version 1.0.0

debian/changelog

@@ -1,5 +1,5 @@
-picosnitch (0.14.1) unstable; urgency=low
+picosnitch (1.0.0) unstable; urgency=low
 
   * see releases on github for changes
 
- -- Eric Lesiuta <[email protected]>  Fri, 18 Aug 2023 00:00:00 +0000
+ -- Eric Lesiuta <[email protected]>  Thu, 21 Sep 2023 00:00:00 +0000

docs/index.md

@@ -114,7 +114,7 @@
   - visit [http://localhost:5100](http://localhost:5100) (you change this by setting the environment variables `HOST` and `PORT`)
 - Terminal user interface for browsing past connections
   - start with `picosnitch view`
-  - `space/enter`: filter on entry `backspace`: remove filter `h/H`: cycle through history `t/T`: cycle time range `u/U`: cycle byte units `r`: refresh view `q`: quit
+  - `space/enter/f`: filter on entry `e`: exclude entry `backspace/F/E`: remove filter `h/H`: step through history (time offset) `t/T`: cycle time range `u/U`: cycle byte units `r`: refresh view `q`: quit
 - Show usage with `picosnitch help`
 
 # [Configuration](#configuration)
@@ -147,13 +147,17 @@
   # will omit connections that match any of these from the connection log
   # domains are in reverse domain name notation and will match all subdomains
   # the process name, executable, and hash will still be recorded in record.json
+  "Log ports": true, # Log local and remote ports for each connection
   "Perf ring buffer (pages)": 256, # Power of two number of pages for BPF program
   # only change this if it is giving you errors (e.g. missed events)
   # picosnitch opens a perf buffer for each event type, so this is multiplied by up to 18
   "Set RLIMIT_NOFILE": null, # Set the maximum number of open file descriptors (int)
   # it is used for caching process executables and hashes (typical system default is 1024)
   # this is good enough for most people since caching is based on executable device + inode
   # fanotify is used to detect if a cached executable is modified to trigger a hash update
+  "Set st_dev mask": null, # Mask device number for open file descriptors (int)
+  # set to 0 to disable verification if it is giving you errors (e.g. FD cache errors)
+  # defaults to 0 if a btrfs partition is detected, otherwise 0xffffffff
   "VT API key": "", # API key for VirusTotal, leave blank to disable (str)
   "VT file upload": false, # Upload file if hash not found, only hashes are used by default
   "VT request limit (seconds)": 15 # Number of seconds between requests (free tier quota)

picosnitch.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 # picosnitch
-# Copyright (C) 2020-2022 Eric Lesiuta
+# Copyright (C) 2020-2023 Eric Lesiuta
 
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -57,7 +57,7 @@
 import psutil
 
 # picosnitch version and supported platform
-VERSION: typing.Final[str] = "0.14.1"
+VERSION: typing.Final[str] = "1.0.0"
 assert sys.version_info >= (3, 8), "Python version >= 3.8 is required"
 assert sys.platform.startswith("linux"), "Did not detect a supported operating system"
 

rpm/picosnitch.spec

@@ -1,5 +1,5 @@
 Name:           picosnitch
-Version:        0.14.1
+Version:        1.0.0
 Release:        1%{?dist}
 License:        GPL-3.0
 Summary:        Monitor network traffic per executable using BPF
@@ -76,6 +76,6 @@ install -D -m 644 debian/picosnitch.service %{buildroot}%{_unitdir}/%{name}.serv
 %endif
 
 %changelog
-* Fri Aug 18 2023 Eric Lesiuta <[email protected]> - 0.14.1-1
+* Thu Sep 21 2023 Eric Lesiuta <[email protected]> - 1.0.0-1
 - see releases on github for changes
 

snap/snapcraft.yaml

@@ -6,7 +6,7 @@ description: |
 confinement: classic
 grade: stable
 base: core22
-version: '0.14.1'
+version: '1.0.0'
 
 architectures:
   - build-on: amd64