Skip to content

Latest commit

 

History

History
145 lines (113 loc) · 5.86 KB

CHANGELOG.md

File metadata and controls

145 lines (113 loc) · 5.86 KB

Changelog

This file documents recent notable changes to this project. The format of this file is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.5.0 - 2024-11-26

Changed

  • Configuration options required for establishing a connection with the central management server must be specified directly via command-line interface. The following options and arguments are required:
    • --cert: Specifies the certificate file for the current module.
    • --key: Specifies the private key file for the certificate.
    • --ca-certs: Specifies the CA certificate files. Multiple CA certificates can be provided by using this option multiple times.
    • The Manager server's name and address must be provided as a command-line argument in the format <server_name>@<server_ip>:<server_port>.
  • The configuration file, previously provided as a positional command-line argument, must now be specified using the -c option. This change allows for additional command-line arguments to be used alongside the configuration file. However, providing a local configuration file is optional.
  • If log_dir is not specified in the configuration file or the log file cannot be created, logs will be printed to stdout.
  • Changed source to sensor, which is a more appropriate term for the name of the device that sensed/captured the raw event.
  • Changed REQUIRED_GIGANTO_VERSION to "0.23.0".

Removed

  • Removed cert, key, ca_certs, review_name and review_rpc_srv_addr from the configuration file; now mandatory via CLI.
  • Removed OS-specific configuration directory.
    • Linux: $HOME/.config/crusher/config.toml
    • macOS: $HOME/Library/Application Support/com.cluml.crusher/config.toml

0.4.1 - 2024-10-04

Changed

  • Correct how to refer to other required modules in the code.
    • Changed REVIEW_PROTOCOL_VERSION to REQUIRED_MANAGER_VERSION.
    • Used REQUIRED_GIGANTO_VERSION instead of names that include INGEST or PUBLISH.
  • Changed REQUIRED_MANAGER_VERSION to "0.39.0"
  • Updated review-protocol to version "0.7.0".
    • As get_config was removed from review-protocol::request::handler, Removed the get_config related code from the crusher.

0.4.0 - 2024-09-27

Added

  • Support shutdown, reload_config via oinq.
  • Added a Certs to store commonly used certificate information.

Changed

  • Applied code import ordering by StdExternalCrate. From now on, all code is expected to be formatted using cargo fmt -- --config group_imports=StdExternalCrate.
  • Changed CrusherConfig with oinq Config.
  • Modified logging behavior for debug and release builds
  • Changed logs to stdout and file
  • Changed configuration fields name.
    • roots to ca_certs. It also introduces support for multiple CA certificates.
    • giganto_ingest_address to giganto_ingest_srv_addr.
    • giganto_publish_address to giganto_publish_srv_addr.
    • review_address to review_rpc_srv_addr.
  • Updated giganto-client to version "0.20.0". Updating to this version results in the following changes.
    • Updated the version of quinn, rustls from 0.10, 0.21 to 0.11, 0.23. With the update to this version, the usage of the quinn and rustls crates has changed, so code affected by the update has also been modified.
    • Updated the protocol version of the review, giganto.
      • Changed REVIEW_PROTOCOL_VERSION to "0.38.0".
      • Changed PUBLISH_PROTOCOL_VERSION to "0.21.0".
      • Changed INGEST_PROTOCOL_VERSION to "0.21.0".
    • Added more network data type. (Bootp, Dhcp)
  • Changed the form of timeseries sent to giganto to Vec<(i64,Vec<u8>)>. Currently, giganto has changed to send and receive a certain number of events at once to optimize sending and receiving large amounts of data. For timeseries, one event is generated per period, and it takes too long to collect and send a certain number of timeseries events, so it was changed to send only one event as a vector.
  • Updated review-protocol to version "0.6.0".
    • Modified to use ConnectionBuilder to simplify the handling of connections with Central Manager.
    • As set_config was removed from review-protocol::request::handler, Removed the set_config related code from the crusher.

0.3.2 - 2024-01-25

Changed

  • Changed REVIEW_PROTOCOL_VERSION to "0.27.0"
  • Changed PUBLISH_PROTOCOL_VERSION to "0.17.0"

0.3.1 - 2023-11-07

Added

  • Support remote control
  • Send the list of processes to review using oinq.
  • Changed RecordType to RawEventKind, as the communication protocol type defined in Giganto-client 0.15.1 is integrated.

0.3.0 - 2023-07-06

Added

  • Add more network data type. (Mqtt, Ldap, Tls, Smb, Nfs)

0.2.0 - 2023-05-19

Added

  • Add more network data type. (Ftp)
  • Delete the policies by requested IDs.

Changed

  • Removes the agent_id provided in the config file. This value is provided by the CN in the certificate in the form of agent_id@host_id.
  • Requires REview 0.23.x

0.1.0 - 2023-03-30

Added

  • Receive time series generation policy generated by the review and convert it to a model.
  • Request a network stream to giganto's publish for each model.
  • Send the generated time series to giganto's ingest.
  • Save the model's id and the last time the timeseries was sent to a file.