0.7.0

Bug fixes

• Fix sysdig-probe for kernel 4.4
• Fix a remotely possible deadlock during ioctl calls
• Fix Kubernetes support when data returned from the API server is particularly big
• Minor bugfixes

New and updated features

• Spectrogram views in csysdig: spectro_all (System call latency spectrogram) and spectro_file (File I/O latency spectrogram)
• Ability to authenticate to a Kubernetes API server using a certificate, via -K <file_name> or --k8s-api-cert=<file_name>. Can also be specified via the environment variable SYSDIG_K8S_API_CERT
• Ability to sort columns in csysdig views using the keyboard
• --filter-proclist: apply the filter to the process table
• -M: add the possibility to stop collecting after X seconds
• evt.latency.quantized: 10-base log of the delta between an exit event and the correspondent enter event
• evt.latency.human: delta between an exit event and the correspondent enter event, as a human readable string (e.g. 10.3ms)

0.6.0

Bug fixes

• Properly compile under Windows and OSX
• Fix a potential kernel bug when accessing a parent process
• Minor bugfixes

New and updated features

• Full support to Kubernetes, even when saving events to a trace file
• semget system event
• access system event
• Automatically build sysdig-probe for boot2docker releases
• Properly filter process table serialization in a trace file when a process filter is used
• Some csysdig actions now ask the user for confirmation

0.5.1

Bug Fixes

• Fix connection to HTTPS Kubernetes API servers
• Properly compile bundled OpenSSL
• Fix sysdig-probe build on Linux 4.3
• Minor bugfixes

0.5.0

New and updated features

• Full Kubernetes support!
• --k8s-api command line option: specify the Kubernetes API server endpoint
• -pk: Kubernetes-friendly output format

New display/filter fields

• k8s.pod.name: Kubernetes pod name.
• k8s.pod.id: Kubernetes pod id.
• k8s.pod.label: Kubernetes pod label. E.g. 'k8s.pod.label.foo'.
• k8s.pod.labels: Kubernetes pod comma-separated key/value labels. E.g. 'foo1:bar1,foo2:bar2'.
• k8s.rc.name: Kubernetes replication controller name.
• k8s.rc.id: Kubernetes replication controller id.
• k8s.rc.label: Kubernetes replication controller label. E.g. 'k8s.rc.label.foo'.
• k8s.rc.labels: Kubernetes replication controller comma-separated key/value labels. E.g. 'foo1:bar1,foo2:bar2'.
• k8s.svc.name: Kubernetes service name (can return more than one value, concatenated).
• k8s.svc.id: Kubernetes service id (can return more than one value, concatenated).
• k8s.svc.label: Kubernetes service label. E.g. 'k8s.svc.label.foo' (can return more than one value, concatenated).
• k8s.svc.labels: Kubernetes service comma-separated key/value labels. E.g. 'foo1:bar1,foo2:bar2'.
• k8s.ns.name: Kubernetes namespace name.
• k8s.ns.id: Kubernetes namespace id.
• k8s.ns.label: Kubernetes namespace label. E.g. 'k8s.ns.label.foo'.
• k8s.ns.labels: Kubernetes namespace comma-separated key/value labels. E.g. 'foo1:bar1,foo2:bar2'.

New csysdig views

• Kubernetes Controllers
• Kubernetes Namespaces
• Kubernetes Pods
• Kubernetes Services

Misc

• Add a convenient USE_BUNDLED_DEPS CMake option to enable/disable all bundled dependencies at once.
• New build/runtime dependencies: libb64, libcurl, openssl.

Known issues

• The Kubernetes state is not yet serialized to a trace file, this will come over the next release. Thus, if you take a trace file, be sure to still use -k in conjunction with -r to make sure the Kubernetes data is fetched from the API server when reading it.

0.4.0

New and updated features

• csysdig view actions: press F7 or F8 while inside a csysdig view to see what actions are supported

Bug Fixes

• Fix compilation errors on non-Linux platforms
• Support Docker containers when running in a different cgroup root layout
• Minor bugfixes

0.3.0

New and updated features

• Support ia32 emulation on 64bit kernels, now you can finally dig into skype!
• New events: mount, umount
• New memcachelog chisel: show a log of memcached commands (get/set)
• New backlog csysdig view: show queues (backlog) utilization per process
• --unbuffered command line option: turn off output buffering
• Detect mesos containers (support is still limited)
• HTTP chisels now support UNIX sockets (e.g. Docker API)
• New section in the csysdig views files: hotkeys

Bug Fixes

• Minor bugfixes

0.2.0

Even if we're still on the 0.x series of sysdig, starting from this release we are adopting semantic versioning (http://semver.org/) so it will be easier to identify bugfix releases.

Bug Fixes

• Support Debian 7 as a host for the sysdig Docker container
• Minor bugfixes

New and updated features

• Port numbers will be automatically converted to service names (according to the services file on your platform) unless -N is specified
• New filter field fd.proto: matches the protocol (either client or server) of the fd
• New filter field fd.cproto: for TCP/UDP FDs, the client protocol
• New filter field fd.sproto: for TCP/UDP FDs, server protocol
• New filter field fd.lproto: for TCP/UDP FDs, the local protocol
• New filter field fd.rproto: for TCP/UDP FDs, the remote protocol
• New events: semop, semctl, ppoll
• Docker image now includes the RUN label to make it easier to run sysdig on Atomic Linux

0.1.104

Bug Fixes

• Fix improper access to socket structure during accept() (#427)
• Minor bugfixes (#416, #406)

0.1.103

Bug Fixes

• Update ncurses so it will compile on GCC 5
• Don't use GCC 5 inside the Docker container, because older kernels are still not ready
• Minor bugfixes

New and updated features

• httplog chisel: show a log of all HTTP requests
• httptop chisel: show top HTTP requests by: ncalls, time or bytes
• Improved the accept system event by adding queuelen and queuemax
• sysdig-probe can now compile on the EL5 kernel. Userspace application still requires a recent GCC, which can be obtained from the Redhat/CentOS developer toolset
• Support CPU hotplug: sysdig will just work if CPUs go up or down in your system, and will also generate an event when that happens
• Precompile sysdig-probe for most Ubuntu, Fedora, CentOS kernels

0.1.102

Bug Fixes

• Fix panic with some kernel versions
• Fix compiling errors on arm architecture
• Report execve args even if it fails
• Minor bugfixes on csysdig

New and updated features

• Support for decoding setns and flock syscall
• Parse O_CLOEXEC flag on open and related syscalls
• Parse CLONE_NEWUSER flag on clone
• Support truncated tracefiles
• Now sysdig can rotate tracing file when capturing, using -C, -e, -W, -G
• Better extraction/filtering capabilities for event related to multiple file descriptors, like poll
• Precompiled kernel modules for older coreos releases