diff --git a/CHANGELOG.md b/CHANGELOG.md index 4760f44ad..01e44b309 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -42,7 +42,7 @@ Start the keylog mode of eCapture first. ecapture tls -m keylog --keylogfile=ecapture_masterkey.log ``` -### 终端2 +### Terminal 2 Start the tshark tool by specifying tls.keylog_file as the captured key file by eCapture, named ecapture_masterkey. 再启动`tshark`工具,指定`tls.keylog_file`为eCapture捕获的密钥文件`ecapture_masterkey` @@ -63,7 +63,11 @@ Afterward, any software that uses the eCapture HOOK with OpenSSL libraries can a See [issue #432](https://github.com/gojue/ecapture/issues/432) for more detail. ## What's Changed - +* ignore connect symbol cant found. by @cfc4n in https://github.com/gojue/ecapture/pull/431 +* Add support for stripped go binaries by @h0x0er in https://github.com/gojue/ecapture/pull/426 +* splitting gnutls/nss module from tls module lists. by @cfc4n in https://github.com/gojue/ecapture/pull/434 +* user: custom mapSize flag. improve memory usage #433 . by @cfc4n in https://github.com/gojue/ecapture/pull/435 +* add the `model` flag to distinguish the captured modes, support keylog captured. by @cfc4n in https://github.com/gojue/ecapture/pull/436 **Full Changelog**: https://github.com/gojue/ecapture/compare/v0.6.6...v0.7.0 diff --git a/cli/cmd/root.go b/cli/cmd/root.go index 5ac8ab9a8..36396884c 100644 --- a/cli/cmd/root.go +++ b/cli/cmd/root.go @@ -92,7 +92,7 @@ func init() { //rootCmd.Flags().BoolP("toggle", "t", false, "Help message for toggle") rootCmd.PersistentFlags().BoolVarP(&globalFlags.Debug, "debug", "d", false, "enable debug logging.(coming soon)") rootCmd.PersistentFlags().BoolVar(&globalFlags.IsHex, "hex", false, "print byte strings as hex encoded strings") - rootCmd.PersistentFlags().IntVar(&globalFlags.mapSizeKB, "mapsize", 1024*5, "eBPF map size per CPU,for events buffer. default:5120. (KB)") + rootCmd.PersistentFlags().IntVar(&globalFlags.mapSizeKB, "mapsize", 1024, "eBPF map size per CPU,for events buffer. default:1024 * PAGESIZE. (KB)") rootCmd.PersistentFlags().Uint64VarP(&globalFlags.Pid, "pid", "p", defaultPid, "if pid is 0 then we target all pids") rootCmd.PersistentFlags().Uint64VarP(&globalFlags.Uid, "uid", "u", defaultUid, "if uid is 0 then we target all users") rootCmd.PersistentFlags().StringVarP(&globalFlags.LoggerAddr, "logaddr", "l", "", "-l /tmp/ecapture.log or -l tcp://127.0.0.1:8080")