1.2.0 (Dec 13th, 2018)

New features:

  • New action pcap(struct sk_buff *, proto) where proto is one of the PCAP_* constants from /usr/lib64/dtrace/*/pcap.d. If tshark is installed, this produces formatted packet traces; if it is not, raw memory dumps are produced, as with tracemem(). If freopen() is used to redirect DTrace output to a file, the raw packets are written there.

  • Translator changes for the 4.19 kernel (also works with 4.20pre up to -6).

Bugfixes:

  • Fix a variety of small memory leaks.

  • Improvements to the testsuite.

Build-time:

  • Improve the generation of signal.d: work better with newer glibc versions.