Installation Instructions | 5.x -> 6.x Upgrade Instructions | FAQ | CHANGELOG | JA4+ Install | Docker Install

A db.pl upgrade is required when upgrading from Arkime 5 or earlier

Support Arkime's ongoing development! Become a GitHub Sponsor!

:sparkles: What's new :sparkles:

BREAKING

• [#3812] The user-auto-create and user-role-mappings sections now limit what Javascript can be used for security.

Release

• [#3834] Node 22.22.2

All

• [#3812] Validate javascript expression in user-auto-create and user-role-mappings
• [#3835] Fix reverse proxy being unhappy with no params after a ? in urls

Capture

• [#3813] Add ECE, CWR, and AE TCP flag support
• [#3818] Improve scheduling http requests with libcurl (thanks @swannman)
• [#3829] Add ADB (Android Debug Bridge) parser (thanks @h0wdee)
• [#3836] Fix bacnet false positives on dns ports
• [#3843] Improve JSON encoding of UTF8 strings
• [#3841] command socket add-file/dir now supports notify on complete (--notify) and new file-status command (thanks @wegman12)
• [#3847] Fix crash when parsing malformed packets
• [#3855] Fix --copy not working in command socket mode (thanks @wegman12)

Multies

• [#3830] Show cluster when using multies

Viewer

• [#3826] Handle ip frag pcap display better

:arrow_down: Download Info :arrow_down:

We offer downloads for different Linux distributions and versions because of library differences. For example, use the el8 download for Centos 8 or RHEL 8 not RHEL 9. A libssl version error means that most likely the wrong download was used for your Linux distribution and version, please double check. The moloch builds have the old filesystem layouts, we will stop providing the moloch builds in 2026. The EL 8 builds will stop in April 2026, please upgrade.