camsniff (2.3.0) unstable; urgency=medium

  * Introduce structured positive and negative evidence with one canonical
    confidence engine for smart targeting and final classification.
  * Add evidence-driven, phase-specific follow-up planning for HTTP, ONVIF,
    and streaming protocol characterization.
  * Verify RTSP natively with bounded OPTIONS and DESCRIBE requests, parse SDP
    media tracks, and preserve authentication/server fingerprints.
  * Expand unauthenticated ONVIF enumeration to services, capabilities,
    scopes, network interfaces, device identity, and system time.
  * Add declarative YAML vendor fingerprints for Axis, Dahua, and Hikvision,
    correlating OUI, HTTP, ONVIF, RTSP, SSDP, and path evidence.
  * Replace regex-based ONVIF XML extraction with namespace-aware defusedxml
    parsing and add conservative non-camera contradiction fingerprints.
  * Expand behavioral regression coverage and synchronize Debian and Arch
    packaging dependencies for the new fingerprint subsystem.

 -- John Hauger Mitander <john@on1.no>  Tue, 22 Sep 2026 17:30:00 +0000

camsniff (2.2.6) unstable; urgency=medium

  * Enforce IPv4 target containment across passive discovery and all follow-up
    probes, including scoped SSDP description retrieval and redirects.
  * Correct Masscan JSON ingestion, TShark CSV parsing/directionality, Nmap and
    Masscan summaries, and TCP/UDP service-state preservation.
  * Repair credential candidate deduplication, apply per-host time budgets,
    support current FFmpeg RTSP timeouts, URL-encode RTSP userinfo, and validate
    captured media before reporting success.
  * Stop assigning vendors from a common port alone and classify evidence-free
    endpoints as unknown instead of cameras.
  * Restrict run artifacts to owner access, redact credentials in rendered
    reports, and fix IVRE ingestion for the current discovery/credential schema.
  * Add a native Arch Linux PKGBUILD, Debian/Arch package CI, and a focused
    regression suite covering critical parsing, scope, profile, and probe paths.
  * Replace automatic unpinned CoAP builds with explicit opt-in setup and avoid
    reinstalling dependencies when the selected runtime is already complete.
  * Refresh and consolidate the README, mode/scanning references, customization
    guide, development guide, manual page, and package metadata for 2.2.6.

 -- John Hauger Mitander <john@on1.no>  Tue, 18 Aug 2026 20:15:00 +0000

camsniff (2.2.5) unstable; urgency=medium
  * Fix shfmt/bashate conflict: rename stealth+ to stealth-plus as internal key
    to allow shfmt to parse associative arrays correctly.
  * Fix security: replace xml.etree.ElementTree with defusedxml in ssdp_probe.py
    to prevent XML injection; add URL scheme validation before urlopen.
  * Fix type errors: add Counter[str] annotations in report.py; fix bare
    except/pass in ivre-sync.py; fix Dict[str,Any] in profile_resolver.py and
    ivre-sync.py; add missing return statement in load_vendor_database.
  * Fix bashate E042: separate local -i declarations from assignments in banner.sh.
  * Fix arithmetic counter idiom: replace ((count++)) with POSIX-safe
    count=$(( count + 1 )) in camsniff.sh and ivre-manager.sh.
  * Add markdownlint, yamllint, typos, codespell configuration files; fix
    structural markdown issues (blank lines around headings/lists/fences, code
    fence language specs, broken TOC anchors).
  * Fix CSV data integrity: pad 63 rows in data/catalog/paths.csv that were
    missing http_snapshot_url, onvif_profile_path, and cve_ids columns.
  * Downgrade csvkit to 1.4.0 to restore csvclean -n validation flag.
  * Extract Python CSV export logic from ivre-manager.sh inline -c block to
    scripts/integrations/ivre_csv_export.py for bashate compliance.
  * Add defusedxml==0.7.1 to requirements.txt.
  * Bump version to 2.2.5.
 -- John Hauger Mitander <john@on1.no>  Thu, 18 Jun 2026 02:00:00 +0000

camsniff (2.2.3) unstable; urgency=medium
  * Fix IVRE integration to correctly handle MongoDB connection issues
    and ensure smooth ingestion of scan data.
  * Update dependency installation script to include missing packages
    required for IVRE functionality.
  * Enhance detection capabilities by adding new probes for emerging
    IoT device protocols.
  * Made a vendor database update to include the latest OUI entries
    for improved device identification.
  * Revised small sections throughout the documentation for clarity
    and accuracy regarding new features.
 -- John Hauger Mitander <john@on1.no>  Tue, 02 Jan 2026 01:00:00 +0000

camsniff (2.2.2) unstable; urgency=medium
  * Restructure scripts/ into core/setup/probes/helpers/integrations/tools/ui and
    data/ into catalog/dictionaries/examples/protocols for clearer ownership.
  * Wire new HTTP banner, SSDP, and ONVIF device-info harvesting into discovery
    output with accompanying logs to strengthen profiling coverage.
  * Fix target handling by passing multiple CIDRs directly to Nmap/Masscan and
    auto-detecting the default network instead of guessing /24.
  * Update packaging install lists for the new layout and refresh documentation,
    man page paths, and README flow; bump version string to 2.2.2.
 -- John Hauger Mitander <john@on1.no>  Tue, 09 Dec 2025 01:00:00 +0000

camsniff (2.2.1) unstable; urgency=medium
  * Move PORT_PROFILE_DATA and UI_HELPER to scripts/ for proper shellcheck sourcing.
  * implemented new scanning features and bug fixes.
  * Refactor script paths in analyze.sh and camsniff.sh for consistency
  * Moved Python scripts that resided in camsniff.sh to scripts/ for better organization.
  * 
  * Add missing shellcheck disable directives to sourced UI scripts.
  * Fix UI banner

 -- John Hauger Mitander <john@on1.no>  Sat, 11 Oct 2025 01:00:00 +0000

camsniff (2.2.0) unstable; urgency=medium

  * Overhaul extras UX with animated spinners, clearer banners, and quiet mode.
  * Implement comprehensive IVRE integration for reconnaissance data management:
    - Unified ivre-manager.sh orchestrates setup, ingestion, and queries
    - Automatic MongoDB 7.0 installation via official repos or tarball fallback
    - Python virtualenv auto-creation with IVRE and pymongo packages
    - Vendor database enrichment from paths.csv (131 OUI entries)
    - Credential mapping from credentials.json with thumbnail references
    - Host deduplication before ingestion to prevent MongoDB collisions
    - Direct store_host() ingestion replaces problematic bulk JSON method
  * Provision DB-IP GeoIP City/ASN datasets automatically and export lookup
    paths for IVRE, avoiding warnings during sync.
  * Harden dependency installer for Debian trixie by removing unsupported
    bookworm repository entries and modernising apt source management.
  * Make requirements.txt optional in deps-install.sh for clean venv setup.
  * Enhanced scripts with shellcheck compliance and removed obsolete comments.
  * Improved error handling and logging across all IVRE integration points.

 -- John Hauger Mitander <john@on1.no>  Sat, 11 Oct 2025 01:00:00 +0000

camsniff (2.1.0) unstable; urgency=medium

  * Drop manual maintainer script cache refreshes and the empty scripts.
  * Ship upstream LICENSE via debhelper docs install list.
  * Sync manual page header with 2.1.0 release version.
  * Remove redundant bash dependency and treat sourced helpers as data.

 -- John Hauger Mitander <john@on1.no>  Fri, 03 Oct 2025 13:00:00 +0000

camsniff (2.0.0) unstable; urgency=medium

  * Ensure manual page is installed via dh_installman for proper gzip -9.
  * Move user-facing references into debian/camsniff.docs for policy compliance.
  * Ship extended Markdown guides and assets under /usr/share/doc/camsniff.

 -- John Hauger Mitander <john@on1.no>  Tue, 30 Sep 2025 12:00:00 +0000

camsniff (1.1.0) unstable; urgency=medium

  * Expand multi-protocol scanning coverage and surface results in discovery.json.
  * Extend credential probing with RTSP brute discoveries and protocol context.
  * Refresh helper scripts, bootstrap dependencies reliably, and clean requirements.
  * Align Debian metadata with contrib guidelines and fix desktop/icon integration.

 -- John Hauger Mitander <john@on1.no>  Tue, 30 Sep 2025 00:00:00 +0000

camsniff (1.0.0) unstable; urgency=medium

  * Integrate rtsp-url-brute NSE script into the primary Nmap stage.
  * Persist scan artifacts in dev/results/ with structured JSON and logs.
  * Document mode-aware CLI, credential probing, and packaging workflow.

 -- John Hauger Mitander <john@on1.no>  Mon, 29 Sep 2025 00:00:00 +0000
