0.1.97

Bug Fixes

• Fix memory leaks related to the process table in libscap
• Fix compilation on kernel >= 3.19
• Fix a bug in ppm_access_ok that was causing some events to be dropped (especially on 32 bit)
• Fixed chisel descriptions
• Improved automatic installation script
• Minor bugfixes

New and updated features

• --chisel and --chisel-info autocompletion in bash

New and updated chisels

• subsecoffset: Visualize the subsecond offset time of system call execution

0.1.96

Bug Fixes

• socketcall on i386 kernels was always dropped in sampling mode
• Fix segmentation fault when using an invalid event name
• Support kernel 3.19
• Fixes to zsh and bash completions

0.1.95

Bug Fixes

• Fix a bug that could cause unnecessary lookups in /proc
• Fixed documentation for -cl parameter

0.1.94

Bug Fixes

• Improved performance of libscap during live captures
• Expand the sysdig-probe ring buffer size: now it's 8 MB per CPU (was 1 MB)
• Fix syntax error in fdtime_by chisel
• Fix syntax error in zsh completion
• Many minor bugfixes
• evt.latency was returning wrong values

New and updated features

• get_terminal_info chisel API function

New and updated chisels

• spectrogram chisel: Visualize OS latency in real time.

New and updated filter fields

• evt.buflen filter field

New and Updated events

• clone, execve, fork, vfork: return comm parameter to report the executable file name rather than guessing it from argv[0]

0.1.93

Bug Fixes

• Fixed memory leaks
• Many minor bugfixes

New and Updated Features

• -E/--exclude-users command line flag, to prevent importing user and group tables when the capture starts
• Buffer rendering on screen is now limited to 80 bytes unless -v is used

New and Updated Chisels

• Process name is printed in echo_fds header

New and Updated events

• procexit now returns the thread exit code
• sendfile
• quotactl
• setresuid
• setresgid
• setuid
• setgid
• getgid
• getegid
• getuid
• geteuid

0.1.92

Bug Fixes

• Improved parsing from /proc
• Improved dropping logic

0.1.91

Bug Fixes

• Corrupted trace files in case of processes with long arguments/environment (#266)
• Some long buffers could be truncated by the driver (#265)
• Issue with dkms that prevented the packaged driver from being updated under pseudo-random circumstances (d6b3691)
• Prevent a crash when dereferencing a high-numbered system call (890538e)

0.1.90

Bug Fixes

• Many minor bugfixes and performance improvements related to memory consumption

0.1.89

Bug Fixes

• Better parsing of kernel threads
• Improve responsiveness when reading from kernel
• Many minor bugfixes

New and Updated Features

• --print-base64: Print data buffers in base64

New and Updated Chisels

• spy_file: Intercepts all reads and writes to all files
• shellshock_detect: detects shellshock injections

New and Updated filter fields

• proc.env: The environment for a process

0.1.88

Bug Fixes

• Several improvements in the thread table management to avoid crashes in corner cases
• Many minor bugfixes

New and Updated Features

• sysdig’s thread table is now exposed to the chisels
• network port comparison in filters now supports the <, <=, > and >= operators
• -tD command line option: print the relative time from the previous event that matches the filter
• --version command line option: print the program version

New and Updated Chisels

• lsof: prints the open file descriptors for every process in the system, with an output that is similar to lsof
• netstat: prints the system network connections, with an output that is similar to netstat
• ps: lists the running processes, with an output that is similar to ps

New and updated chisel API functions

• sysdig.end_capture: causes sysdig to stop receiving events and makes it initiate the end of capture cleanup
• sysdig.get_thread_table: return the (optionally filtered) sysdig process table.

New and Updated filter fields

• evt.deltatime: delta between this event and the previous event
• evt.deltatime.s: integer part of the delta between this event and the previous event
• evt.deltatime.ns: fractional part of the delta between this event and the previous event