File supportutils-scrub.changes of Package supportutils-scrub
-------------------------------------------------------------------
Tue Aug 19 18:44:08 UTC 2025 - Ronald Pina <rpina@suse.com>
- Update to version 1.1.0
+ Major enhancement: Subnet-aware IP obfuscation
* Maps entire IPv4 subnets to fake subnets preserving host offsets
* Gateway .1 remains .1, broadcast .255 remains .255
* Maintains network topology for effective troubleshooting
+ Added PCAP obfuscation support with tcprewrite integration
* Rewrites packet captures using same subnet mappings as logs
* Ensures consistency across supportconfigs and network traces
* Exports tcprewrite-compatible subnet rules
+ Enhanced mapping file structure
* Added 'subnet' section with subnet-to-subnet translations
* Added 'state' section tracking IP pool allocation cursors
* Enables reproducible obfuscation across multiple runs
+ Improved IP processing
* Two-pass processing: learns subnets then applies mapping
* Preserves special IPs (0.0.0.0, 127.0.0.1, multicast)
* Protects version strings from incorrect obfuscation
+ Enhanced domain and hostname extraction
* Multiple source parsing (resolv.conf, hosts, NFS, NTP)
* Fixed word boundary detection preventing partial replacements
* Added minimum length requirements for hostnames
+ Security improvements
* Dataset JSON files created with 0600 permissions
* System users excluded from obfuscation
+ Added command-line options for PCAP processing
* --rewrite-pcap: Enable PCAP rewriting mode
* --pcap-in: Specify input PCAP files
* --pcap-out-dir: Output directory for obfuscated PCAPs
* --print-tcprewrite: Display tcprewrite command
+ Bug fixes
* Fixed /32 host route handling
* Corrected inline comment processing in hostnames
* Resolved IPv6 subnet awareness issues
* Fixed MAC address parsing false positives
-------------------------------------------------------------------
Thu May 8 11:39:48 UTC 2025 - Ronald Pina <rpina@suse.com>
- Initial release version 1.0.0
+ Basic obfuscation for supportconfig tarballs
+ Supports IP, domain, hostname, username, MAC, IPv6
+ Configuration file support
+ Keyword-based obfuscation
+ Mapping file for consistency across runs