This file documents recent notable changes to this project. The format of this file is based on Keep a Changelog, and this project adheres to Semantic Versioning.
0.5.0 - 2024-11-26
- Configuration options required for establishing a connection with the central
management server must be specified directly via command-line interface.
The following options and arguments are required:
--cert
: Specifies the certificate file for the current module.--key
: Specifies the private key file for the certificate.--ca-certs
: Specifies the CA certificate files. Multiple CA certificates can be provided by using this option multiple times.- The Manager server's name and address must be provided as a command-line
argument in the format
<server_name>@<server_ip>:<server_port>
.
- The configuration file, previously provided as a positional command-line
argument, must now be specified using the
-c
option. This change allows for additional command-line arguments to be used alongside the configuration file. However, providing a local configuration file is optional. - If
log_dir
is not specified in the configuration file or the log file cannot be created, logs will be printed to stdout. - Changed
source
tosensor
, which is a more appropriate term for the name of the device that sensed/captured the raw event. - Changed
REQUIRED_GIGANTO_VERSION
to "0.23.0".
- Removed cert, key, ca_certs, review_name and review_rpc_srv_addr from the configuration file; now mandatory via CLI.
- Removed OS-specific configuration directory.
- Linux: $HOME/.config/crusher/config.toml
- macOS: $HOME/Library/Application Support/com.cluml.crusher/config.toml
0.4.1 - 2024-10-04
- Correct how to refer to other required modules in the code.
- Changed
REVIEW_PROTOCOL_VERSION
toREQUIRED_MANAGER_VERSION
. - Used
REQUIRED_GIGANTO_VERSION
instead of names that includeINGEST
orPUBLISH
.
- Changed
- Changed
REQUIRED_MANAGER_VERSION
to "0.39.0" - Updated review-protocol to version "0.7.0".
- As
get_config
was removed fromreview-protocol::request::handler
, Removed theget_config
related code from the crusher.
- As
0.4.0 - 2024-09-27
- Support
shutdown
,reload_config
viaoinq
. - Added a
Certs
to store commonly used certificate information.
- Applied code import ordering by
StdExternalCrate
. From now on, all code is expected to be formatted usingcargo fmt -- --config group_imports=StdExternalCrate
. - Changed CrusherConfig with oinq
Config
. - Modified logging behavior for debug and release builds
- Changed logs to stdout and file
- Changed configuration fields name.
roots
toca_certs
. It also introduces support for multiple CA certificates.giganto_ingest_address
togiganto_ingest_srv_addr
.giganto_publish_address
togiganto_publish_srv_addr
.review_address
toreview_rpc_srv_addr
.
- Updated giganto-client to version "0.20.0". Updating to this version results
in the following changes.
- Updated the version of quinn, rustls from 0.10, 0.21 to 0.11, 0.23. With the update to this version, the usage of the quinn and rustls crates has changed, so code affected by the update has also been modified.
- Updated the protocol version of the review, giganto.
- Changed
REVIEW_PROTOCOL_VERSION
to "0.38.0". - Changed
PUBLISH_PROTOCOL_VERSION
to "0.21.0". - Changed
INGEST_PROTOCOL_VERSION
to "0.21.0".
- Changed
- Added more network data type. (
Bootp
,Dhcp
)
- Changed the form of timeseries sent to giganto to
Vec<(i64,Vec<u8>)>
. Currently, giganto has changed to send and receive a certain number of events at once to optimize sending and receiving large amounts of data. For timeseries, one event is generated per period, and it takes too long to collect and send a certain number of timeseries events, so it was changed to send only one event as a vector. - Updated review-protocol to version "0.6.0".
- Modified to use
ConnectionBuilder
to simplify the handling of connections with Central Manager. - As
set_config
was removed fromreview-protocol::request::handler
, Removed theset_config
related code from the crusher.
- Modified to use
0.3.2 - 2024-01-25
- Changed
REVIEW_PROTOCOL_VERSION
to "0.27.0" - Changed
PUBLISH_PROTOCOL_VERSION
to "0.17.0"
0.3.1 - 2023-11-07
- Support remote control
- Send the list of processes to review using oinq.
- Changed
RecordType
toRawEventKind
, as the communication protocol type defined inGiganto-client 0.15.1
is integrated.
0.3.0 - 2023-07-06
- Add more network data type. (
Mqtt
,Ldap
,Tls
,Smb
,Nfs
)
0.2.0 - 2023-05-19
- Add more network data type. (
Ftp
) - Delete the policies by requested IDs.
- Removes the
agent_id
provided in the config file. This value is provided by the CN in the certificate in the form ofagent_id@host_id
. - Requires REview 0.23.x
0.1.0 - 2023-03-30
- Receive time series generation
policy
generated by thereview
and convert it to amodel
. - Request a network stream to
giganto
's publish for eachmodel
. - Send the generated
time series
togiganto
's ingest. - Save the model's id and the last time the timeseries was sent to a file.