🚀 Breaking Changes

eCapture supports Pcap Filter Syntax, and you can use the pcap filter expression to filter network packets like tcpdump.

In the tls\gotls module, when the running mode is pcap, the pcap filter expression is supported, which can be set in the last parameter of the command line, for example:

ecapture tls -m pcap -i wlan0 -w save.pcapng host 192.168.1.1 and tcp port 443

What's Changed

• Update probe_bash.go by @sancppp in https://github.com/gojue/ecapture/pull/479
• docs: Optimized the error message in the gotls module.(fix: #482) by @cfc4n in https://github.com/gojue/ecapture/pull/484
• feat: Support pcap-filter expression for pcap mode by @Asphaltt in https://github.com/gojue/ecapture/pull/478
• chore: Pcap filter tidy,support ubuntu arm64 to make libpcap by @cfc4n in https://github.com/gojue/ecapture/pull/487

New Contributors

• @sancppp made their first contribution in https://github.com/gojue/ecapture/pull/479
• @Asphaltt made their first contribution in https://github.com/gojue/ecapture/pull/478

Full Changelog: https://github.com/gojue/ecapture/compare/v0.7.3...v0.7.4