Skip to main content

Spider system changelog

Available system releases​

Spider installation is done with a Helm chart.
Use the value in version column to load the appropriate version.

VersionDescriptionHelm chart
latestAlways latest8.0.0
2026.09.27MySQL + HTTP/2 + SSE and WebSocket messages + workload identity + com export + OTLP export + MCP server8.0.0
2026.08.17Redis, gRPC and Kafka parsing + automatic correlation + arm64 + licensing7.3.0
2026.05.13GUI modernization + L7 unifiedview + Waterfall view - BO modernization in GO + GRPC6.4.0
2026.01.14PostgreSQL live parsing and analysis views6.0.0
2025.09.05Technical release5.0.0
2025.05.31Service Accounts for third parties4.9.0
2025.05.18Security enhancements, Go upgrade, OpenSSL upgrade4.8.0
2025.04.12PKCS8, ArgoCD, Network usage4.7.0
2024.12.22Agents logs, UDP capture, local agents4.4.2
2024.11.23Improved TLS deciphering - TLS 1.2 & 1.34.2.0
2024.10.20Gocipher + Improved parsing quality4.1.0
2024.07.17Gossiper + bug fixes3.1.1
2024.05.13Whisperer creation form + TCP payload decode + Timezone + UX3.0.0
2024.04.22-2Public links + Data storage policies + UX improvements3.0.0
2024.03.10-2Bug fixes + UX improvements2.13.0
2024.03.05Access filters + bug fixes + UX improvements2.13.0
2024.02.18Health API + bug fixes + UX improvements2.11.0
2023.12.21Refactoring and bug fixes2.7.0
2023.12.04Parsing bug fixes + UI improvements2.4.2
2023.11.19Dashboard delivery + bug fixes2.4.0
2023.11.01Fixes in PODs attachments management in Controller2.3.0
2023.10.26Management of 'missings' in filters + bug fixes2.2.0
2023.10.18Add Daemonsets in Controllers + some UI fixes2.2.0
2023.10.03Fixes in config schemas to allow empty oidc providers array2.2.0
2023.09.21Redis memory & CPU optimisations2.1.0
2023.09.03-2Controller release2.0.0
2023.07.25OpenID Connect release
Benched at 200 000 HTTP coms /min		1.3.2
2023.06.07Spider compatible Helmchart release1.0.7
2023.05.11Plugins store releaseN/A

Available Gocipher releases​

Gocipher is the agent that captures TLS keys and send them.
It may be deployed through Docker, but also as a standalone binary.
The binary requires eBPF to be available on the Linux kernel of the system to observe.

VersionDescriptionamd64arm64
1.12.0Reacts to new containers within a seconddownloaddownload
1.10.3Dependencies updateddownloaddownload
1.10.2Reliable SERVER role on network usagedownloaddownload
1.10.1Robust capture loop + kretprobe slotsdownloaddownload
1.10.0Network usage transport + UDP directiondownloaddownload
1.9.5Go crypto/tls capture + arm64downloaddownload
1.8.3Go 1.26.3download-
1.8.2Go 1.25.1 + Manage ephemeral processes in containersdownload-
1.7.0Perf improvementsdownload-
1.6.0Go upgrade + OpenSSL coveragedownload-
1.5.0Network usagedownload-
1.3.3TLS 1.2 + better observabilitydownload-
1.0.0First release of Gocipherdownload-

Available Gossiper releases​

Gossiper is the agent that captures network communications and send them.
It may be deployed through Docker, but also as a standalone binary.
The binary requires libpcap to be available on the system to observe - when you choose LIBPCAP capture mode.

Two versions are built:

  • For libc 2.23
  • For libc 2.35
VersionDescriptionamd64arm64
7.14.1Dependencies updateddownloaddownload
7.14.0Oversized packet lots + longer retransmission windowdownloaddownload
7.13.0Capturing controller stamped on the data pathdownloaddownload
7.12.0ServerHello extraction + arm64downloaddownload
7.11.0Go 1.26.3 + GRPC to serverdownload-
7.7.0Go 1.25.1download-
7.6.0Perf improvementdownload-
7.5.0Go upgradedownload-
7.4.0Rate limiter + support PKCS8download-
7.3.0 libc 2.23Special version for old libc (Ubuntu 16.04)download-
7.3.0UDP + Robustness + Spider server IP change mgtdownload-
7.1.4Decode TLS packets to extract client randomdownload-
7.0.0First release of Gossiper, as a major version of Whispererdownload-

Tools​

2026​

  • 2026-10
    • New - Spider CLI - MongoDB: spider search|get|stats|aggs|outliers mongo, with --command, --db, --collection, --user, --error-kind and --txn filters.
      • spider get mongo <id> req|res content prints a side as Extended JSON.
      • spider mongo cursor <comId> summarises a cursor: outcome, batches, documents, wall and server time.
      • MongoDB is part of spider search l7, --type mongo and spider add link --view mongo.
    • New - MCP server - mongo type on spider_search, spider_stats, spider_aggs, spider_outliers and spider_get, and the spider_mongo_cursor tool.
      • spider_get returns command and reply documents as untrusted Extended JSON, only with payload access.
    • New - spider-mon CLI - MongoDB parsing status (mongo_status), queues, processing speed and redis-mongo keys.
    • New - Spider CLI - spider templates suggest|apply: request templates and tags suggested from a whisperer's captured traffic by the new Advisor service, then applied to the whisperer's configuration (apply is a dry run unless --yes).
      • HTTP: URI templates, request and response header tags, JSON body-field tags.
      • PostgreSQL (--protocol psql): templates from the SQL statement's shape, and tags on query columns.
      • Redis (--protocol redis): templates from the command and key pattern.
      • Review of the whisperer's existing rules (shadowed, too broad, redundant or broken rules) and changes applied as anchored operations (insert, replace, reorder) with a dry run: spider templates apply --proposals <ids> --dry-run. Suggestions need read access to the whisperer's configuration and fail with a clear error (403/404 when the whisperer is out of the caller's scope, 502 otherwise).
    • Imp - Spider CLI and Advisor - spider templates suggest --protocol also takes mysql, kafka, mqtt, mongo and grpc: statement, topic, shape and method templates, plus column, clientId, Kafka record-field, MQTT payload-field, db/collection, gRPC metadata and message-field tags. Payload, record and message-field tags need a content schema bound on the whisperer and payload access (plain-JSON MQTT payloads need no binding with an up-to-date MQTT parser). Kafka, MQTT and gRPC suggest no template when the default one already groups the traffic; MySQL and MongoDB always name their shapes, and MongoDB also offers one rule per command and collection for the shapes no suggested name covers, always applied after the rules of that command and collection. Driver housekeeping is never suggested.
    • New - Spider CLI, MCP server and Spider Claude Plugin - MQTT communications and the topic map
      • MQTT is a first-class data type, with --topic, --template, --client-id, --username, --packet-type, --qos and --direction filters; get mqtt <id> <req|res> content returns the raw payload.
      • spider topic-map mqtt (MCP: spider_topic_map) shows who publishes to which topic and who receives it, with flags (QoS downgrade, failed or silent subscription, orphan channel, errors, missing acknowledgement); --flagged keeps only the problems.
    • New - Spider CLI, MCP server and Spider Claude Plugin - Redis and Kafka topic maps
      • spider topic-map redis and spider topic-map kafka (MCP: spider_topic_map with type redis or kafka), with the same --flagged and --edge-cap options as MQTT.
      • --group-by: Redis workload, client-name or user; Kafka workload or client-id.
    • New - spider-mon CLI - MQTT parsing status (mqtt_status), queues, processing speed and redis-mqtt keys.
    • Fix - Spider CLI and MCP server - spider_list_teams no longer fails with 422, and lists only live teams (deleted teams are excluded unless include_deleted is passed).
  • 2026-09
    • New - Spider CLI, MCP server and Spider Claude Plugin
      • MySQL is a first-class data type.
      • Websocket and SSE.
      • DNS is a first-class data type, with --qname, --qtype and --rcode filters.
      • spider search tcp --type filters transport sessions by kind: TcpSession, UdpFlow or UdpConversation.
    • New - spider-mon CLI - DNS parsing status (dns_status), queues and processing speed.
    • Imp - Spider CLI and MCP server
      • outliers psql also reports request and response size outliers, like the other protocols.
      • the status part of outliers lists the error codes (400-599) present, with their count and share of traffic.
      • report a whisperer, gocipher or controller that stopped reporting as DISCONNECTED, as the Analysis UI does, instead of its last recorded state; gociphers now carry their live status.
  • 2026-08
    • New - Spider CLI - spider detach, the counterpart of spider attach.
    • Fix - Spider CLI - spider login -p <profile> authenticated the default profile, not the named one.
  • 2026-06
    • New - Spider CLI
      • redis, grpc and kafka are now first-class data resources.
      • spider login - log in via the browser. No need to store credentials localy.
      • spider login oidc - OIDC + SSO proxy authentication
      • spider login proxy - SSO proxy session cookies
      • spider logout
      • spider search l7 (plus stats, aggs and outliers l7) - Query all layer-7 communications at once
    • New - spider-mon CLI - Redis, gRPC and Kafka parsing status, processing speed.
  • 2026-05
    • New - spider-mon CLI for querying Spider monitoring data
    • New - spider-mon Claude Code plugin: skills + agents to review self-monitoring, compare periods, decode alerts, propose tuning.
  • 2026-04
    • New - Spider CLI (spider): standalone binary for querying captured traffic from the command line
    • New - Spider Claude Plugin: Claude Code plugin for autonomous agent-driven traffic analysis

Helmcharts​

2026​

  • 2026-10
    • spider-analyzer - 8.1.0
      • New - global.flips.mongoParsing deploys MongoDB parsing: mongo-parser, mongo-read, poller-mongo, redis-mongo and the MongoDB indices. Off by default.
      • New - global.flips.advisor deploys advisor (Advisor-Go): template and tag suggestions from captured traffic. Off by default; needs the ADVISOR licence capability (TEAM).
      • New - global.flips.mqttParsing deploys MQTT parsing: mqtt-parser, mqtt-read, poller-mqtt, redis-mqtt and the MQTT indices. Off by default.
  • 2026-09
    • spider-analyzer - 8.0.0
      • New - global.flips.dnsParsing deploys DNS parsing: dns-parser, dns-read, poller-dns, redis-dns and the DNS indices. Off by default.
      • New - @type is indexed on the TCP session index, to tell TCP sessions from UDP flows and conversations.
      • New - global.flips.mysqlParsing deploys MySQL parsing.
      • New - comReplicas on each streamedData/uploadedData policy: a separate replica count for coms indices.
      • New - global.flips.feedback: the Send feedback button in Network-View. On by default, deploys nothing.
      • Fix - Traefik's dashboard and its unauthenticated API are no longer exposed by global.isDev.
        • They now need the new global.traefikDashboard, off by default.
  • 2026-08
    • spider-analyzer - 8.0.0
      • New - global.cluster.ipRanges: the cluster's internal CIDR ranges, the cidr rung of workload resolution.
      • New - global.flips.otelExport and the global.otelExport block: the OTLP export deployment.
      • New - Workload identity, the capturing controller, transport and directionConfidence are mapped.
      • New - parsers.web is mapped on the TCP session index, with parsers.web.itemsByProtocol.
      • Imp - web-write renamed web-parser; the self-monitoring topology map follows the rename.
      • Imp - The grpc-parser deployment is retired.
      • Imp - The gRPC parsing-status index template, its lifecycle policy and its probes are removed.
    • spider-analyzer - 7.3.0
      • Elastic stack 9.5.1, and ECK 3.5.0 for the optional namespace-scoped operator
      • Traefik v3.7 (CVE-2026-71327, CVE-2026-71325)
      • Redis 8.10, pinned to an exact image tag rather than a floating one.
      • Kafka record headers stored unindexed on spider-kafkacomcontent-*
      • Fix - spider-raw-ciphers-status-* named a lifecycle policy the chart never creates.
  • 2026-06
    • spider-analyzer
      • Redis Parsing
        • Deploy Redis parsing components
        • redisParsing feature flip
        • Redis parsing on Self-Monitoring
      • gRPC parsing
        • Deploy gRPC parsing components
        • grpcParsing feature flip
        • gRPC parsing on Self-Monitoring
      • kafka parsing
        • Deploy Kafka parsing components
        • kafkaParsing feature flip
        • Kafka parsing on Self-Monitoring
  • 2026-05
    • spider-analyzer - 6.4.0
      • Go services, GRPC and Playground APIs
      • Schemas service deployment + spider-schemas index mapping
      • Schemas service routed through the gateway (/schemas/*)
      • Schemas + ES Schemas surfaced on the Self-Monitoring main dashboard
      • spider-go-service sub-chart gains the same init-es initContainer pattern as spider-service
  • 2026-03
    • spider-analyzer - 6.3.0
      • New Multi-Read service + corresponding ES aliases
  • 2026-02
    • spider-analyzer - 6.2.0
      • Optional built-in ECK operator: Spider can install a namespace-scoped ECK (v3.2) alongside itself - for clusters with no existing operator, or with a namespace-scoped one that does not watch Spider's namespace. Preflight guards abort the install if a conflicting operator is detected.
  • 2026-01
    • spider-analyzer - 6.1.0
      • New Pg Upload service

2025​

  • 2025-11
    • spider-analyzer - 6.0.0
      • Deploy postgresql parsing components
      • Add feature flip to deploy those or not to
  • 2025-09
    • spider-analyzer - 5.0.1
      • Accept special chars in Redis passwords
      • Move redis.conf files to secrets
    • spider-analyzer - 5.0.0
      • ES 9
      • Redis 8 + Authenticated connections
      • Allows deploying 2 Spider system on same cluster (for tests)
  • 2025-05
    • spider-analyzer - 4.9.0
      • Manage Service Accounts
    • spider-analyzer - 4.8.0
      • Use kube projected tokens to secure first service calls
      • Use refresh tokens to enhance security
  • 2025-03
    • spider-analyzer - 4.7.0
      • Possibility to use a proxy for Docker registry
    • spider-analyzer - 4.6.0
      • Manage Network Usage
      • New indices
      • New API endpoints
      • New configurations
      • Upgrade to ES 7.17.28
  • 2025-01
    • spider-analyzer - 4.5.0
      • manage renewal of security keys for Gocipher & Controller
      • change default keys to PKCS#8
    • spider-analyzer - 4.5.0
      • Whisperer default config endpoint
      • packetsDiscarded field on Whisp status

2024​

  • 2024-12

    • spider-analyzer - 4.4.2
      • WHISPERER env variable on Whisperer sidecars
      • APIs to get logs from Controllers
      • Configure restore job to restore Ciphers
      • Added local agents flags to Whisp, Ciphers, Controls and Customers indices
      • Optimised resource requests
    • spider-gocipher - 1.1.1
      • GOCIPHER & CONTROLLER env variables for Gociphers
      • Optimised resource requests
    • spider-controller - 1.5.2
      • RBAC to access logs
      • Optimised resource requests

  • 2024-11

    • spider-analyzer - 4.2.0
      • Purge Gocipher statuses older than 7 days

  • 2024-10

    • spider-analyzer - 4.1.0
      • Include Gocipher Helmchart
      • New services to manage Gocipher and TLS keys
    • spider-controller - 1.4.0
      • Manage several Controllers on same cluster
    • spider-gocipher - 1.0.0
      • Initial release

  • 2024-07

    • spider-analyzer - 3.1.1
      • Upgrade controller embedded helmchart
    • spider-controller - 1.3.1
      • Use non privileged port for dns port in controller port

  • 2024-06

    • spider-analyzer - 3.1.0
      • Allow deploying Gossipers instead of Whisperers for debug and demo

  • 2024-04

    • spider-analyzer - 3.0.0
      • Data storage policies - ability to define policies for TTL of whisperer data
        • Helm chart values breaking changes
        • Configuration of pollers, whisp service and network view UI
      • Index migration for DSP
    • spider-analyzer - 2.15.0
      • Link service configuration changes for Public-Links deployment
        • Changes in Login, Links, NetworkView and many services
      • Index migration for link

  • 2024-03

    • spider-analyzer - 2.14.0
      • Increase limits for development only for images of which the sources are injected
    • spider-analyzer - 2.13.0 + spider-controller - 1.3.0
      • Reduce daemonsets and init containers requests and limits
      • Easier management of mounting dev folders when doing local dev

  • 2024-02

    • spider-analyzer - 2.11.0 + spider-controller - 1.2.0
      • Allow overriding imagePullPolicy for local dev
      • Add targets for backup and restore jobs
      • Upgrade Traefik

  • 2024-01

    • spider-analyzer - 2.8.1
      • Health API exposing Spider probes status
      • Expose Traefik dashboard in /dashboard when isDev is true
      • Add option to activate auth on the API

2023​

  • 2023-12
    • spider-analyzer - 2.7.0
      • Refactoring of Licence management
      • Bug fixes
      • Use version in Whisperer deployments
  • 2023-11
    • spider-analyzer - 2.4.0
      • Add flag to avoid localController resource generation for manifest / deployment stability in Argo (dates generation)
  • 2023-10
    • spider-analyzer - 2.3.0
    • spider-controller - 1.1.0
      • Improvements for local development deployments
  • 2023-10
    • spider-analyzer - 2.2.0
      • Better management of setup without secured smtp
      • Better management of setup without OIDC auth
  • 2023-09
    • spider-analyzer - 2.1.0
      • Added Controller component
      • Setup local-controller by default
      • Move Whisperer and Controller to public images
      • Removed Whisperer registry auth
      • Possibility to compress redis payload and avoid compression on main APIs used
    • spider-controller - 1.0.0
      • Allow to deploy a controller on any K8S
  • 2023-07
    • 1.3.2 - Restart services pushing demo data when demo flag changes
    • 1.3.0 - Allow changing any default service configuration using extraConfiguration key
    • 1.2.0 - Changed application configurations from JSON to YAML. Transform into JSON in Helm.
    • 1.1.0 - Add OIDC providers parameters
  • 2023-06
    • 1.0.7
      • Fix nodeport for debug.
      • Change resources RAM limit for microservices to allow debug of UIs.
      • Remove automatic restart of Config on update.
    • 1.0.6 - Add checksum for demo whisperer config
    • 1.0.5 - Refactor extra-ca-certs
    • 1.0.4 - Restructure Values to allow compute checksum of secrets for automatic redeploy on secret/config changes
    • 1.0.3 - Fix ingress host variable! Ingress was not working, but ingress controller failed to see the change :-/
    • 1.0.2 - Fix self-monitoring config file
    • 1.0.1 - Fix SMTP settings and add smtp.type value
    • 1.0.0 - Helmchart setup with demo, dev, debug, restore backup...

Gociphers​

2026​

  • 2026-10 - v1.12.0

    • Imp - A new container is hooked within about a second instead of up to 10 seconds: the list of containers to watch is held open by the controller and answered as soon as it changes. Older controllers keep the 10-second polling.

  • 2026-10 - unreleased

    • Imp - Gocipher: OpenSSL version detection and routing for 3.5.x, 3.6.x and 4.0.x (struct offsets checked identical to 3.5.0; live capture validated on 3.5.7, 3.5.8 (musl), 3.6.5, 4.0.1 and 4.0.3, TLS 1.2 and 1.3). Debian 13 / python:3.12 (OpenSSL 3.5.7) was mis-detected as 3.0.4 and its TLS secrets were not captured; a libssl whose version cannot be read is now reported instead of guessed. Node.js 22.20+, 24.5+ and 26 (OpenSSL 3.5.x) use the same program
    • New - Key log fallback capture for runtimes without a hookable TLS library (Envoy/Istio sidecars, rustls, static BoringSSL): the workload writes its TLS key log to /dev/null, Gocipher reads it from the kernel. Opt-in per whisperer, off by default. Status hint NO_KEYLOG_RECEIVED when nothing is received after 5 minutes.
    • New - TLS secrets capture for Java applications (JSSE), JDK 8, 11, 17 and 21; TLS 1.2 and TLS 1.3 sessions are decrypted. ON by default for workloads with TLS capture active (an agent is injected into the JVM); kill switch clients.capture.jvm.enabled: false.

  • 2026-09 - v1.10.3

    • Fix - Dependencies updated for vulnerabilities.

  • 2026-09 - v1.10.2

    • Fix - The SERVER role of an accepted connection is recorded from the end of the handshake, not from a return probe that could be missing.
    • Fix - Network usage arrows no longer come out inverted for servers on ephemeral ports, such as gRPC on 50051.

  • 2026-09 - v1.10.1

    • Fix - Blocked accept() and recv() calls could exhaust the kernel's return-probe slots, so no SERVER role was recorded.
    • Fix - A stalled status channel no longer freezes the capture loop and the watch list updates.
    • Imp - An empty watch list is now logged with the URL that produced it, rate-limited to once every 5 minutes.

  • 2026-08 - v1.10.0

    • Network usage records each flow's transport, tcp or udp, read from the socket's own protocol.
    • UDP client/server direction comes from the socket's state, not from comparing port numbers.
    • cilium/ebpf updated from v0.16.0 to v0.22.0, clearing advisory GO-2026-6238.
    • Never send a TLS secret with no version.
    • A batch of TLS keys accepted only in part (HTTP 207) now counts as delivered.

  • 2026-08 - v1.9.5

    • Fix TLS capture stopping for good after the watched list changed.
    • Fix whisperer configurations being lost when a delivery was interrupted, the next fetch short-circuiting on "no change in config".

  • 2026-07 - v1.9.4

    • Say why TLS capture did not start. The three early returns that stopped capture (no BASIC capability, no TLS_DECRYPT, and tlsKeys.track disabled by the server) used to return silently. They now log, with the licence status reported by the server.

  • 2026-07 - v1.9.3

    • Fix a startup deadlock. When TLS capture did not start (unlicensed or disabled), the job fetching the to-watch list blocked forever on its first non-empty send, because the capture session it writes to is its only consumer and had not been started. The list was fetched exactly once and never refreshed.

  • 2026-07 - v1.9.2

    • arm64 support. Gocipher now builds and captures on arm64 (aarch64), for all three modes (OpenSSL, Node.js and Go crypto/tls) under both glibc and musl. The Go handler decodes the arm64 ABIInternal register file; the OpenSSL struct offsets are identical to x86_64 on every supported version. Validated live on AWS Graviton (kernel 6.8) with every parsed protocol decrypting. Container image only - the standalone tarball below is still x86_64.
    • Fix Network Usage map showing spurious "port 0" links (and a 0.0.0.0 node). Flows whose server port could not be resolved (unconnected UDP, and packets read around connection setup/teardown) are no longer reported.

  • 2026-07 - v1.9.1

    • Fix Network Usage map showing double-sided arrows between services that only talk one way. Client/server roles are now determined from the connection handshake (connect/accept) instead of guessing from port numbers, which was wrong for servers listening on high ports (e.g. gRPC).

  • 2026-06 - v1.9.0

    • Capture TLS master secrets from Go programs that use the standard library crypto/tls (not OpenSSL)
    • Fix out-of-memory kills during startup discovery.
    • A single agent could get wedged on a half-dead keep-alive connection to the hub (repeated 502 Bad Gateway). Retry in place.

  • 2026-05 - v1.8.3

    • Go 1.26.3

  • 2026-01 - v1.8.2

    • Do not start network usage capture when URL is not defined in environment
    • Manage ephemeral processes in containers when doing discovery

2025​

  • 2025-10 - v1.8
    • Upgrade to Go 1.25.1
  • 2025-09 - v1.7
    • Add randomization to Network Usage sending to Controller to smoothen load
    • Add DNS cache for outbound requests
  • 2025-05 - v1.6
    • Upgrade to Go v0.24. Improved performance.
    • Added management of OpenSSL versions: 3.3.0 -> 3.3.3, 3.4.0 -> 3.4.2, 3.5.0
    • Added management of Node OpenSSL embedded versions: 1.1.1a -> 3.0.16, included +quic versions
  • 2025-03 - v1.5
    • Capture and send Network usage
    • Manage service activation options in config
    • Optimise memory allocation for TLS capture
  • 2025-01 - v1.4
    • Manage PKCS#8 private key format

2024​

  • 2024-11 - v1.3
    • Extract TLS1.2 mastersecret and manage Mozilla recommended cipher suites
    • Extract EncryptThenMac flags from TLS sessions
  • 2024-10 - v1.0
    • First release
    • Capture TLS keys using eBPF
    • TLS 1.3 support from OpenSSL 1.1.1 to 3.0.x
    • Supports targets as containers, pid or executable path
    • Complete with status, multi targets etc.

Gossipers​

2026​

  • 2026-10 - v7.16.1
    • Fix - An attached gossiper whose token expired before its first configuration now exits instead of hanging.
      • It retried the expired token for ever, with no capture, and Kubernetes never restarts an ephemeral container.
      • Typical trigger: a DNS or network outage longer than the attachment time-to-live.
    • Fix - A token renewal failing on the network is retried every 5 seconds instead of every millisecond.
  • 2026-10 - v7.16.0
    • New - Per-port TCP session idle timeout (client.tcpSessions.portTimeouts), set by Whisps from server.mqtt.idleTimeout.
  • 2026-10 - v7.15.0
    • New - UDP sessions: datagrams are grouped into UdpFlow and UdpConversation transport sessions, so they can be parsed.
      • Off by default, per whisperer: client.udpSessions.track.
      • A UDP branch is added to the capture filter, disjoint from the TCP one.
    • New - On QUIC ports, the client random, server random and cipher are read from the Initial packets, so TLS keys link to the UdpFlow.
  • 2026-09 - v7.14.1
    • Fix - Dependencies updated for vulnerabilities.
  • 2026-08 - v7.14.0
    • Fix - A long one-way stream stopped being captured after 10 MB, silently and permanently.
    • Imp - Retransmitted packets are matched to their original packet lot over a much longer window.
  • 2026-08 - v7.13.0
    • Stamp the capturing controller on every session and packet.
    • Fix - A malformed TLS ClientHello can no longer take capture down.
    • Fix - gopacket updated to v1.6.1, closing two remote denial-of-service advisories.
  • 2026-06 - v7.12
    • Capture ServerHello serverRandom + cipher id into session handshakes
  • 2026-05 - v7.11
    • Go 1.26.3
    • GRPC with for packets and tcp sessions

2025​

  • 2025-10 - v7.7
    • Upgrade to Go 1.25.1
  • 2025-09 - v7.6
    • Add DNS cache for outbound requests
  • 2025-05 - v7.5
    • Upgrade to Go v0.24. Improved performance.
  • 2025-01 - v7.4
    • Manage PKCS#8 private key format
    • Throughput limiter to set a max of x MB/min of traffic capture

2024​

  • 2024-12 - v7.3
    • Parses packets UDP layer to get src and dst ports
  • 2024-11 - v7.2
    • Avoid restarting when DNS calls fails (when contacting Controller)
    • Check for server Ip change and restart Capture in such a case
    • Manage several Ips for Spider server
  • 2024-11 - v7.1
    • Manage AF_PACKET metrics v3
    • Parse TLS application layer to extract client random
    • Add client random to TCP sessions
  • 2024-06 - v7.0
    • New agent in Golang
    • All features from Whisperers except
      • Pod name resolution (done by Controller)
      • Host preloading
      • VXLan
    • Lighter, less resource usage, faster
    • Manage new method of Capture: AF_NET
      • Accepts it in configuration
      • Reports it in status

Whisperers (deprecated)​

2024​

  • 2024-02 - v6.2
    • Fix to allow defining DNSCACHE_HOST using a hostname rather than an IP at start. Hostname is resolved on regular DNS.
  • 2024-01 - v6.1
    • Report meaningful status when starting without license
  • 2024-01 - v6.0.5
    • Changed API names

2023​

  • 2023-10 - v6.0.4
    • Changed the default value for local hostname of whisperer to instanceId (on Kube - the pod name)
  • 2023-09 - v6.0
    • Manage ephemeral whisperers
      • Initial connection by token + renewal
      • Allow to use controller DNS
        • To resolve Pods IPs and names.
        • To connect to Spider (no need for Host Aliases)
        • Uses DNSCACHE_HOST & DNSCACHE_PORT env variables
        • If DNSCACHE_HOST is a hostname, it is resolved on standard DNS first.
      • Attachment status job checking Controller if we should stop whisperer
      • Status content upgraded
    • New WATCH_K8S_PODS to tell if we should not watch for k8s pods, even if not ephemeral (when = 0)
    • Manage limited time Attachments
    • Public image
  • 2023-06 - v5.7
    • When DNS answers several names for a single IP, take first one in alphabetical order

2022​

  • 2022-11 - v5.6
    • New - Upgrade to Node 18
    • New - Smaller docker image
    • New - New build target: i386 for 32 bits systems
    • New - When in Kubernetes env, connect to Kube API to fetch and cache namespaced pod list to resolve PODs IPs instead of using DNS
  • 2022-11 - v5.5
    • Imp - Improve queue management when server is under pressure
  • 2022-01 - v5.4
    • Imp - Adjust packetLot to -2 when packet is late - after next pL
  • 2022-01 - v5.3
    • Imp - Add relativeAck to packets
  • 2022-01 - v5.2
    • Imp - Add option not to capture / send packet without data to spare CPU and network.
    • Imp - Do not ask for parsing of packets belonging to a packetLot over a certain size
  • 2022-01 - v5.1
    • New - Option to avoid duplicated Tcp sessions when capturing both sides of the same communication
  • 2022-01 - v5.0
    • Imp - Parsing v2 - New format of Packet and TcpSession

2021​

  • 2021-09 - Imp - Upgrade to Node 16
  • 2021-02 - Imp - Webpack bundling

2020​

  • 2020-05 - Imp - Default filters not to capture communications to Spider servers
  • 2020-03 - Imp - Upgrade to Node Pcap v3
  • 2020-03 - Imp - Upgrade to Node 12

2019​

  • 2019-07 - Imp - Upgrade to Node 10 and migration to async await
  • 2019-07 - New - Whisperers send their version to BO
  • 2019-02 - New - Add hostnames to TCP sessions

2018​

  • 2018-12 - Imp - Better DNS reverse query
  • 2018-12 - New - Host preloading
  • 2018-11 - New - Token renewal job
  • 2018-08 - New - Circuit breakers on CPU & RAM
  • 2018-08 - New - Wait for IP resolving + track unresolved parameters
  • 2018-05 - Imp - Total error counts for monitoring
  • 2018-02 - New - Custom DNS / standard DNS

2017​

  • 2017-10 - New - Whisperer status sent to BO
  • 2017-09 - New - Remove control
  • 2017-09 - New - Queues to buffer sending packets and sessions
  • 2017-09 - New - Hosts filtering
  • 2017-06 - New - Custom reverse DNS
  • 2017-06 - New - VXLan parsing
  • 2017-03 - New - Slowness factor when playing files
  • 2017-01 - Imp - Technical improvements: Joi, Bunyan...

2016​

  • 2016-12 - New - Docker
  • 2016-06 - Imp - Update to Node 6
  • 2016-04 - New - Get config from Spider, API key, JWT
  • 2016-03 - Imp - Refactor, technical dev, move to promises
  • 2016-02 - New - Initial release

Controllers​

2026​

  • 2026-10 - v3.3.0
    • Imp - /whisperers/for/node answers as soon as the list of a node changes (long polling, ?since=<version>), instead of waiting for the next poll of the Gocipher.
    • Imp - A gossiper being started is listed to the Gocipher immediately, so TLS keys are captured before the gossiper sees its first packet; a gossiper that terminated or cannot start is not listed.
  • 2026-10 - v3.2.4
    • Fix - A workload restarted right after a detach is no longer re-attached.
      • The old pod's gossiper, still running for a few seconds, made the controller report the attachment ATTACHED again.
  • 2026-10 - v3.2.3
    • Fix - An attachment whose whisperer was deleted is now detached; before, the controller retried it every 30 seconds and logged an error each time, forever.
    • Fix - Dependencies updated for vulnerabilities (Go 1.26.9).
  • 2026-09 - v3.2.2
    • Fix - The controller's Service IP is read from the Kubernetes API, with DNS as fallback, and retried instead of tried once at startup.
    • Fix - Attachments of already-cached pods are resynced once the Service IP is known.
    • Fix - Without the IP, every gossiper was dropped and /whisperers/for/node answered [], so Gociphers captured no TLS key until a restart.
    • Fix - Dependencies updated for vulnerabilities.
  • 2026-09 - v3.2.1
    • Fix - An attachment past its time-to-live is now detached; since 3.0 its whisperer kept capturing.
  • 2026-09 - v3.2.0
    • New - The controller republishes its whole workload map on demand, when Controls asks for it.
  • 2026-08 - v3.1.0
    • New - The controller publishes its IP-to-workload map, as validity intervals.
    • New - Network usage attributes Service traffic to the pods behind the Service.
    • New - Network usage carries transport (tcp/udp) and directionConfidence (resolved/heuristic).
    • New - client.networkUsage.flushMargin (default PT45S): how long past a minute's end to wait.
    • Imp - A ClusterIP hop is no longer counted twice.
    • Imp - A batch arriving after its minute was published is folded into the next publish, not discarded.
  • 2026-07 - New - A local agent now stops when it finds more than one node in the cluster. It is meant to run on a single-node setup.
  • 2026-05 - v3.0.1
    • Go 1.26.3
  • 2026-03 - v3.0.0
    • Recoded in Go, drop in replacement

2025​

  • 2025-12 - v2.3.2
    • Avoid resetting in memory state regularly, not needed anymore
    • Enforce object allowed parents to prevent Zalando operator to ruin the internal state.
  • 2025-10 - v2.3.1
    • Adapt to regression in Kubernetes lib on Error management
  • 2025-08 - v2.3
    • Improve reactivity by giving back the hand to event loop more often when integrating network usage
  • 2025-08 - v2.2
    • Imp - Technical debt
  • 2025-03 - v2.0
    • New - Gather network usage from Gociphers, enrich them and send to Controls
    • New - Configuration option for cluster PODs IP range(s)
    • Imp - Overwrite security context when spawning Whisperers to allow root execution even when POD does not allow it
    • Imp - Manage new SideCar pattern introduced with Kubernetes 1.29 when looking for sidecars Whisperers
  • 2025-01 - v1.8
    • Imp - Enhance status with Sidecars, Gociphers and Nodes IPs
    • New - Stop Controller if localAgent and more than 1 node. Stop running attachments and forbid new ones.

2024​

  • 2024-12 - v1.7
    • Imp - Manage many Controllers on same host / cluster - do not send not managed attachments to Gocipher
  • 2024-12 - v1.6
    • New - Give Sidecar Whisperers in API for Gocipher to allow TLS deciphering for Sidecars
    • New - Track Gociphers & Sidecar Whisperers
    • New - Allow getting logs from Controller, Attachments, Sidecars & Gociphers
    • New - When an Ephemeral Whisperer fails twice in 5 minutes, the Controller stops restarting it to avoid overloading the POD manifest
  • 2024-10 - v1.5
    • Imp - Node 20, Alpine 3.20
    • New - API for Gocipher to get list of Pods to target
  • 2024-07 - v1.4
    • New - Automatic reset of state every 5 min
  • 2024-06 - v1.3
    • Imp - Use standard user in container
    • New - Support Gossiper agent deployment
  • 2024-02 - v1.2
    • Imp - Use k8s resourceversion to capture past events when reconnecting. Manage restart from scratch when resourceVersion is too old.
  • 2024-02 - v1.1.1
    • Fix - Manage race condition when Controls and Controllers are restarted at once. Controllers were not connecting.

2023​

  • 2023-11 - Imp - Restart whisperer when ephemeral container reaches end of life, or when POD restart with same name
  • 2023-11 - Imp - Take POD attachments into account when searching for attachments on POD events
  • 2023-10 - Imp - Fix uniqueness of whisperers container names. Avoid seeing only one in memeory if many are created in the same second for a daemonset.
  • 2023-09 - New - First release of Spider Controller for Kubernetes with namespaces filtering, time to live, watch of Kubernetes objects etc.

Back-End​

2026​

  • 2026-10 - New - MongoDB parsing: one communication per MongoDB command and reply, over plain and TLS connections.
    • OP_MSG, compressed messages (snappy, zlib, zstd) and legacy OP_QUERY / OP_REPLY; a reply is paired with its request exactly, by responseTo.
    • Status 200, 500 for ok: 0 and write errors, 1000 when the reply was never captured, 1001 for requests that expect no reply. Orphan replies are kept, flagged req.orphan.
    • Exhaust and moreToCome replies give one communication per batch.
    • The connection (conn: driver, application name, OS, user, mechanism, compressors, server version, replica set) comes from the first hello; flagged handshakeMissing or restored otherwise.
    • A connection joined mid-stream is recovered by scanning for the next valid message; six barren passes in a row skip it.
    • Flip global.flips.mongoParsing (off by default), and server.mongo.parseMongo per whisperer (on by default), on ports 27017 to 27019.
    • Housekeeping (hello, isMaster, ping, replSetHeartbeat, buildInfo) is dropped except the first hello of a connection; parseMonitoring and parseReplication turn it back on.
  • 2026-10 - New - MongoDB query shapes: req.shape and req.shapeHash replace every value with ?; the shape is the default req.template.
    • getMore and killCursors inherit the shape of the command that opened the cursor.
  • 2026-10 - New - MongoDB cursors: req.cursor links a getMore to its origin through redis-mongo; cursor index kept 10 minutes, connection record 1 hour.
  • 2026-10 - New - MongoDB command and reply documents saved in a separate content store, behind payload rights.
    • server.mongo.saveWriteDocs, saveDataRows, commandDocMaxRunes (1000) and maxContentBytes (1 MiB by default, 16 MiB at most).
    • Write payloads are <redacted> on the communication; the authentication exchange is always redacted.
  • 2026-10 - New - mongo-read service (/mongo-read/v1): search, by-id, content, cursor summary, columns, export and parsing status of MongoDB communications.
    • Payload fields (req.commandDoc, req.comment, res.errmsg) are stripped, and refused in queries and aggregations, for users without payload access.
    • GET /v1/mongo-com/{id}/cursor: batches, documents, wall time, server time and outcome of a whole cursor.
    • Export: one row per communication, command document as request payload and reply documents as response payload.
    • Re-import of MongoDB communications and their content into an upload whisperer: POST /mongo-parser/v1/mongo-com.
  • 2026-10 - New - MongoDB purge: POST /mongo-parser/v1/mongo-com/purge and /mongo-parsing/purge, with their content, for uploaded data.
  • 2026-10 - New - OTel metrics exporter: MongoDB protocol, with the query template as optional endpoint label.
  • 2026-10 - New - Whisperer server.mongo: parseMongo, parseMongoOptions, parseMonitoring, parseReplication, saveWriteDocs, saveDataRows, commandDocMaxRunes, maxContentBytes.
  • 2026-10 - Imp - Client identification is now one contract across parsers: stats.src.identification is a claimed, unverified identity, with the kind of claim in the new stats.src.identificationSource (jwt-sub, basic, mtls-cn, db-user, sasl, client-id, app-name, mqtt-username). It is never the workload or the IP.
    • New on MySQL (login user), PostgreSQL (user), Redis (AUTH / HELLO AUTH user), Kafka (SASL user, else client id), MQTT (CONNECT user name, else client id) and MongoDB (auth user, else application name). gRPC now reads mTLS certificate CN as HTTP does. DNS carries none.
    • Passwords and SASL secrets are never read; Redis CLIENT SETNAME is not used.
  • 2026-10 - New - MongoDB request templates (merge rules) and tags (command + reply): server.mongo.reqTemplates, server.mongo.reqTags and server.mongo.resTags.
  • 2026-10 - Imp - PostgreSQL: communications not matched by a template rule get an automatic template, the query shape without literal values or comments (value lists collapsed), so they group and search by shape out of the box, also for users without payload access.
  • 2026-10 - Fix - Editing a whisperer or its configuration through a proxy that compresses responses (such as Cloudflare) no longer fails with 412 Precondition Failed.
  • 2026-10 - New - MQTT parsing: one communication per MQTT exchange, MQTT 3.1, 3.1.1 and 5.0, over plain and TLS connections.
    • A publish with its acknowledgement, a delivery to a subscriber, a CONNECT, SUBSCRIBE, UNSUBSCRIBE or DISCONNECT. PINGREQ and PINGRESP are not saved.
    • Every packet of a QoS 1 or 2 handshake is recorded on stats.steps, with its time and reason code.
    • Status 1001 for a QoS 0 publish, 1000 when an acknowledgement was never captured, reason codes mapped to 400, 401, 403, 429, 503 or 500.
    • The connection (conn: client id, user name, version, keepalive, clean start, will) is on every communication; MQTT 5 properties and user properties are kept, user properties searchable as req.userProperties.<name>.
    • A connection must be captured from its CONNECT: one opened before the whisperer was attached is skipped.
    • Flip global.flips.mqttParsing (off by default), and server.mqtt.parseMqtt per whisperer (on by default), on ports 1883 and 8883.
  • 2026-10 - New - MQTT payloads are saved in a separate content store, behind payload rights.
    • server.mqtt.savePayloads, maxPayloadBytes (64 KiB by default, 256 KiB at most), topics.exclude ($SYS/# by default) and topics.metadataOnly.
    • The CONNECT password is not stored, unless server.mqtt.savePassword is on.
  • 2026-10 - New - mqtt-read service (/mqtt-read/v1): search, by-id, payloads, columns, export and parsing status of MQTT communications.
    • Payloads transcoded on read (.../content?view=transcoded), with the whisperer's current content schemas; the by-id communication carries a transcode hint.
    • Export: one row per communication, one row per topic filter for SUBSCRIBE and UNSUBSCRIBE; the payload column needs payload access, the password is never exported.
    • Re-import of MQTT communications and their payloads into an upload whisperer: POST /mqtt-parser/v1/mqtt-com.
  • 2026-10 - New - MQTT topic map endpoint (/mqtt-read/v1/mqtt-topic-map/_search): publishers, topics and subscribers, with QoS downgrade, refused or silent subscription, orphan topic, error and missing acknowledgement flags.
  • 2026-10 - New - MQTT payload decoding: JSON, Protobuf, Avro, CBOR, MessagePack and Sparkplug B.
    • Sparkplug B is recognised from its topic, MQTT 5 payloads from their content type.
    • server.mqtt.contentSchemas binds a topic filter to a schema, for MQTT 3.1.1 which has no content type.
  • 2026-10 - New - MQTT topic templates and tags: server.mqtt.reqTemplates and server.mqtt.tags.
    • Without a template rule, topics are normalised: numeric, UUID and long hexadecimal levels become ?.
    • Tags read the topic, the client, MQTT 5 user properties and the decoded payload; default correlation tags on the traceparent, x-request-id and x-correlation-id user properties.
  • 2026-10 - New - Whisperer server.mqtt.idleTimeout (PT45M by default, PT48M at most): a quiet MQTT connection stays one TCP session, through a per-port idle timeout in the Gossiper.
  • 2026-10 - New - OTel metrics exporter: MQTT protocol, with the topic template as optional endpoint label. A QoS 0 publish is counted, with no latency.
  • 2026-10 - Imp - OTel metrics exporter: status 1001 "No response expected" is counted as ok for every protocol.
    • Kafka acks=0 produces moved from unknown to ok.
  • 2026-10 - New - Redis and Kafka topic map endpoints (/redis-read/v1/redis-topic-map/_search, /kafka-read/v1/kafka-topic-map/_search): publishers or producers, channels or topics, subscribers or consumer groups, with flags (no receivers, silent subscription, orphan channel, unresolved topic id). Redis req.key now carries the channel or pattern on PUBLISH and (P|S)(UN)SUBSCRIBE.
  • 2026-10 - New - Kafka parser: Fetch v13+ topic ids are resolved to names through Metadata responses (cache TTL server.kafka.topicIdTtl, default P1D); replica id, subscribed topics, subscribed regex and topic count are extracted from Fetch, ConsumerGroupHeartbeat and JoinGroup; message definitions upgraded to Kafka 4.3.1.
  • 2026-10 - Fix - Whisperers and Gociphers cached by the Whisps and Ciphers services now expire after the configured cache ttl (45 s by default).
    • The cache entries never expired: a whisperer whose stored document had been removed stayed visible as active, and could not be deleted.
  • 2026-10 - Fix - Parsing status no longer counts a part as partially parsed when its message ends in a later part (HTTP/1.x, HTTP/2, WebSocket, Kafka, MySQL, DNS over TCP).
    • The part is recorded COMPLETE once its message is complete; it stays PARSED only if the message never completes (bytes lost, connection closed).
    • A minute updated after it was first reported no longer loses part of its final counts.
  • 2026-10 - Fix - Parsing status no longer leaves random minutes partially parsed (all protocols, most visible on MQTT over TLS).
    • When a status flush spanned two minutes, parts could be recorded under the other minute, where their completion never reached them.
  • 2026-10 - New - MQTT purge: MQTT communications, their payloads and MQTT parsing logs can be purged by whisperer and time window, from the Network-View purger. A QoS 1/2 communication's payload is now kept until its acknowledgement and saved with the full communication window.
  • 2026-10 - New - Whisperer option client.tlsKeys.keylogFallback (off by default) enables the Gocipher key log fallback capture for the attached workloads; Gocipher status carries the NO_KEYLOG_RECEIVED hint
  • 2026-10 - Imp - MCP server speaks MCP 2026-07-28 (current claude.ai) and is stateless: the team is a per-call team argument, spider_select_team is removed. Protocol revisions 2024-11-05 and 2025-03-26 are refused.
  • 2026-10 - Imp - MCP parsing: MCP 2026-07-28 traffic (client/server identity from _meta, server/discover, INPUT_REQUIRED status)
  • 2026-10 - New - Live demo: HTTP/3 (QUIC) leg - the demo shop's order service calls catalog over HTTP/3 once per order, decrypted from the QUIC keys and tagged with the order id.
  • 2026-10 - New - Live demo: Kotlin shipping and Rust fraud services, decrypted from their own keys - dedicated Demo JVM and Demo Rust whisperers prove the JVM agent and the rustls key-log fallback on the public link.
  • 2026-10 - New - Live demo: parcel tracking over MQTT 5 / TLS - order dispatches to a courier service, which answers with parcel statuses and Sparkplug B GPS telemetry, decrypted and tagged with the order id.
  • 2026-10 - New - Live demo: MongoDB reviews and customer profiles - catalog stores verified-purchase reviews (insert and rating counter in one transaction, find with getMore, aggregation, duplicate-key 11000) and a new Python user service keeps profiles, over TLS with authentication; decrypted from the Go driver and PyMongo and tagged with the order id.
  • 2026-10 - New - HTTP/3: QUIC connection continuation (NAT rebinding, migration, idle split) decoded like the original connection
  • 2026-10 - New - HTTP/3: gRPC calls and SSE events over HTTP/3 are parsed like their HTTP/2 counterparts (GrpcCom, WebMessageStream messages)
  • 2026-10 - Imp - HTTP/2 and HTTP/3 communications get a host header from :authority
  • 2026-10 - New - HTTP/3 parsing: HTTP communications carried over QUIC are decoded, with httpVersion 3.0.
    • Per whisperer server.http3.parseHttp3, off by default, and only with UDP capture on (client.udpSessions.track).
    • Needs the TLS keys from Gocipher. A capture that starts in the middle of a connection is skipped.
  • 2026-10 - New - DNS over QUIC (DoQ, RFC 9250) decoded: one DNS communication per QUIC stream, key updates followed.
    • QUIC v1 and v2, decrypted with the TLS secrets captured by Gocipher, linked to the UdpFlow on its client random.
    • Ports from server.dns.quicPorts, [853] by default. A flow on those ports without a TLS key is skipped, never read as plain DNS.
    • 0-RTT early data is not decrypted.
  • 2026-10 - Imp - waitForNameResolvingToTrack now defaults to false in the whisperer configuration.
    • It dropped the first packets of new flows, TLS and QUIC ClientHello included, while their IP was being resolved.
    • Existing whisperers keep their stored value.
  • 2026-09 - New - DNS parsing: one communication per query and its response, over UDP, TCP and DNS over TLS.
    • Status 200 for NOERROR, 500 for any other rcode, 1000 when no response was captured. The raw rcode is kept on res.rcode.
    • Retransmits are counted on req.retries, not emitted twice. An answer without its query is flagged stats.orphanResponse.
    • Templates and tags on the question and the answers. Metadata only: no content store, no payload gating.
    • New dns-read service (/dns-read/v1): search, by-id, export (one row per answer record), parsing status.
    • Re-import of DNS communications into an upload whisperer, and purge by whisperer and time window.
    • Flip global.flips.dnsParsing, and server.dns.parseDns per whisperer. Both off by default.
  • 2026-09 - New - UDP transport sessions: UdpFlow and UdpConversation travel through the same TCP session services, packet store and parsing gates as TcpSession.
    • Only the DNS and HTTP/3 parsers may claim a UDP session.
  • 2026-09 - Fix - The TCP parsing status reported Redis, Kafka and MySQL sessions as NO_PARSING. It now reports every protocol's real status.
  • 2026-09 - Fix - Turning a protocol's parsing off on a whisperer now also stops it on connections already being parsed.
    • Before, only new connections were affected: an open connection kept being parsed until it closed, so a long-lived one was parsed indefinitely.
    • Those connections now end their parsing as SKIPPED; turning parsing back on does not resume them.
  • 2026-09 - New - GraphQL parsing: HTTP communications to GraphQL endpoints carry the operation (type, name, root fields, query hash, variable names) and its outcome (OK, PARTIAL, ERROR, UNKNOWN, first error code and message).
  • 2026-09 - New - GraphQL subscriptions: WebSocket (graphql-ws, subscriptions-transport-ws) and SSE (graphql-sse, native) messages carry the operation name, template and outcome.
  • 2026-09 - New - MCP (Model Context Protocol) requests in HTTP communications are described in metadata: method, tool, argument names, session, outcome.
  • 2026-09 - New - MCP messages sent over a stream (tool answers, progress, sampling and elicitation requests) are described in stream-message metadata, and the MCP tab lists related messages.
  • 2026-09 - New - MySQL parsing: one communication per command, over plain and TLS connections.
  • 2026-09 - Fix - Gociphers status by list only returns the gociphers the caller may access.
  • 2026-09 - Imp - Whisperers status by list skips whisperers the caller may not access instead of refusing the whole list.
  • 2026-09 - New - Remote MCP server: AI agents (claude.ai, Claude Desktop, ChatGPT, Claude Code) connect to <spider>/mcp with OAuth and query captured traffic through 14 tools (16 with capture control enabled).
  • 2026-09 - New - Attachments accept a per-request timeToLive that can only shorten the whisperer's configured TTL.
  • 2026-09 - Fix - Aggregation queries can no longer return request or response content to a user whose access filter forbids payloads.
  • 2026-09 - Fix - A public link can no longer give its holders more access than its creator has.
  • 2026-09 - Fix - A public link's own search filter can no longer be written so as to escape the restrictions it was published under.
  • 2026-09 - Fix - Fetching a communication by its identifier now applies the reader's access filter, not only the ownership check.
  • 2026-09 - Fix - An access filter whose query is unbalanced now blocks everything instead of letting everything through.
  • 2026-09 - Fix - An access filter that only forbids payloads or headers no longer hides its own whisperers' communications entirely.
  • 2026-09 - Fix - A search whose Lucene query, field name or date is malformed now returns 400 with Elasticsearch's own reason, instead of a generic 502 "elasticsearch unavailable".
  • 2026-09 - Fix - PostgreSQL, MySQL, Kafka and HTTP: bytes lost from capture no longer make every later communication take the wrong reply.
  • 2026-09 - Fix - Kafka: a request that never got its answer is now recorded, instead of disappearing.
  • 2026-09 - Fix - PostgreSQL: statements sent back to back no longer share one timestamp.
  • 2026-09 - Fix - Over TLS, an encrypted record cut by a parsing pass is no longer lost.
  • 2026-09 - Fix - PostgreSQL: a message cut by a parsing pass is no longer counted twice.
  • 2026-09 - Fix - Redis: a reply lost from capture no longer makes every later command take the wrong reply.
  • 2026-09 - Fix - Redis: a command or reply split across two parsing passes is no longer lost, and no longer shifts every later reply onto the wrong command.
  • 2026-09 - Fix - A session latched on decode errors stays latched after its parsing log expires, and a TLS session carrying the wrong protocol now latches too.
  • 2026-09 - Fix - A parser that cannot decode anything now stops, instead of logging a parsing error on every pass for the life of the session.
  • 2026-09 - Fix - PostgreSQL connections captured without their startup are parsed correctly: pooled connections idle longer than the whisperer session timeout, and whisperers attached to open connections.
  • 2026-09 - New - OAuth 2.1 authorization server for agent connections (Customers).
  • 2026-09 - New - OAuth client administration: a callback catalogue an admin curates to authorise which agent platforms may connect, plus a verified badge on the consent screen.
  • 2026-09 - New - Client ID Metadata Documents (CIMD) for OAuth agents (Customers): an agent's client_id can be an https URL where it publishes its own description, so one application is one client instead of one per connection.
  • 2026-09 - Imp - Monitor-Write is now Monitor-Write-Go, a Go re-implementation of the self-monitoring collector.
  • 2026-09 - Imp - Pg-Read is now Pg-Read-Go, a Go re-implementation of the PostgreSQL read API.
  • 2026-09 - Imp - Export-Go: an unformatted number read from the com document is written rounded to the microsecond.
  • 2026-09 - New - Export-Go: bulk export of captured communications to CSV, across http, webmessagestream, redis, kafka, grpc and postgresql.
  • 2026-09 - New - Export-Go: schema-bound payloads transcode in CSV export, across http, redis, kafka and grpc.
  • 2026-09 - New - WebSocket and Server-Sent Events are parsed over HTTP/2, not only over HTTP/1.1.
  • 2026-09 - Imp - An HTTP/2 communication is recorded while its stream is still open.
  • 2026-09 - New - The public demo shop's storefront shows a live order feed over WebSocket.
  • 2026-09 - New - WebSocket messages (RFC 6455) are parsed over HTTP/1.1.
  • 2026-09 - New - Controls rebuilds the workload map after its cache restarts.
  • 2026-09 - Fix - SSE message content is no longer gated by HTTP's saveContent.
  • 2026-09 - Fix - Controls: a force-closed workload-map generation was never announced to the parsers.
  • 2026-09 - New - Server-Sent Events are parsed into individual stream messages.
  • 2026-09 - Imp - The web parser's templates and tags playground moves to POST /v1/http-playground, and stream messages get their own at POST /v1/wms-playground.
  • 2026-09 - Fix - Controls: the workload map could close an address that had only just been announced.
  • 2026-09 - Imp - Controls: the workload map's Redis calls report into the service's circuit breakers.
  • 2026-09 - Fix - PostgreSQL: saveInsertRows redaction now classifies statements on the SQL parse tree, fixing row values stored from multi-statement queries and removing over-redaction of read-only statements.
  • 2026-09 - New - Live demo: MySQL 8.4 leg - notify's TLS ledger with prepared statements, a transaction and a real duplicate-key error, correlated by trace and by order id.
  • 2026-08 - New - SSE stream messages support per-message templates and tags.
  • 2026-08 - Fix - The backend no longer refuses to store packets a capture agent marked as belonging to an oversized packet lot.
  • 2026-08 - Fix - HTTP/1.x parsing now keeps its connection state between passes.
  • 2026-08 - Fix - Communications captured over TLS reported a duration of zero.
  • 2026-08 - Fix - shouldParseTls was always false on HTTP parsing logs.
  • 2026-08 - New - Kubernetes workload identity on every TCP session, packet and communication.
  • 2026-08 - New - Controls carries the workload map, from the controllers to the parsers.
  • 2026-08 - New - Whisps: a whisperer can declare its own internal CIDR ranges.
  • 2026-08 - Imp - One web parser slot on the TCP session: parsers.http becomes parsers.web.
  • 2026-08 - Fix - Poller: a CLOSED session whose protocol the poller could not see was destroyed before parsing.
  • 2026-08 - Fix - Customers: spider login could permanently break the session it had just created.
  • 2026-08 - Fix - Controls: the controller websocket endpoint accepted unauthenticated upgrades.
  • 2026-08 - Fix - Kubernetes workload identity now resolves for traffic captured by a sidecar Gossiper.
  • 2026-08 - New - HTTP/2 traffic is now captured, parsed and displayed like HTTP/1.x.
  • 2026-08 - Imp - One web parser now handles HTTP/1.x, HTTP/2 and gRPC.
  • 2026-08 - Fix - TlsKeys: a POST of TLS keys is now validated key by key.
  • 2026-08 - New - RED metrics export over OTLP, from captured traffic to your own collectors.
  • 2026-08 - New - Collector credentials are write-only end to end.
  • 2026-08 - New - Alert: two probes for the export pipeline.
  • 2026-08 - New - Network usage export over OTLP: raw byte and packet counters, not just parsed protocols.
  • 2026-08 - New - Automatic correlation, with nothing configured.
  • 2026-08 - New - gRPC and Kafka tag rules accept an optional pattern.
  • 2026-08 - New - PostgreSQL tag rules accept an optional pattern, plus a query source.
  • 2026-08 - New - Kafka: record headers are decoded and exposed to tag rules as records.#.headers.<key>.
  • 2026-08 - Fix - Links: an expired session token now reports "Session expired".
  • 2026-08 - New - BASIC now includes every protocol parser, gRPC and Kafka among them.
  • 2026-08 - Imp - A licence that stops being validated now stops data capture only.
  • 2026-08 - New - Network usage now records the transport (TCP/UDP) of each flow.
  • 2026-07 - New - arm64 support: every Spider container image is now a multi-arch manifest (linux/amd64 + linux/arm64), so a Helm install on an arm64 cluster pulls arm64 images with no configuration change. Validated end to end on AWS Graviton, including eBPF TLS capture and every protocol parser. The standalone agent tarballs for VM / bare-metal installs remain x86_64-only.
  • 2026-07 - New - Config: the served licence now carries a status (ACTIVE, EXPIRED, NO_STATS, UNREACHABLE, PENDING), so an empty capability list can be told apart from one that never resolved. Licence-fetch errors now name the endpoint that was queried.
  • 2026-07 - New - Controls: optional cap on concurrent whisperer attachments (global and per-customer). Disabled by default.
  • 2026-07 - New - Customers: OIDC providers accept createAccountIfNotExists to refuse sign-in from an address with no account. Defaults to on, as before.
  • 2026-07 - New - Customers: OIDC providers accept timeoutMs to set the HTTP timeout for the token, JWKS and userinfo calls. Defaults to 2000, as before.
  • 2026-07 - Imp - Whisps: the attachment lifetime of a local agent is now admin-only, like its throughput limits.
  • 2026-07 - New - Self-serve licensing: get a free Spider licence, your own registry credentials and a pre-filled values.yaml from the Floocus portal, and start a 14-day trial of the paid features whenever you are ready.
  • 2026-07 - Fix - Installation docs showed PKCS#1 (BEGIN RSA PUBLIC KEY) for the JWT keypair; Spider's Go services require PKCS#8/SPKI and would reject it.
  • 2026-07 - New - Public links can now grant scoped access to network usage data (a chosen controller + selected namespaces), combinable with protocol communication grants.
  • 2026-07 - Fix - PostgreSQL: binary-format query parameter values (e.g. an int4 quantity sent by drivers such as pgx) are now decoded to their canonical text, so parameters that previously showed as garbage in the request detail view render as real values. The parameter type is taken from the server's parameter description captured at prepare time; parameters whose type could not be captured fall back to a \x-hex form rather than corrupting.
  • 2026-07 - Fix - PostgreSQL: the request detail view no longer errors on a prepared statement that takes no parameters (the parameters table is now omitted instead of rendering empty).
  • 2026-07 - Fix - PostgreSQL: binary-format result values (e.g. integers, timestamps, UUIDs, numerics sent by drivers such as pgx) are now decoded to their canonical text at parse time, so columns that previously showed as garbage or blank (invalid UTF-8 replaced before storage) now render as real values. Text values are unchanged; unsupported binary types fall back to a \x-hex form rather than corrupting.
  • 2026-07 - Fix - PostgreSQL: cached prepared-statement re-executions (Bind/Execute) now reuse the column metadata (RowDescription) captured at prepare time. The server sends RowDescription only once, at Describe, so repeated executions previously had no column names - leaving the result table blank and payload tags unextracted.
  • 2026-06 - New - New stuckGocipher alert - fires when a single gocipher instance is persistently failing to send its TLS secrets
  • 2026-06 - New - TLS keys for key-log-only sources (Go crypto/tls, NSS SSLKEYLOGFILE): serverRandom and the negotiated cipher are now read from the cleartext ServerHello (TLS 1.2 & 1.3) and carried on the TCP session.
  • 2026-06 - New - Apache Kafka live parsing
  • 2026-06 - New - Redis (RESP) live parsing
  • 2026-05 - Imp - Web-Upload and Pg-Upload merged into web-write-go and pg-parser-go.
  • 2026-05 - Imp - Poller now runs several pollings at once inside one process, instead of one pod per data type (communications, parsing logs, statuses, TCP sessions, packets, hosts).
  • 2026-05 - Imp - Common parser plumbing (session-parsing loop, Redis/Elasticsearch DAO, TLS decryption, service lifecycle, circuit breakers, stats, HTTP server skeleton) extracted into the shared parsers-core-go library consumed by both Web-Write-Go and Pg-Parser-Go, so fixes land once and the upcoming Redis/gRPC parsers build on it rather than copy from it.
  • 2026-05 - Imp - Web-Read migrated from Node.js to Go (~10x lower memory, ~10x faster startup).
  • 2026-05 - New - HTTP body transcoding via uploaded protobuf/MessagePack schemas; tags and templates now extract from JSON form of binary bodies.
  • 2026-05 - New - Schemas service: content-addressed schema file store.
  • 2026-05 - Imp - Schemas: extracts and indexes the protobuf message types declared by an uploaded bundle, so the UI binding form can populate the Message dropdown.
  • 2026-05 - Imp - Schemas: list endpoint returns all filenames in a bundle (not just the first), enabling clearer picker labels in the UI.
  • 2026-05 - Imp - Schemas: per-operation Elasticsearch circuit breakers (ESUpsert, ESGet, ESSearch) plus startup index ping with retry - the service crash-loops fast if ES is unreachable or the spider-schemas index has not been provisioned.
  • 2026-05 - Imp - Web-Write playground: returned schema resolution now includes the matched binding's display name, and surfaces an explicit "body not stored - enable Save Content on the whisperer" error when a binding fires against an empty stored body.
  • 2026-05 - Fix - Schemas: ES requests now carry HTTP Basic auth (was silently sending unauthenticated requests, every write/read hit a 401).
  • 2026-05 - Fix - Web-Write: schemas service URI is the service host only - the client appends /v1/schemas/{id} itself. The previous default included the path template, so every schema fetch 404'd and protobuf bindings silently fell back to "no body".
  • 2026-05 - Fix - TlsKeys-Linker: stop counting "no TCP session found for a captured TLS key" as a parsing error (expected case, not actionable) - reduces phantom errors in monitoring.
  • 2026-05 - New - Web-Read-Go ?view=transcoded body endpoint and transcode hint on the single-com GET - surfaces decoded JSON for binary bodies bound to a schema.
  • 2026-05 - New - Playground validation API on the Go parsers (web-parser / pg-parser): POST /v1/playground tests tag & template rules against the actual parsing engine and flags regexes the parser cannot use (e.g. backreferences / lookaround, which RE2 rejects).
  • 2026-05 - New - Changed communication protocol from REST+JSON to GRPC between parsers (Web-Write & Pg-Parser) and Pack-Read / Tcp-Update
  • 2026-05 - New - Change serialization format of communications from JSON to Protobuf for: Packets, TcpSessions, Http coms & parsing log
  • 2026-05 - New - Rewrite in Go of major services used in parsing flow: Pack-Write, Pack-Read, Tcp-Write, Tcp-Update, Web-Write Pg-Parser, Tls-Keys-Linker
  • 2026-02 - New - MultiRead service (multi-read) to search HTTP and PostgreSQL communications in a unified view via a single ES alias (spider-search-multicoms).
  • 2026-02 - Imp - Reduce CPU usage of Whisps-Status-Agg, Ciphers-Status-Agg and Hosts-Agg services.
  • 2026-01 - Fixes
    • Fix bug with Gocipher status aggregation when Gocipher is deployed as standalone
    • Fix error when installing plugins (was returning 401 when getting manifest)
    • Fix bug that caused TCP Parsing Status not to be saved

2025​

  • 2025-11 - New - New components, services and indices to manage postgresql parsing
  • 2025-11 - Imp - Refactor protocol parsing configuration to easily manage new parser in TcpWrite, TcpUpdate, TcpPoller
  • 2025-11 - Imp - Add feature flips to monitor write not to alert on optional components when not deployed
  • 2025-09 - Imp - All services & UIs - Technical debt removal
    • Moment -> Luxon
    • Request -> Undici
    • Upgrade of libraries to latest
    • Node 22
    • Alpine 3.22
    • Redis 8.2
    • Elasticsearch 9.1
    • Traefik 3.5
  • 2025-05 - New - Service Accounts may now be created and used to connect and call Spiders APIs.
  • 2025-05 - New - Use Kube projected tokens to secure first service calls
  • 2025-05 - New - Use refresh tokens to enhance security
  • 2025-03 - New - Network usage features + status metrics
  • 2025-03 - New - Manage configuration of Controllers & Gociphers
  • 2025-01 - Imp - Default PEM format changed to PKCS#8
  • 2025-01 - New - Throughput limiter config & discarded packets stats capture & aggregation

2024​

  • 2024-12 - New - Manage local agents flags on Controls, Ciphers, Whisp, Customers
  • 2024-12 - New - Controls APIs to:
    • Get logs from Controllers, Gociphers, Sidecar whisperers & Ephemeral Whisperers
    • Get listing of Gociphers & Sidecar Whisperers seen by the Controller
  • 2024-11 - New - Decrypt TLS 1.2 for Mozilla recommended cipher suites
  • 2024-11 - Imp - Improve TLS discovery report in CipherStatus
  • 2024-10 - Imp - Remove WebWriteWarning as parsing quality is great
  • 2024-10 - Imp - Whisps, PackWrite, WebWrite, TcpUpdate, TcpWrite, TcpRead: manage TLS parsing
  • 2024-10 - New - Ciphers-Status poller, Ciphers-Raw-Status-Poller to synchronise statuses to ElasticSearch
  • 2024-10 - New - Ciphers-Status-Agg service to aggregate Gociphers statuses
  • 2024-10 - New - Ciphers-Status service to store Gociphers status
  • 2024-10 - New - Ciphers service to manage Gociphers
  • 2024-10 - New - Tls-Keys-Linker service to link Tls Keys to Tcp sessions
  • 2024-10 - New - Tls-Keys service to receive Keys from Gocipher
  • 2024-10 - Imp - Rework Tcp Parsers storage in Redis to allow parallel parsing / update
  • 2024-06 - New - Manage choice of captureMethod for Whisperer + manage it in status
  • 2024-06 - New - Support Gossiper agent
  • 2024-04 - Imp - Add a permission on Controllers to allow someone else than Admin and Controller
  • 2024-04 - New - Data storage policies for Whisperers. Many indices impacts + pollers changes.
  • 2024-04 - Imp - Changed link index from Rotated to Static + add purge. To manage link deletion and limit index count
  • 2024-03 - New - Public link features and APIs + restrictive access in many data and config API
  • 2024-03 - New - Access filters to restrict data access
  • 2024-02 - New - Add job to clean teams and customers that have deleted whisperers older than 1 week
  • 2024-02 - Imp - Add controllers and active attachments to backup
  • 2024-01 - Imp - Add deleted whisperers, controllers and attachments to purge
  • 2024-01 - New - /health API exposing probes status
  • 2024-01 - Imp - Change BO to start correctly even when no change, but block Whisperers from capturing.
  • 2024-01 - Imp - Controls clean shut down - Controls was not closing websockets connection on close.

2023​

  • 2023-12 - Imp - Add deployment system version in statistics sent to central
  • 2023-12 - New - Survey checker proxy in NetworkView BFF + refactor of service account token
  • 2023-11 - Imp - Add license name in Mails sent by Spider
  • 2023-11 - Imp - Fixed various race conditions that was communications without responses
  • 2023-09 - Imp - Add possibility to compress Redis payloads using Snappy.
  • 2023-09 - Imp - Add possibility to avoid compression of main API calls.
  • 2023-09 - Imp - New Controls component to manage Controllers. Impacted many.
  • 2023-07 - Imp - Do not take DELETED users into account on users creation or getByEmail
  • 2023-07 - New - Manage OpenId providers for user auth and account creation.
  • 2023-07 - Imp - Fixes under high load - benched at 200 000 HTTP coms /min
  • 2023-07 - Imp - Fixes for recovery after failures: removed expired items from queues
  • 2023-07 - Imp - Upgrade to Node 18
  • 2023-06 - Imp - Add prometheus /metrics page on Alert service
  • 2023-05 - New - Plugins store service
  • 2023-04 - New - Add shutdownDelay option
  • 2023-03 - Imp - Filters headers only after parsing
  • 2023-03 - Imp - False negative in parsing quelity are removed
  • 2023-03 - New - Management of 100 continue when client sent the body anyway ?!
  • 2023-03 - New - New alert firing when polling queues are getting too full
  • 2023-02 - Imp - Parsing status is disabled for Upload whisperers
  • 2023-01 - New - Monitoring supports Kubernetes deployments

2022​

  • 2022-11 - New - Decode x-ssl-cert header to extract CN into identification field
  • 2022-09 - New - Maintenance service to perform purge and indices cleaning
  • 2022-09 - New - Stats-Collector service to collect stats and send to Floocus
  • 2022-09 - New - Check license regularly and stop parsing activities when licence is invalid
  • 2022-08 - New - Allow creation of trainee and training team, allow deletion with automatic whisperer deletion.
  • 2022-08 - Imp - Allow import of hosts files
  • 2022-08 - Imp - Improve renaming of hosts with management of cache
  • 2022-07 - Imp - Ignore packets arriving late - after the next pL is started
  • 2022-07 - Imp - Tags cardinality & count
  • 2022-05 - Imp - Upgrade to Redis 7 and ES 7.17.4
  • 2022-04 - Imp - Manage authorized ES connections
  • 2022-04 - New - Protect against big packets lots - limit to 10Mb by default
  • 2022-03 - Imp - Improve Http parsing log streaming management & overhead, as well as parsing logs
  • 2022-03 - Imp - Improve scalability in parsing status mgt
  • 2022-01 - New - Parsers metrics (API, index, monitor job)
  • 2022-01 - New - Option to avoid duplicated packets when capturing both sides of the same communication
  • 2022-01 - Imp - Rework of parsing (v2) with many changes in data model and APIs. Improve performance and footprint! Fixed long tcp sessions issues, better code quality, and improved streaming of parsing.

2021​

  • 2021-09 - Imp - Upgrade to Node 16
  • 2021-04 - Imp - Upgraded to Traefik 2.4.8, Metric/Filebeat 7.11
  • 2021-04 - Imp - Move Redis back in Cluster for better maintenance
  • 2021-04 - Imp - Remove coupling between config service and infrastructure
  • 2021-04 - Imp - Upgrade to Redis 6.2
  • 2021-04 - Imp - Migrate to new component and index template since ES 7.8
  • 2021-03 - New - Customer GET user-token API for better impersonating. Manage in all services.
  • 2021-03 - New - Team service + Whisp team management
  • 2021-02 - Imp - Remove unnecessary fields from Customer (UI, Setup, Customer service)
  • 2021-02 - Imp - Upgrade to Docker 20.10.3
  • 2021-02 - Imp - Upgrade to ES 7.11
  • 2021-02 - Imp - Webpack bundling of deliverables - Smaller dockers

2020​

  • 2020-12 - Imp - Send mail to admin when new account is created (option)
  • 2020-11 - Imp - Merge Tags extracted from Httpcoms into single stats.tags object. Removed duplicates.
  • 2020-06 - New - New Alert services that send mail to administrator when a probe detects an error
  • 2020-06 - New - New field to index dates in minute resolution to fasten some queries
  • 2020-05 - New - Allow async searches on WebRead, TcpRead, PackRead, Hosts, WhispsStatus
  • 2020-05 - Imp - Replaced Redis DEL with UNLINK
  • 2020-05 - Imp - Upgrade to ES stack 7.7 (ES, Kibana, Beats)
  • 2020-05 - Imp - Output logs in Docker STDOUT and capture them from it. Improve Filebeat and Metricbeat config & index.
  • 2020-04 - Imp - Automatic renew token if cluster was asleep during renew time (Dev platforms)
  • 2020-04 - Imp - Externalized HttpCom raw content and headers storage to another index for performance in searches. New poller.
  • 2020-04 - Imp - Replaced Status Rollup by own implementation with Capture status poller as RollUp search was the slowest search of all
  • 2020-04 - Imp - Use local volumes for logs and filebeat for easier setup
  • 2020-04 - Imp - Do not store _source for metrics
  • 2020-04 - Imp - Refactor DAO, API, Config and CBStats
  • 2020-04 - Imp - Codes in log to aggregate info and ease analysis
  • 2020-03 - Imp - Restart services in case of configuration change
  • 2020-03 - Imp - API stats gathering
  • 2020-02 - Imp - Upgrade to Node 12
  • 2020-02 - Imp - Upgrade to Traefik v2.1
  • 2020-01 - Imp - Allow not saving TCP and HTTPPers
  • 2020-01 - Imp - Dedicated indices for Upload (longer TTL, and purge possible)
  • 2020-01 - Imp - Replicas reduction

2019​

  • 2019-11 - New - LDAP authentication
  • 2019-10 - New - Res Templates computing while parsing
  • 2019-10 - New - Req and Res Tags extracted while parsing
  • 2019-10 - New - Allows saving raw headers in resource, and when not to
  • 2019-09 - Imp - Use Elastic ILM to manage Spider indices
  • 2019-09 - New - Whisperers conf can now be used by many instances. 2 new services for status and dns.
  • 2019-07 - New - Expect 100 continue HTTP pattern is now understood
  • 2019-07 - Imp - Services check, at start, for their index in ES before connecting
  • 2019-07 - Imp - Redis reconnection works better
  • 2019-07 - Imp - Upgrade to metricbeat and filebeat 7.2
  • 2019-07 - Imp - Migration to ES 7.2
  • 2019-07 - Imp - New GuiSettings service to save user GUI settings
  • 2019-05 - Imp - Removed dependency to OpenSSL for API key generation and validation
  • 2019-05 - New - Admin may confirm account creation after notification by mail on creation/edition
  • 2019-05 - New - Confirm email address by mail on creation/edition
  • 2019-05 - New - Customers API now allows reinitialisation of passwords with secured process
  • 2019-05 - Imp - Confirmation/Alert email is sent when a password/email has been changed
  • 2019-05 - New - MailSender service to send emails
  • 2019-05 - Imp - Check email unicity when email is changed
  • 2019-04 - Imp - Use bcrypt to store and check passwords
  • 2019-03 - New - GuiLogs service to track errors in GUI
  • 2019-03 - Imp - Removed cookie creation and usage
  • 2019-02 - Imp - Force merge indices with many updates
  • 2019-02 - Imp - Change node process titles for easier monitoring
  • 2019-01 - Imp - End of migration of all BackEnd services to Node 10
  • 2019-01 - Imp - Second phase TCP parsing is now using a Redis queue to avoid parallel parsing and concurrency issues on saving

2018​

  • 2018-12 - Imp - Move from NGINX to Traefik
  • 2018-09 - Imp - Upgrade to ES 6.4
  • 2018-09 - Imp - Split Whisps service monolith into 3: Whisp, Whisp status, Host
  • 2018-02 - New - Rights managements on Whisperers
  • 2018-01 - New - Monitoring SSS production !!!
  • 2018-01 - New - Authorization and Rights Management !!
  • 2018-01 - New - Architecture fixes (concurrency)

2017​

  • 2017-12 - Imp - Filtering and not saving packets on Whisperers
  • 2017-11 - New - Links service
  • 2017-11 - Imp - Architecture rework: avoid retries, Node eventloop, Redis usage optimisation (Delete, Lua..)
  • 2017-11 - Imp - Architecture rework: automatic ids, ES refresh rate, Pollers rate, NGINX settings, OCC in Redis, Parsing in WebWrite
  • 2017-08 - New - Integrated monitoring APIs (and Kibana)
  • 2017-08 - Imp - Architecture upgrade with Redis and Pollers introduction for better performance
  • 2017-08 - New - Clusterisation with Swarm
  • 2017-07 - New - First release in Parkeon project team: CQRS, HTTP Parsing, UI with login..

2016​

  • 2016-02 - New - Starting Spider :-)

UI​

2026​

  • 2026-10 - New - Network usage map: workload tooltips show the Controller's live details (declared port names and services, undeclared and no-traffic ports, images, services) when the period includes now. See Cluster Map.
  • 2026-10 - New - MongoDB view: grid, filters, detail, timeline and export. See MongoDB communications.
    • The detail view has Global, Command, Reply, Cursor, Packets and Source tabs; documents show as Extended JSON.
    • The Cursor tab summarises the whole read: batches, documents, wall time, server time and outcome.
    • The Global tab has a Connection section with the driver, application name, user, compressors and server, and flags a missing handshake.
    • Filters on command, database, collection, shape, error code, cursor, driver, application name and user.
  • 2026-10 - New - MongoDB parser badge, columns and filters in the TCP session grid.
  • 2026-10 - New - MongoDB in the OTel exporter protocol picker.
  • 2026-10 - New - MongoDB advanced views: dashboard, map, statistics, waterfall, sequence diagram, diff and host details.
  • 2026-10 - New - MongoDB template column and filter, tag columns and filters, templates (STATS) view and rule editors (request templates, request and reply tags) in the whisperer configuration.
  • 2026-10 - New - MQTT view: grid, filters, detail, timeline, sequence diagram, waterfall, statistics, dashboard, map, diff, upload and export. See MQTT communications.
    • The detail view has Global, Payload, Packets and Source tabs; the payload shows as text, JSON, Hex, or Transcoded, the default when a content schema, Sparkplug B or an MQTT 5 content type matches.
    • The sequence diagram draws every step of a QoS 1 or 2 handshake.
    • A Topic filter (MQTT wildcards) filter, with + and #.
    • The view opens on a dashboard: volume, QoS, topic tree, clients, and anomalies (client id takeover, unacknowledged deliveries, # subscribers, anonymous connections).
  • 2026-10 - New - MQTT topic map in the Network-View: publishers, topics and filters, subscribers, with problem flags; the dashboard links a QoS downgrade to it.
  • 2026-10 - New - Whisperer configuration: MQTT Parsing, MQTT Content, MQTT Content Schemas, Topic templates and Tags, with playground.
  • 2026-10 - New - MQTT parser badge, columns and filters in the TCP session grid.
  • 2026-10 - New - MQTT in the OTel exporter protocol picker.
  • 2026-10 - New - Topic map for Redis and Kafka in the Network-View, alongside MQTT: publishers or producers, channels or topics and subscribers or consumer groups, with problem flags.
  • 2026-10 - New - Whisperer capture configuration: Key log fallback (/dev/null) option in the TLS keys section. Gocipher details show keylog libraries and the "No key log received" hint.
  • 2026-10 - Imp - HTTP/2 and HTTP/3 bodies that were not stored show "Body not stored" with the right Whisperer option, instead of an error
  • 2026-10 - New - QUIC decoding in the TCP/UDP session Content tab: any UDP flow with TLS keys is decrypted in the browser.
    • Streams with the time of the first datagram, duration and filter and download buttons, Packets & frames to debug the protocol, and Raw datagrams.
    • Needs the keys linked to the flow, like DNS over QUIC. A degraded flow raises a warning and keeps what was decoded.
  • 2026-10 - New - A mode toolbar on TLS sessions: Decrypted (default), Records & handshake and Raw packets. The Raw views show a hex dump.
  • 2026-09 - New - DNS view: grid, filters, detail, timeline, sequence diagram, waterfall, statistics, dashboard, map, diff, upload and export.
    • A Search-list noise dashboard category estimates the NXDOMAIN queries caused by resolver search lists (ndots:5).
  • 2026-09 - New - Transport session kind on TCP sessions: a filter, a grid column and a chip, TCP, UDP flow or UDP conv..
  • 2026-09 - New - Whisperer configuration: UDP sessions on the Capture tab, and DNS Parsing with ports, DoQ ports, response timeout, name templates, tags and playground.
  • 2026-09 - New - DNS communications purge source.
  • 2026-09 - New - HTTP view: GraphQL status column, GraphQL filters and a GraphQL tab with the formatted query, variable names and errors.
  • 2026-09 - New - MySQL view: grid, filters, detail, timeline, sequence diagram, waterfall, statistics, dashboard, map, diff and upload.
  • 2026-09 - New - MySQL results in the TCP session grid.
  • 2026-09 - New - Whisperer MySQL parsing configuration: content size, templates, tags, playground and correlation defaults.
  • 2026-09 - New - MySQL communications purge source.
  • 2026-09 - New - MySQL in the OTel exporter protocol picker.
  • 2026-09 - New - WebSocket: whisperer switches, template and tag rule editors, close state and socket.io rows.
  • 2026-09 - New - Stream messages in the waterfall and the sequence diagram.
  • 2026-09 - New - Per-message timeline on the stream detail views and in the HTTP detail view.
  • 2026-09 - New - A persisted Show stream messages in HTTP search setting.
  • 2026-09 - New - Com export dialog on the HTTP, stream, Redis, Kafka, gRPC, PostgreSQL and All views.
  • 2026-09 - New - My exports list with Export like this, and the mailed download link opens the export.
  • 2026-09 - New - Export tag columns can be resolved through the loaded plugins.
  • 2026-09 - New - OAuth clients admin collection, with Global and Callback catalogue tabs.
  • 2026-09 - New - Client ID Metadata Document clients: badge, fields and delete warning.
  • 2026-09 - New - Settings → Connected apps lists and revokes OAuth grants, with their last use.
  • 2026-09 - New - The user Rights tab grants the oauthClients and otelTargets rights.
  • 2026-09 - New - A multi-protocol JSON upload routes each communication to its own parser.
  • 2026-09 - Imp - Client and server columns default to the workload name over the IP.
  • 2026-09 - Imp - The L7 protocol filters are collapsed into a dropdown.
  • 2026-09 - Imp - Bundles are content-hashed, so a deploy is never invisible to a returning browser.
  • 2026-09 - Imp - Eight dashboard widgets use stored Elasticsearch scripts.
  • 2026-09 - Fix - A public link's own query is shown again in its access filter, not the *:* placeholder.
  • 2026-09 - Fix - The All view quality line covers Redis, Kafka and MySQL parsing status.
  • 2026-09 - Fix - PostgreSQL map: 400 and no-response errors were miscounted.
  • 2026-09 - Fix - PostgreSQL JSON upload refused parts without size or packets.
  • 2026-09 - Fix - Tag tables keep their copy button visible.
  • 2026-09 - New - Settings → Connected apps shows the MCP URL with a copy button and per-client instructions.
  • 2026-09 - New - Export a com search to CSV from Network-View, in the background.
  • 2026-09 - New - Send feedback to the Spider team from Network-View - see the blog post.
  • 2026-09 - New - Analysis UI: a Save SSE content switch, independent of HTTP's Save content.
  • 2026-09 - Imp - Whisperer parsing-config folds: readable titles and a fold/unfold icon.
  • 2026-09 - New - Analysis UI: stream messages are a first-class collection.
  • 2026-09 - New - Analysis UI: per-whisperer SSE message templates and tags.
  • 2026-08 - New - Analysis UI: a whisperer's parsing configuration has one Web traffic ports panel.
  • 2026-08 - New - Analysis UI: the team Metrics export tab gains a network usage exporter.
  • 2026-08 - Imp - Analysis UI: the capture screen opens on the All view rather than HTTP.
  • 2026-08 - Fix - Sequence diagram: the actor header tooltip now opens reliably on hover.
  • 2026-08 - Fix - Sequence diagram: a host or replica opened from an actor header tooltip opens its detail panel.
  • 2026-08 - New - Transport (TCP/UDP) across the Network Usage views, logical and physical.
  • 2026-08 - Fix - The TCP and UDP map toggles now work on the Network Usage Physical view.
  • 2026-08 - New - Waterfall and sequence diagram can identify actors by Kubernetes workload or instance.
  • 2026-08 - Imp - OTel target detail view rebuilt on the standard detail-view components.
  • 2026-08 - Imp - Team "Metrics export" tab and the exporter form rebuilt to match the Access filters tab.
  • 2026-08 - New - OTel targets admin collection in the left band.
  • 2026-08 - New - Metrics export tab on a team, listing its exporters and authoring new ones.
  • 2026-08 - New - The Network Capture map gains a Group by control.
  • 2026-08 - New - Grouped map nodes show a xN replica count on hover.
  • 2026-08 - New - Cross-map navigation between Network Capture and Network Usage, both directions.
  • 2026-08 - Imp - The chosen grouping mode is remembered per collection and restored on reload.
  • 2026-08 - Imp - Hide reverse proxies and Merge replicas are disabled while the capture map is grouped.
  • 2026-08 - Imp - The workload block in every detail view's Global tab is trimmed.
  • 2026-08 - New - Kubernetes workload identity is now available throughout Network-View.
  • 2026-08 - Imp - Free-text search over workload names covers only indices created after their next ILM rollover.
  • 2026-08 - Imp - The internals/externals resolution tier requires global.cluster.ipRanges to be configured.
  • 2026-08 - New - Correlation ids now come from extracted tags instead of HTTP headers.
  • 2026-08 - New - The correlation setting moved from HTTP settings to Global settings.
  • 2026-08 - New - A Links column ships visible in all six grids: HTTP, gRPC, PostgreSQL, Redis, Kafka and All.
  • 2026-08 - New - The whisperer creation form gains an Extract correlation ids switch, on by default.
  • 2026-08 - New - Pattern column in the gRPC, Kafka and PostgreSQL tag editors.
  • 2026-08 - New - Kafka record detail shows a Headers column on the record table.
  • 2026-08 - Fix - The correlation link column was never registered in five of the six grids.
  • 2026-08 - Fix - Excel export failed outright on a visible dynamic tag column whose tag left the data.
  • 2026-08 - Fix - Creating a public link could fail with "Invalid security token".
  • 2026-07 - New - Public links can now grant scoped access to network usage data (a chosen controller + selected namespaces), combinable with protocol communication grants.
  • 2026-07 - Imp - PostgreSQL detail: type OIDs shown in Parse "Parameter OIDs", Bind "↳ Parameter OIDs" and the ParameterDescription "Types" list now display the PostgreSQL type name alongside the number (e.g. text (25) instead of 25).
  • 2026-07 - Imp - PostgreSQL detail: the result table now renders for cached prepared-statement re-executions, with an info badge on the reconstructed column block noting the columns were reused from the prepared statement (no RowDescription was sent on that execution).
  • 2026-06 - New - Redis, gRPC and Kafka views and parsing
  • 2026-06 - New - Gocipher Capture config: new advanced Discovery settings group with "Max concurrent discoveries", bounding how many application binaries the Gocipher inspects at once during discovery.
  • 2026-06 - New - pcapng import & export now use a standard NSS key-log in the Decryption Secrets Block - exported captures decrypt directly in Wireshark, and any standard pcapng + key-log (Wireshark / SSLKEYLOGFILE) can be imported and decrypted, not just Spider's own exports. serverRandom and the cipher are recovered from the ServerHello in the captured packets, so no Spider-specific key-log fields are required.
  • 2026-05 - New - Transcoded view for MessagePack and Protobuf
  • 2026-05 - New - Schema bindings in Whisperer parsing configuration
  • 2026-04 - Imp - Network-View v15.0.0 - major frontend modernization:
    • Upgrade React 16 → 18 (createRoot, concurrent features)
    • Migrate Material-UI v4 → MUI v7 (styled() API, Emotion, no makeStyles)
    • Adopt Redux Toolkit: createSlice for all reducers/actions, configureStore
    • Migrate all connect() containers to React hooks (eliminated ~170 Container files)
    • Replace Moment.js with Luxon for date/time handling
    • Replace Webpack with Rspack for GUI build
  • 2026-05 - New - Content Schemas panel in whisperer parsing config: bind protobuf/MessagePack schemas to (method, uri-template, content-type) tuples.
  • 2026-05 - New - Read-only Schemas admin page.
  • 2026-05 - Imp - Playground previews transcoded body + schema resolution.
  • 2026-05 - Imp - Content Schema binding editor moved into the details panel as a dedicated full-tab form (matches the Team Access Filter pattern, replaces the fullscreen modal).
  • 2026-05 - Imp - Schema picker shared between request and response sides - an upload on one side immediately surfaces on the other; multi-file upload bundles N .proto files as one schema.
  • 2026-05 - Imp - Binding Name auto-fills as <METHOD or ANY> <uri-template> and freezes once edited.
  • 2026-05 - Imp - Message field becomes a dropdown populated from the uploaded bundle's message types (no more typing FQNs by hand).
  • 2026-05 - Imp - Content-Type field uses a creatable select with curated MIME suggestions for consistency with the other selects.
  • 2026-05 - Imp - Playground binding details collapsed behind a "Show binding details" toggle (rows with errors always render); transcoded JSON shown in a syntax-highlighted Ace editor; resolution lines name the matched binding instead of an index; tag values stack one per line for readability.
  • 2026-05 - Imp - Info / error messages from schema upload + listing routed through the standard toast mechanism.
  • 2026-05 - New - HTTP Com Body tab "Transcoded" view - auto-defaults when the com is bound to a schema; falls back to Raw with a banner when the binding misses or decoding fails.
  • 2026-05 - Imp - Whisperer Config Playground now validates Templates and Tags against the actual Go parsing engine (web-parser / pg-parser /v1/playground) - no more false positives; regexes the parser cannot use (backreferences / lookaround) are now flagged
  • 2026-03 - New - Add Playground in Whisperer Config to test Templates and Tags configuration
  • 2026-03 - New - Enhance pcap filter editor in Create Whisperer & Whisperer Capture Config tabs
  • 2026-03 - Imp - Color scale to numeric columns in Grid
  • 2026-03 - Imp - Save filters associated to view when switching views
  • 2026-03 - Imp - Option to show Template in sequence diagram
  • 2026-03 - Imp - Horizontal scroll to sequence diagram
  • 2026-03 - Imp - Drag and drop of actors in Sequence Diagram
  • 2026-03 - Imp - Drag and drop of columns in Columns selection
  • 2026-03 - Imp - Drag and drop of widgets in Dashboard configuration
  • 2026-03 - New - Waterfall view
  • 2026-02 - New - Multi-protocol communications view (label: "All") - unified grid showing HTTP and PostgreSQL communications together, with detail views delegating to the appropriate per-protocol view.
  • 2026-01 - New - PSQL view and parsing - v13
    • Whisperer parsing parameters for PostgreSQL
    • PSQL parsing info in TCP details + grid
    • PSQL view: Timeline, Grid, Snippets, Filters, Sequence diagram, Stats, Dashboard, Diff, Filter views, Public Links
  • 2026-01 - New - Button to get API key for Gociphers in JSON (for standalone ones)
  • 2026-01 - Imp - Add infinite scroll to Controller Attachments and Gociphers TLS targets
  • 2026-01 - Fix - Take selected timezone into account when free entering timespan
  • 2026-01 - Fix - Fixed removing stats issue when reloading was in progress
  • 2026-01 - Fix - Fixed non visibility of tooltips in Plugins params
  • 2026-01 - Fix - Fixed messy timeline X axis in Heatmaps when timerange was below 1s

2025​

  • 2025-09 - Imp - Technical debt of UI server
  • 2025-05 - New - Service Accounts management for third party integration
  • 2025-05 - New - Refresh tokens

2024​

  • 2024-04 - New - Loading dialog for network map
  • 2024-04 - New - Filter dropdown may load values from multiple fields
  • 2024-04 - New - Network usage physical view
  • 2024-03 - Imp - Gociphers details - New Config permission
  • 2024-03 - New - Gociphers details - New Config tab
  • 2024-03 - Imp - Controllers details - New Config, Monitor & Attach permissions
  • 2024-03 - New - Controllers details - New Config tab
  • 2024-03 - New - Workload details + link to attach Whisperer
  • 2024-03 - New - New Network usage screen, with logical view map + grid + dashboard + stats
  • 2024-03 - New - Refactor navigation to allow selection of Whisperer or Controller
  • 2024-03 - New - New Help screen when no agent is selected
  • 2024-01 - New - Add Throughput limiter settings for Whisperers
  • 2024-01 - Imp - State, Nodes count, sidecars whisperers & gociphers count are added to Controller status
  • 2024-01 - New - Add Display option not to display local agents in agents list.

2024​

  • 2024-12 - New - Add feature to create local agents for local capture on Dev workstations
  • 2024-12 - New - Add decoder on Packet content tab (same as TCP, but no plugin for now). First one: DNS decoder
  • 2024-12 - New - Show DNS info in Packet grid when UDP port 53
  • 2024-12 - Imp - Add 95 percentiles in stats tables (perf team request)
  • 2024-12 - New - Controller log fetching feature, for Controller, Attachments, Sidecar Whisperers and Gociphers
  • 2024-12 - New - Controller Gociphers tab - List Gociphers seen by the Controller
  • 2024-12 - New - Controller Sidecars tab - List Sidecar Whisperers seen by the Controller
  • 2024-11 - New - TCP content tab - Decrypt TLS1.2 communication
  • 2024-11 - Imp - TCP content tab - Decode TLS1.2 handshake
  • 2024-11 - Imp - TCP global tab - Add TLS session information
  • 2024-11 - Imp - Http headers tab - Add JWT header in decoded token JSON view
  • 2024-11 - Imp - Http Diff tab - Add JWT header in decoded token
  • 2024-11 - Imp - Http global tab - Timeline displays req and res on two line when they overlap, as during handshake
  • 2024-11 - Imp - Better report of TLS target discovery in targets lists
  • 2024-11 - Imp - Parsing of TLS 1.2 handshakes extensions, more safeguards in extensions parsing errors
  • 2024-10 - New - TLS tab in Whisperers details to list Targets linked to this Whisperer
  • 2024-10 - New - Gociphers tab in user profile
  • 2024-10 - New - Manage TLS capture configuration on Whisperers + few improvements related to TLS
  • 2024-10 - New - Decode TLS sessions in TCP content tab
  • 2024-10 - New - Manage Gociphers: create, status, targets list, share, installation
  • 2024-06 - New - Manage choice of captureMethod for Whisperer + manage it in status
  • 2024-06 - Support Gossiper agent when attaching a Whisperer
  • 2024-05 - Imp - Decode JWT dates fields in HTTP Headers tab
  • 2024-05 - New - Adjust timezone of dates, per Whisperer or Globally
  • 2024-05 - New - New plugin slot to decode TCP payloads
    • Plugins released for HTTP, MQTT, Redis
  • 2024-05 - Imp - Tcp Content tab
    • Timeline
    • New handle on timeline cursor to move through time
    • Headers on top pf packetLots
    • Delay between 2 packetLots
    • Filter on packetLot
  • 2024-05 - Imp - Tcp Details - New handle on timeline cursor to move through time
  • 2024-05 - Imp - Tcp global tab - Progressive loading of parsed items inside the timeline
  • 2024-04 - New - Add form to make Whisperer creation more simple
  • 2024-04 - New - Data storage policy in Parsing configuration of Whisperers
  • 2024-04 - New - Public link feature
    • Ability to create a public link to share a link to someone not having a Spider account
    • Publishing permission on Whisperers and Teams
    • Open the link and limit access
    • Browse, search and delete links
    • Specific terms & conditions with new BFF API and saving in Central
  • 2024-03 - Imp - Improved matrix input component
  • 2024-03 - New - Access filters on team
    • Define access filters to limit users access to a subset of data
    • Show filters in User profile Teams tab
  • 2024-03 - Imp - Improve breadcrumb to keep remember opened tab
  • 2024-02 - Imp - User administration enhancements
    • Admin
      • is able to update others profile even when user is ACTIVE.
      • can remove email confirmation need
      • can validate the mail manually
      • can set password manually (when not ldap)
      • can set if user uses LDAP authentication
    • New user access tabs showing all access & rights a user has
      • User can see their own rights
      • Administrators can see and edit other users rights from these tabs
        • They may, this way, perform bulk update of access rights from the same user
    • Share tabs of Controllers, Whisperers & Teams now use tabs to display Teams & Users.
  • 2024-01 - Imp - Use hosts names from coms when listing servers and clients. Changed HTTP server filter to filter only on servers.
  • 2024-01 - Imp - Add helper info message when timeline loading takes to long telling to zoom or refine filters
  • 2024-01 - Imp - Add helper info message when no Whisperer is selected
  • 2024-01 - Imp - New icons to show that menu can be folded / unfolded
  • 2024-01 - Imp - Limit stats that can be opened at once to 10
  • 2024-01 - Imp - Save, reload and share dashboards

2023​

  • 2023-12 - Imp - English privacy terms
  • 2023-11 - New - Survey checker
  • 2023-11 - Imp - Dashboard loader
  • 2023-11 - Imp - Fixes in seq. diagrams
  • 2023-10 - New - Add 'missing' in list of values for some filters in HTTP view. A - Missing - is displayed in list. When selected, a special clause is added to see items without any value in this field.
  • 2023-10 - Imp - New columns to display, in HTTP view, new computed fields (without filters or sort)
    • duration of request (first packet -> last packet)
    • duration of response (first packet -> last packet)
    • latency between last packet of request and first of response
  • 2023-10 - New - Dashboard as an alternative of Map v10.0
  • 2023-10 - Imp - Hover on the header of the life line in the sequence diagram highlight the header and puts it on top
  • 2023-09 - New - Controller feature (see UI RNO) - v9.0
  • 2023-09 - Imp - Improved component used for sharing and tag & templates. Added Hz scroll when to many options.
  • 2023-07 - Imp - Make it impossible to change Whisperer type
  • 2023-07 - Imp - Move purge button to whisperer box, having it only active when purge on this whisperer is possible
  • 2023-07 - New - Redirect to login page on page load when using OIDC and token > 1min
  • 2023-07 - New - Login - Allow connection by OpenId Connect to various providers. Tested with Google, Gitlab, Github & Keycloak.
  • 2023-05 - New - Plugins store UI - v8.0
  • 2023-04 - New - Filter for column selection and UX improvements
  • 2023-04 - New - Badges for selected user, team and whisperer
  • 2023-03 - New - Dynamic HTTP tags filters in menu
  • 2023-02 - Imp - Upload improvements
    • Filter on instance after upload
    • Better timeline mgt
  • 2023-02 - Imp - Fixes after training
    • Delete the name of a host
    • Don't lose edition focus when whisperer is refreshed
    • No more errors when changing team and details opened

2022​

  • 2022-09 - New - License information in help panel + display pop in when invalid license
  • 2022-08 - New - Create trainees and training team
  • 2022-07 - New - Import & export hosts of a whisperer
  • 2022-07 - New - New hosts tab in whisperer details to show captured hosts and allow renaming
  • 2022-07 - Imp - Mark packets in wrong order in tcp details and content
  • 2022-07 - Imp - New TCP fields in Packet details and grid
  • 2022-07 - Imp - Tags cardinality & count
  • 2022-07 - New - Grid column ordering
  • 2022-06 - New - Add Whisperer option not to capture / send packet without data to spare CPU and network.
  • 2022-04 - New - Location link in HTTP details
  • 2022-04 - New - Progressive loading of Map and Timeline
  • 2022-04 - New - New plugin hook for client enrichment
  • 2022-04 - New - Manage too big packetLots
  • 2022-03 - Imp - Logo change
  • 2022-03 - New - Help, privacy terms, FOSS page
  • 2022-03 - Imp - Filters & undo improvements
  • 2022-03 - Imp - Option to anonymise user stats per user
  • 2022-02 - Imp - Free time selection improvement: validation / cancellation / size check...
  • 2022-01 - New - Option to anonymize user statistics globally
  • 2022-01 - New - Option to avoid duplicated communications or packets when capturing both sides of the same communication
  • 2022-01 - Imp - Adapt to parsing v2 API for upload, packets download and TCP details and content

2021​

  • 2021-12 - New - Display changelog
  • 2021-12 - New - Import / export of whisperer configuration from / to file
  • 2021-12 - New - Allow copying Teams conf to user, and allow user not to use team conf
  • 2021-10 - New - Check for updates when ui got focus
  • 2021-09 - Imp - Upgrade to Node 16 - latest libs
  • 2021-05 - Imp - Refactored UpdateView process
  • 2021-04 - Imp - Timeline zoomout + timeline tooltips
  • 2021-04 - Imp - Better impersonification
  • 2021-04 - New - Team feature + team common settings - v7.0
  • 2021-03 - Imp - Allow saving passwords for plugin params
  • 2021-02 - Imp - Login - Migrated to latest lib version + Hooks + Material UI v4 + common structure and components - v4.0
  • 2021-02 - Imp - Remove unnecessary fields from customer
  • 2021-02 - Imp - Webpack5 + fast-refresh
  • 2021-01 - Imp - Add windowing feature to grids for performance.
  • 2021-01 - New - Allow plugins for Tag enrichment decoding.
  • 2021-01 - Imp - Allow API calls in HTTP headers decoding plugins.
  • 2021-01 - Imp - Map visual improvements: latency on link, tooltip actions, details views of links and nodes, fixed positions stored in user settings.
  • 2021-01 - New - Certificate decoder plugin.
  • 2021-01 - Imp - Pause background tasks when not visible.

2020​

  • 2020-12 - New - Allow plugins for HTTP headers decoding.
  • 2020-12 - New - Plugins framework. - v6.0
  • 2020-12 - Imp - Added export to clipboard to complex config inputs (those that accept copy/paste inside)
  • 2020-12 - Imp - HTTP Body is loaded as blob to allow displaying raw / images or anything in only 1 request to server.
  • 2020-12 - Imp - Timeline can zoomout indefinitely. Set default timespan for INTERFACE whisp and remove costly timespan request.
  • 2020-12 - New - Possibility to define custom content-type when no header present in the com.
  • 2020-12 - Imp - Refactor dynamic columns and filters. Works with smartfilters.
  • 2020-12 - New - Excel export of grid with formatters and columns width
  • 2020-11 - Imp - Possibility to change JSON-LD contexts in one place
  • 2020-11 - Imp - HTTP allows duration in ms
  • 2020-11 - Imp - Resize handlers on bottom drawer and details
  • 2020-11 - Imp - Neater bread crumbs
  • 2020-11 - New - Possibility to get bottom drawer to full screen (grid, seq.diag, stats)
  • 2020-11 - New - Click on grid on same item than opened details will close details
  • 2020-11 - New - Dark theme - v5.0
  • 2020-11 - Imp - Restructure all processing and display dedicated to a protocol (HTTP) into a common folder
  • 2020-11 - Imp - Migrated to latest lib version + Hooks + Material UI v4
  • 2020-08 - Imp - Restructure code for better maintenance
  • 2020-05 - New - Use asyncsearch on long timerange queries: Map, TimeLine & Hosts
  • 2020-05 - New - Smartfilters & filters refactor - v4.0
  • 2020-03 - Imp - Better show long communications on Timeline

2019​

  • 2019-11 - Imp - Tabs improvements with multiline
  • 2019-11 - Imp - Parsing quality on timeline
  • 2019-11 - Imp - Better tooltips on network map with templates
  • 2019-10 - New - Template and tags config, columns, selection on stats, fields in details
  • 2019-10 - New - Allow custom contexts for JSON-LD payloads
  • 2019-10 - New - Save headers config
  • 2019-08 - Imp - Allow easier filtering on Whisperers and Users: lowercase, split on whitespace...
  • 2019-08 - Imp - Performance improvement in fetching Whisp Status, and Map query for HTTP
  • 2019-08 - Imp - Improved rollup of TCP sessions for monitoring display
  • 2019-07 - Imp - Don't save settings when loading a link
  • 2019-07 - New - Load settings at start
  • 2019-07 - New - Save settings automatically in NetworkView - v3.0
  • 2019-06 - New - Clone Whisp conf
  • 2019-06 - Imp - Improved Lucene parser and autocompletion
  • 2019-06 - Imp - Filters: List of filters values do still take account all others filters when listing values, but do not take into account current filter selected values. This allow adding values on an already selected filters.
  • 2019-05 - New - Saved queries in NetworkView
  • 2019-05 - New - Login UI now offers to reinitialise a forgotten password - v3.0
  • 2019-05 - New - Login UI now offers to create an account
  • 2019-05 - New - Changed lib for toast, and adapted color to message importance. Refactor.
  • 2019-04 - Imp - Refactored and improved error handling in sagas + fallbacks not to block dependent sagas
  • 2019-04 - Imp - Added Error boundaries to Network UI
  • 2019-04 - Imp - Upgraded Network UI to latest React, D3, ..., Webpack, Koa, Node 10, and optimised bundle - from 10MB to 2MB. - v2.0
  • 2019-04 - Imp - Upgraded Login UI to latest React, Webpack, Koa, Node 10, and optimised bundle. - v2.0
  • 2019-03 - Imp - GUILogs are sent by NetworkView, Monitoring and Login in case of errors
  • 2019-03 - Imp - Errors in View or Controller are sent to GuiLogs service for tracking
  • 2019-03 - Imp - Login UI refactored and GUILogs added
  • 2019-03 - Imp - Removed need for Cookie
  • 2019-03 - Imp - Removed Google Analytics
  • 2019-03 - Imp - Search color highlighting improvements
  • 2019-03 - Imp - Compatibility of UI with Chrome, FF, Chromium and Opera
  • 2019-02 - Imp - Clicking on map nodes for filtering works better, in all configuration.
  • 2019-02 - Imp - Clicking on Seq. Diagram headers now acts the same as for map nodes. With the exception of clients headers in hide gateways mode.
  • 2019-01 - Imp - Stats: Can lock independently time selection and filters / stat settings

2018​

  • 2018-11 - New - Goto feature
  • 2018-09 - New - Timescale on sequence diagrams
  • 2018-09 - New - Select all on Grid
  • 2018-07 - New - Import/Export of HTTP coms
  • 2018-07 - Imp - Merging clients on map
  • 2018-05 - New - Excel export of stats
  • 2018-05 - Imp - Display delta since start in sequence diagrams
  • 2018-04 - New - Quick filters on correlation Ids
  • 2018-04 - New - Filters inside columns headers
  • 2018-04 - New - Auto completion in search
  • 2018-04 - New - Color highlighting in search
  • 2018-03 - New - Diff feature between items
  • 2018-03 - New - Grid selection with persistence
  • 2018-03 - New - Loading screen ;-)
  • 2018-03 - Imp - Added Unmatched URIs in stats
  • 2018-03 - New - URI templates
  • 2018-03 - Imp - Node detail panel improvement when many whisperers selected
  • 2018-03 - New - Merged replicas host detail panel
  • 2018-03 - New - Quick filter on client identification
  • 2018-03 - Rmv - Hosts stats panel has been removed
  • 2018-03 - New - Stats bar for faster navigation
  • 2018-03 - New - Export sequence diagram in SVG or PNG
  • 2018-03 - New - History drop down to search
  • 2018-03 - New - Statistics panel
  • 2018-02 - Imp - Better UX for locked Nodes
  • 2018-02 - New - Whisperer settings icon
  • 2018-02 - Imp - Shortened client identification
  • 2018-02 - New - Customise Timeline metric
  • 2018-02 - New - Rights managements on Whisperers
  • 2018-02 - New - Search box for JSON tabs and HTTP req/response
  • 2018-01 - New - Display clients on map
  • 2018-01 - New - Filter on aggregated replicas
  • 2018-01 - Imp - Prevent user selection on map
  • 2018-01 - Imp - Quick filters on status on map
  • 2018-01 - New - Global settings tab
  • 2018-01 - New - Merge replicas mode (Map + Seq diagram)
  • 2018-01 - New - Multi whisperers selection
  • 2018-01 - New - Reset time and zoom on timeline
  • 2018-01 - New - Filters for Whisperers and Users list
  • 2018-01 - New - Drag on timeline
  • 2018-01 - New - Authorization and Rights Management !! - v1.0

2017​

  • 2017-12 - Imp - Intermediate times in sequence diagrams
  • 2017-12 - New - Filtering and not saving packets on Config
  • 2017-12 - New - Automatic refresh
  • 2017-12 - New - Negations on quick filters
  • 2017-11 - New - Sequence diagrams!
  • 2017-11 - Imp - URL encoding display
  • 2017-11 - New - Sticky details panel
  • 2017-11 - New - Share your state (links)
  • 2017-10 - New - Whisperer creation, config, remote controls and installation forms
  • 2017-08 - New - API documentation
  • 2017-07 - New - First release in Parkeon project team

2016​

  • 2016-11 - New - Starting Login UI
  • 2016-08 - New - Starting Networkview UI

Monitoring UI​

2026​

  • 2026-10 - New - MongoDB parsing: parser, read service, poller and redis-mongo on the topology map, parsing status, queues, processing speed, logs and database views.
  • 2026-10 - New - MQTT parsing: parser, read service, poller and redis-mqtt on the topology map, parsing status, queues, processing speed, logs and database views.
  • 2026-09 - New - DNS parsing: parser, read service, poller and redis-dns on the topology map, parsing status, queues and processing speed.
  • 2026-09 - New - MySQL parsing: collections, main, parsing, apps and database views.
  • 2026-09 - New - Stream messages have a log detail link.
  • 2026-09 - Imp - Bundles are content-hashed and cached immutably.
  • 2026-09 - Imp - The topology map is laid out in columns - capture, then parsers, then storage and services.
  • 2026-09 - Fix - A failing chart saga no longer cancels its view's watcher.
  • 2026-09 - Fix - Topology map nodes with no saved position no longer stack at the origin and crash on drag.
  • 2026-09 - Fix - The topology map drew an arrow head with no line behind it.
  • 2026-09 - Fix - The web message stream poller was missing its storage links.
  • 2026-08 - Imp - The parsing charts name the web parser instead of labelling it HTTP.
  • 2026-08 - Imp - The three gRPC parsing panels are removed.
  • 2026-08 - Fix - The parsingSpeedTotal chart summed a parser set that never included Kafka.
  • 2026-06 - New - Redis, gRPC and Kafka parsing on the topology map, parsing-status rows and datastore charts
  • 2026-06 - Imp - Reorganised map, and added foldable blocks for top gauges
  • 2026-06 - Imp - Parser self-monitoring now reports true per-session phase times (build / fetch / parse) and sessions-per-batch.
  • 2026-01 - New - Postgresql parsing stack in Summary screen
  • 2026-01 - New - Postgresql parsing charts in Parsing screen

2025​

  • 2025-09 - Imp - Technical debt of UI server
  • 2025-05 - New - Refresh tokens
  • 2025-01 - New - Network usage stats in Gocipher view + map

2024​

  • 2024-10 - New - Gocipher view
  • 2024-10 - Imp - Add TLS parsing info
  • 2024-10 - Imp - Add Gociphers, Ciphers* & TLS* services to map
  • 2024-04 - New - Data storage policies total size graphics
  • 2024-04 - Imp - Added sections to groups graphics and tables. Avoid API requests for graphs when sections are closed.
  • 2024-01 - New - Alert probes status displayed in the top right of main dashboard
  • 2024-01 - Imp - Stats of Whisperers talking to Controller & Controls talking to Whisp
  • 2024-01 - Imp - Upgraded free time selection component to match main UI

2023​

  • 2023-07 - New - Redirect to login page on page load when using OIDC and token > 1min
  • 2023-03 - Imp - Mgt of Elasticsearch metrics in Kube pods
  • 2023-03 - Imp - Add Redis status on main dashboard
  • 2023-03 - Imp - Aggregate Logs by service and whisperer
  • 2023-03 - Imp -Aggregate data upload by Whisperer
  • 2023-01 - New - Supports Kubernetes deployment

2022​

  • 2022-06 - New - New Whisperer aggregated CPU and RAM view
  • 2022-01 - New - New parsing tab with speed, delay and duration. New parsing gauges in main.
  • 2022-01 - New - Fix Http parsing status gauge and add Tcp parsing status gauge to main.

2021​

  • 2021-09 - Imp - Upgrade to Node 16 - latest libs
  • 2021-04 - New - Added new view: Performance to get statistics in one place of APIs response times, Inter services coms, datastore latency and services usage.
  • 2021-02 - New - Excel export to all grids
  • 2021-02 - Imp - Common structure and components with main UI - 5.0

2020​

  • 2020-08 - New - Dark theme - 4.0
  • 2020-08 - Imp - Migrated to latest lib version + Hooks + Material UI v4
  • 2020-05 - Imp - Refactor to improve maintenance. Enhance logs integration. - 3.0
  • 2020-05 - Imp - Add more ES processing in load graph
  • 2020-04 - New - Grid to show logs aggregated by codes. Show code in log grid
  • 2020-03 - New - Services API stats in graph and map
  • 2020-03 - New - Servers & services grids

2019​

  • 2019-10 - Imp - Use main cluster API to collect ES nodes stats and not _cat/ summary endpoint
  • 2019-09 - New - Extract logs to a specific view
  • 2019-08 - Imp - Time shift between client and server in Whisp current status.
  • 2019-07 - Imp - Long disconnected Whisp are shown with orange / red colors
  • 2019-07 - Imp - Version of Whisp in Whisp current status.
  • 2019-05 - New - On Map, Browser node show GuiLogs and is Red if errors
  • 2019-04 - Imp - Upgraded Monitoring UI to latest React, D3, ..., Webpack, Koa, Node 10, and optimised bundle - 2.0
  • 2019-04 - New - New grid for GuiLogs tracking
  • 2019-03 - New - CPU and RAM of ES nodes in Map and Servers view
  • 2019-03 - New - Rollup index to speed up monitoring timeline
  • 2019-03 - New - Graph with dockers cpu load and ram
  • 2019-03 - New - Cpu and Ram tracking of Traefik, Beats and UIs
  • 2019-03 - New - Metricbeat integration in Docker cluster to track dockers and nodes metrics
  • 2019-03 - New - Filebeat integration in Docker Cluster - for app monitoring.
  • 2019-02 - New - Graph with Redis load/s
  • 2019-02 - New - Graph with Services load/s

2018​

  • 2018-10_11_12 - New - New graphs, services...
  • 2018-09 - New - Hosts grids
  • 2018-08 - New - UI view - 1.0
  • 2018-07 - New - Map view
  • 2018-06 - New - Whisperers, Apps, Servers, Logs view
  • 2018-05 - New - Starting Monitoring UI

Home made setup (deprecated)​

2023​

  • 2023-04 - Imp - Add possibility to update a Kube installation without only the setup.yml file. No need to have previous environment folder.
  • 2023-04 - New - Add possibility to add extra certificates to the S3 connection used for backups
  • 2023-04 - New - Add shutdownDelay option on Kube
  • 2023-04 - New - Add readiness and liveness probes on Kube
  • 2023-04 - New - Distinct samples for Swarm and Kube
  • 2023-03 - New - Polling queue alert
  • 2023-02 - New - Autoscaling on Kube
  • 2023-01 - New - Support Kubernetes deployments

2022​

  • 2022-04 - Imp - Manage authorized ES connections
  • 2022-02 - New - New parsingDelay alert
  • 2022-01 - Imp - Manage Redis instances and maxmemory

2021​

  • 2021-12 - Imp - Migrate automation scripts to Node with xs lib
  • 2021-04 - Imp - Maintain docker configs in the stacks of config change. Generate config service docker configs.
  • 2021-04 - Imp - Manage index & component templates. Manage migration from legacy to new templates.

2020​

  • 2020-04 - Imp - Manage system versions in setup and update
  • 2020-03 - Imp - Script to create system versions
  • 2020-01 - New - Simplified cluster configuration with setup.yml file (apps + elastic + crons + init + demo)

Swarm Watchdog (deprecated)​

2024​

  • Change docker registry for Whisperers images

2023​

  • Deprecated (but still works)

2021​

  • Imp - Reload config every minute

2020​

  • Imp - Manage local setup for SSS prod

2019​

  • New - Manage multi instance whisperers

2018​

  • New - Creation of a watchdog to keep Whisperers alive through client cluster restart