfda

nmsg 1.3.0 release

The NMSG network message encapsulation library version 1.3.0 is released with various fixes and improvements:

• Added external configuration for Kafka IO.
• Stop IO when output fails.
• Add support and API for statistics module.
• Remove prometheus integration.
• Add NMSG_STATSMOD_CONFIG environment variable.
• Bug fixes.
• Documentation fixes.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.3.0.tar.gz
SHA256 b3bf2e4e8c2182b98461b177e137f53546d4b936767d2e301d2892b5ac5b4930

nmsg 1.2.0 release

The NMSG network message encapsulation library version 1.2.0 is released with various fixes and improvements:

• Add support for Kafka i/o in JSON and binary forms.
• Add support for prometheus metrics export.
• Replace mutex protected counters and flags with stdatomic operations.
• New command line options: --kafkakey, --readkafka, --writekafka, --promport
• New functions: nmsg_input_open_kafka_endpoint(), nmsg_input_open_kafka_json(),
  nmsg_output_open_kafka_endpoint(), nmsg_output_open_kafka_json()

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.2.0.tar.gz
SHA256 16d43d985f58bc816dbb57e77d86d0a293c7fa72e270219e82b73c39b46a4aa2

nmsg 1.1.2 released

The NMSG network message encapsulation library version 1.1.2 is released with various fixes and improvements:

• Now allow nmsgtool --setgroup, --setoperator, and --setsource to work with --writepres and --writejson outputs.
• Permit nmsgtool --setgroup and --setoperator to use a numerical value.
• Unmatched group and operator aliases in presentation format now display as the numerical values instead of (null).
• Ensure mis-running nmsgtool results in failure exit code.
• Fix output buffering for JSON outputs.
• Fix magic length calculation in nmsg_json.
• Terminate strbuf data at initialization.

The code also introduces more tests and a RPM spec file.

A download tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.2.tar.gz
SHA256 0727bf083fc01f9944ba40bae2936b4f09b9e284f839ba735514ee1cd1a0e3d5

nmsg 1.1.1 released

The network encapsulation library, nmsg, version 1.1.1 is released. This release addresses a bug affecting container size:

• Update estimated container size to include space for sequencing info.

A source tarball is available: https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.1.tar.gz
SHA-256: dcc17af28cc40b0f4742626b86fa9126f80fcb3a296cf4c2acc6daf31ff1afbb

nmsg 1.1.0 released

The network encapsulation library, nmsg, version 1.1.0 is released. This release includes support for a new dnsobs message type, as well as numerous fixes and performance improvements. In detail:

• Multiple performance improvements to JSON formatting.

• Multiple performance and concurrency improvements in nmsg_io loop.

• Add new dnsobs message type for raw passive DNS observations.

• Format DNS messages as JSON in base:dnsqr, base:dnstap, and base:dnsobs.

• Format base:encode payload in human readable form in JSON output.

• Replace yajl with json-c for JSON parsing.

• nmsgtool: exit with nonzero status when interrupted by signal.

• Correct container size calculation when sequencing.

• Address doxygen deprecations.

A source tarball is available: https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.1.0.tar.gz
SHA-256: e5931b0cfa38e50f3f9cb7100ffdef454400c5901468c6014a6a602c9215a6d8

NMSG 1.0.1 released

NMSG, the network message encapsulation suite, version 1.0.1 was released. The changes are:

• nmsgtool: Fix use-after-free bug in debug printing of statistics at shutdown (seen on Debian 10).

• nmsg/base/dnsqr.c: Initialize len in dnsqr_hash to squash code-checker uninitialized warning.

• Fix assert conditions with side effects for builds with -DNDEBUG.

A source tarball is available at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.0.1.tar.gz

SHA256: 6d9c950b2bd8c507b40ccd925a85b095738f9d036abe6b0d595c1f3eba31ef35

nmsg 1.0.0 released

The network encapsulation library, nmsg, version 1.0.0 is released. This release deprecates Crossroads I/O (libxs) support in favor of ZeroMQ (libzmq). Note command-line updates enabling ZeroMQ socket connections for nmsgtool, as described in its man page. In addition the treatment of unknown rrtypes was amended for nmsgtool JSON output. In detail:

• Replace libXS with ZeroMQ and associated calls.
• Developer API functions nmsg_input_open_xs(), nmsg_input_open_xs_endpoint(), nmsg_io_add_input_xs_channel(), nmsg_output_open_xs(), and nmsg_output_open_xs_endpoint() are deprecated and replaced with respectively: nmsg_input_open_zmq(), nmsg_input_open_zmq_endpoint(), nmsg_io_add_input_zmq_channel(), nmsg_output_open_zmq(), and nmsg_output_open_zmq_endpoint().
• Update nmsgtool command-line options: --readzchan replaces --readzsock, --writezsock replaces --writexsock, --readzsock replaces --readxsock.
• Change format of unknown rrtypes in nmsgtool JSON output to "TYPE" followed by number.

A source tarball is at https://dl.farsightsecurity.com/dist/nmsg/nmsg-1.0.0.tar.gz
SHA256: 4999bba3cc84e43c4353210e015c9f80efb2d15812b4169ae6db2c1dd29888d3

nmsg 0.15.1 release

Welcome to the 0.15.1 release of NMSG. This has one bug fix for the output stats collection (like seen with nmsgtool -dd) where the payload counters weren't counting correctly. The release also changes where plugins are found. Plugins are now found by default at $libdir/nmsg instead of lib/nmsg. This fixes a problem where plugins were not found with recent Debian packages built with --libdir configure option (used to install libraries in architecture specific directory). And ./configure --with-plugindir renamed to --with-pluginsdir. For third-party development uses of libnmsg with pkgconfig, the pkgconfig pc specification also depends on libprotobuf-c headers.

A source tarball is available at
https://dl.farsightsecurity.com/dist/nmsg/nmsg-0.15.1.tar.gz
SHA256: 073f3eefb3b53a9f0bf0f6b4dfe42ca179591bd6bbdbc154d927e52d9fd3b350

nmsg 0.15.0 release

nmsg version 0.15.0 was released. It provides the following new features:

• Added runtime-tunable environment variables NMSG_GRALIAS_FILE and NMSG_OPALIAS_FILE.

• Added compile-time version info to API: NMSG_LIBRARY_VERSION and MSG_LIBRARY_VERSION_NUMBER; and runtime functions: nmsg_get_version() and nmsg_get_version_number().

Other changes include:

• Ensure nmsg_sock_parse_sockspec() returns an error if an invalid port range is supplied.

• Fixed nmsg_io filtering default policy logic. (Previously, if the final filter returned "declined", that result was returned in place of the configured default policy.)

• Make nmsg_output_set_buffered() able to unbuffer nmsg_output_type_json objects.

• Fixed many compiler check warnings.

• Added multiple unit tests.

• Fix bugs caught by static analysis (cppcheck).

• For protobuf compatibility, renamed all protobuf-c generated enum names and types, although the wire format of the messages remains the same. (Thank you to Chris Morrow.) Compatibility definitions added to nmsg/compat.h to allow existing code to continue using the old names.

• Miscellaneous documentation improvements.

A source tarball is available via https://dl.farsightsecurity.com/dist/nmsg/nmsg-0.15.0.tar.gz
SHA256: 44ad5203b4f71969255c6871d079ef6c6955aa7b26b9705e831f54554aa82ff1