Installation Instructions | 5.x -> 6.x Upgrade Instructions | FAQ | CHANGELOG | JA4+ Install | Docker Install

A db.pl upgrade is required when upgrading from Arkime 5 or earlier

Support Arkime's ongoing development! Become a GitHub Sponsor!

:sparkles: What's new :sparkles:

BREAKING

• [#3782] Previous redis user databases will be ignored
• [#3786] Dedup packets now include VLAN/VNI by default, set dedupVlanVni=false to disable
• [#3792] The setting uploadFileSizeLimit now defaults to 2G instead of unlimited
• [#3792] Link group urls in cont3xt must start with http(s):// now
• [#3794] Previously the bpf filter setting was reversed for scheme, pcapoverip, and tzsp readers
• [#3802] Cluster urls in parliament must start with http or / now

All

• [#3782] sqlite support added for user database and cont3xt/parliament databases
• [#3782] many fixes for lmdb and redis database implementation
• [#3782] now regression test sqlite/lmdb/redis databases during builds
• [#3804] New user-auto-create section to replace userAutoCreateTmpl setting
• [#3805] Add pt-BR i18n strings

Capture

• [#3786], [#3797] add VLAN/VNI deduplication support (thanks @waynieack)
• [#3790] fix VLAN parsing for Type III ERSPAN (thanks @waynieack)
• [#3794] Fixed bpf filter setting reversed for scheme, pcapoverip, and tzsp readers
• [#3803] Fix tcap parsing loop

ES Proxy

• [#3789] Add AWS SigV4 signing support for managed OpenSearch (thanks @Kurlee)

Parliament

• [#3788] Fix abort when parliament file not set

Viewer

• [#3781] Most server errors are now localized
• [#3785] views/shareables/shortcuts can now live in sqlite instead of ES
• [#3796] Fix value-actions not working (thanks @waynieack)
• [#3807] Only show "Only Data Nodes" on EsNodes Stats tab

WISE

• [#3801] Add phpIPAM WISE source (thanks @waynieack)
• [#3806] Add Cisco ISE pxGrid WISE source (thanks @waynieack)

:arrow_down: Download Info :arrow_down:

We offer downloads for different Linux distributions and versions because of library differences. For example, use the el8 download for Centos 8 or RHEL 8 not RHEL 9. A libssl version error means that most likely the wrong download was used for your Linux distribution and version, please double check. The moloch builds have the old filesystem layouts, we will stop providing the moloch builds in 2026. The EL 8 builds will stop in April 2026, please upgrade.