Pre-Release 1.1.0-rc1

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.1.0-rc1
• x86: https://cdn.cribl.io/dl/scope/1.1.0-rc1/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.1.0-rc1/linux/aarch64/scope

Pre-Release 1.1.0-rc0

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.1.0-rc0
• x86: https://cdn.cribl.io/dl/scope/1.1.0-rc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.1.0-rc0/linux/aarch64/scope

Pre-Release 1.1.0-tc1

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.1.0-tc1
• x86: https://cdn.cribl.io/dl/scope/1.1.0-tc1/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.1.0-tc1/linux/aarch64/scope

Fixes

AppScope 1.1.0 aims to improve usability of Go:

• #938 Makes it possible to capture appscope stack traces on segfaults or bus errors
• #918 Makes the output of configuration data more complete
• #880 Further automation of schema docs
• #498 Enable remote configuration over unix, edge, or non-tls tcp transports
• #461 Address intermittent test failures in github pipeline

Release 1.0.4

Maintenance Release

Assets are available attached to the release here and via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.4
• x86: https://cdn.cribl.io/dl/scope/1.0.4/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.4/linux/aarch64/scope

Fixes

AppScope 1.0.4 aims to resolve reported connectivity issues.

• #896 AppScope now creates a connection dedicated to transmitting payload data only if payloads are enabled.
• #665 AppScope now has safeguards to ensure that AppScope does not interfere with scoped processes exiting.
• #869 AppScope now uses an improved algorithm for omitting raw binary data from console events. The improved algorithm is better able to handle commands that switch back and forth between outputting text and outputting raw binary data to the console.

Pre-Release 1.1.0-tc0

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.1.0-tc0
• x86: https://cdn.cribl.io/dl/scope/1.1.0-tc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.1.0-tc0/linux/aarch64/scope

Fixes

AppScope 1.1.0 aims to improve usability of Go:

• #637 Adds support of go1.17 and go1.18
• #842 Addresses signal handling issue that we was causing crashes with aws-nuke and terraform

Pre-Release 1.0.4-rc1

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.4-rc1
• x86: https://cdn.cribl.io/dl/scope/1.0.4-rc1/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.4-rc1/linux/aarch64/scope

Fixes

AppScope 1.0.4 aims to resolve reported connectivity issues. rc1 addresses these specific issues:

• #896 Ensures that the connection dedicated to transmitting payload data is only created if payloads are enabled.

Pre-Release 1.0.4-rc0

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.4-rc0
• x86: https://cdn.cribl.io/dl/scope/1.0.4-rc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.4-rc0/linux/aarch64/scope

Fixes

AppScope 1.0.4 aims to resolve reported connectivity issues. rc0 addresses these specific issues:

• #665 Addresses edge case where TLS connections could prevent scoped applications from exiting, potentially hanging the applications.
• #869 We observed commands that switched back and forth between outputting text and outputting raw binary data on the console. We've improved the algorithm which attempts to omit raw binary data from console events.

Release 1.0.3

Maintenance Release

Assets are available attached to the release here and via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.3
• x86: https://cdn.cribl.io/dl/scope/1.0.3/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.3/linux/aarch64/scope

Fixes

AppScope 1.0.3 improves the quality of results when scoping Go executables:

• #738 When scoping Go executables, AppScope is now able to produce events from two more Go functions: unlinkat and getdents. AppScope already had the ability to interpose the equivalent system calls in C (unlink, unlinkat, readdir).
• #864 When scoping Go executables that call the openat function, AppScope no longer fails to collect fs.open events. This brings AppScope up to date with changes to openat in recent versions of Go.
• #862 When scoping dynamic Go executables, AppScope no longer falsely logs nonexistent errors.

Pre-Release 1.0.3-rc0

Pre-release

Assets are available attached to the release here and via Docker Hub and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.3-rc0
• x86: https://cdn.cribl.io/dl/scope/1.0.3-rc0/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.3-rc0/linux/aarch64/scope

Release 1.0.2

Maintenance Release

Assets are available attached to the release here and via Docker and the Cribl CDN at the links below.

• Docker: cribl/scope:1.0.2
• x86: https://cdn.cribl.io/dl/scope/1.0.2/linux/x86_64/scope
• ARM: https://cdn.cribl.io/dl/scope/1.0.2/linux/aarch64/scope

New Features and Improvements

AppScope 1.0.2 introduces fine-grained control of scope events output:

• #826 When you do filtering or matching with scope events, AppScope now shows all results by default. (The filtering/matching options are --sort, --match, --source, and --sourcetype.) Alternatively, you can limit the number of events with the --last option, e.g., scope events --last 20.
  • When you are not filtering or matching, scope events shows the last 20 results by default. Use --last to specify a different limit, or --all to see all results.
• #20 You can now specify one or more field names, with scope events --fields, and the output will show only those field names and their values alongside each event. (If you want to restrict output to only those events which contain the selected fields, add the --match option.)
• #813 You can use the --sort option to sort by a top-level field (i.e., a top-level element of the event body). By default, this returns events sorted in descending order, both for numeric values (such as timestamps) and string values (such as the values for the proc field). To sort in ascending order, add the --reverse flag.

Another usability improvement applies to the CLI as a whole:

• #611 Given combinations of arguments that don't make sense, scope now responds with an error.

Fixes

• #825 Output of scope events is now rendered on one line.
• #728 Added more check (_chk) functions to libscope.so, without which a scoped command could fail when that command had been compiled with a particular GCC toolchain.
• #787 Through improved HTTP pipelining support, AppScope now avoids some cases where the http_method field in HTTP events contained junk. This work continues in #829.
• #800 AppScope now checks for conditions which caused Java applications to crash when scoped, and avoids the crashes by applying fallback behaviors where necessary.