eCapture v0.4.0 release (Linux x86_64/aarch64, Android kernel 5.5+).
Note
Support
Wireshark
to open directly. Do not need to setting upMaster Secrets
files.Capture
raw packet
by Traffic Control eBPF filter. AddedMaster Secrets
information into pcapng
withDecryption Secrets Block
(DSB).
Warning
change
loggerFile
flag as-l
from-w
, because-w
is reserved forWireshark
, and keep same as-w
fortcpdump
. useecapture -h
for help.
changemaster secrets
filename fromecapture_masterkey_[pid].log
toecapture_masterkey.log
.
What's Changed
- new feature: capture TLS 1.3 master secret by @cfc4n in #143
- user : echo String() or StringHex() by CLI argument. by @cfc4n in #149
- cli/cmd : clean up all probe while process exit. (#150) by @cfc4n in #151
- save as Pcapng files #145 by @cfc4n in #148
- user : Support writing pcapng files with Decryption Secrets Block (DSB). by @cfc4n in #153
Full Changelog: v0.3.0...v0.4.0