echosniffer
transparent proxy · MITM decryption · packet capture · protocol analysis
latest release
changelog
[+] Added
- HTTP/2 stream analysis engine — per-frame decoding & multiplexed flow stats
- Real-time bandwidth monitor panel with protocol/domain/process breakdown
- Traffic classifier filters by Content-Type, status code, request method
- Session log export in JSON / PCAP / HAR formats
- Linux static binary release — single tar.gz, no runtime deps beyond glibc
[*] Improved
- TLS handshake refactored — 40% faster connection establishment
- Memory pool strategy — 30% lower RSS under sustained load
- GPU-accelerated UI rendering eliminates frame drops on large flows
- b+tree-based DNS cache — 5us lookup under 1M entries
[!] Fixed
- epoll EVFILT_WRITE lost events causing zombie connections under high concurrency
- Path encoding bug on Windows preventing cert directory writes
- SOCKS5 UDP ASSOCIATE port parsing off-by-one error
- macOS Sequoia 15.x permission dialog not appearing
- WebSocket fragment frame reassembly ordering bug
[-] Deprecated
--legacy-tls— migrate to--tls-profilesbefore v2.6.0
[+] Added
- WebSocket frame-level interception & replay (text/binary/ping-pong)
- DNS request interception with custom response injection at proxy layer
- Request breakpoint mode — pause & modify data at request/response stage
[*] Improved
- SOCKS5 handshake streamlined — one less RTT
- Lua scripting engine upgraded to LuaJIT 2.1 — 92% JIT coverage
- Auto CA cert install across macOS Keychain / Windows Trust Store / Linux NSS
[!] Fixed
- Timer drift under multi-day uptime causing missed timeout detection
- Multi-NIC upstream IP binding not respecting configured interface
- CA cert auto-install not respecting user trust store on headless Linux
[+] Added
- Lua rule matching engine for custom traffic filtering & processing scripts
- Traffic replay — captured HTTP requests replayed at original intervals
- b+tree-based DNS cache — 5us lookup under 1M entries
[*] Improved
- TLS certificate generation now async — no longer blocks first request
- hmap hash function switched to wyhash — 18% lookup improvement
[!] Fixed
- kqueue EV_ERROR at high concurrency causing fd leaks
- Host header not properly forwarded in proxy chain mode
[-] Deprecated
--http-version 1.1— auto-negotiate is now default; will be removed in v2.5.0
[+] Added
- Windows native app packaging (.exe + .zip portable) — Win10/Win11
- SOCKS5 UDP ASSOCIATE full support for DNS over SOCKS5
[*] Improved
- macOS universal binary cross-compiled with zig cc — 22% size reduction
- Unified kqueue/epoll/iocp event loop abstraction — 85% code reuse
[!] Fixed
- Chunked transfer decoding truncation in MITM mode
- Race condition in upstream connection reuse pool causing segfault
- Global variable pollution in Lua script hot-reload