Release v1.3.0

- Major TUI refresh: redesigned tabs, stats panel, and details view
- New per-field colors, status dot, and magenta panel borders
- Remote address scope labels (PUBLIC/PRIVATE/etc.) in the connection list
- CLI: reverse DNS resolution enabled by default (--no-resolve-dns to opt out)
- QUIC parser hardening: bounds checks for varint/token_len
- Dependency and OUI database updates
- Release pipeline reliability fixes

Release v1.2.0

Added:
- Windows restricted token sandbox (#206)
- macOS Seatbelt sandboxing, later tightened (#196, #203)
- Linux sandbox hardening: drop capabilities and clear ambient set (#208)
- UI: process privilege shown in security section (#197)
- Filter: exact port matching and regex support (#195)
- VLAN support in PKTAP/SLL parsers (#202)
- VLAN header in layer 3 extraction (#199, thanks @deepakpjose)
- IGMP protocol parsing (#209, thanks @deepakpjose)
- Process name for wildcard /proc/net entries (#218, thanks @deepakpjose)

Fixed:
- Default interface selection via active routing table (#194, thanks @l1a)
- Root detection on Unix via geteuid() (#192, thanks @DeepChirp)

Changed:
- CPU efficiency improvements across hot paths — rate calculation moved to refresh (#220, @deepakpjose), timeouts avoided (#213, @deepakpjose), threads named for observability (#212, @deepakpjose), and allocations reduced in sort/snapshot paths (#222). Big thanks to @deepakpjose for driving the CPU-efficiency work that makes RustNet noticeably lighter on the CPU.
- FreeBSD platform cleanup (#205)
- Dependency updates

Special thanks to @deepakpjose for six contributions in this release: #199, #209, #212, #213, #218, #220.

Release v1.1.0

- Add OUI vendor lookup, historic connections toggle, mouse support
- Add GeoIP city lookup, Android builds, MQTT/STUN/BitTorrent detection
- Fix UB issues, light terminal readability, Android cross-compilation
- Security hardening, packet stats, ARP benchmarks

Release v1.0.0

- Add GeoIP location support
- Add PCAP export with process attribution sidecar
- Add eBPF-based PID tracking for ICMP connections
- Show process detection degradation warnings in UI
- Fix service name precedence
- Tighten SSH packet structure heuristic
- CI: reusable workflows, arm64 musl static builds

Release v0.18.0

- Process grouping with expandable tree view
- Traffic visualization Graph tab
- Reverse DNS hostname display
- BPF filter support
- New DPI protocols: NTP, mDNS, DHCP, SNMP, SSDP, NetBIOS
- Static musl builds for Linux (x86_64)

Release v0.17.0

- Add Landlock sandbox and capability dropping for Linux security
- Reorganize platform code into per-platform directories
- Add eBPF thread name resolution to main process names
- Add AUR package automation workflow
- Simplify QUIC DPI and unify SNI extraction
- Fix RateTracker test determinism

Release v0.16.1

- Fix cross-compilation build issues for eBPF on non-Linux platforms
- Switch FreeBSD to native VM builds instead of cross-compilation
- Fix build.rs to check TARGET instead of host platform

Release v0.16.0

- Network interface statistics feature with cross-platform support
- Link layer parsing improvements and modularization
- Windows and macOS interface statistics fixes

Release v0.15.0

- Ubuntu PPA packaging support
- Bandwidth sorting by combined up+down total
- Removed CAP_NET_ADMIN requirement (read-only capture)
- Improved bandwidth rate tracking accuracy
- Updated dependencies: clap, clap_mangen, clap_complete, dns-lookup, windows, zip, libc

Release v0.14.0

- eBPF enabled by default on Linux for enhanced performance
- JSON logging for SIEM integration
- TUN/TAP interface support for VPN monitoring
- Fix: Eliminated excessive procfs scanning causing high CPU usage
- Fedora COPR RPM packaging
- Bundled vmlinux.h files for improved build reliability