Changelog

v4.0.0 - 2025-09-17

Features and Enhancements

  • Modernized the nettools.whois command to use RDAP for domain lookups with fallback support to legacy WHOIS.

  • FQDN and IP WHOIS lookups now store the raw RDAP response in node data, using the key nettools:whois:rdap. The :text property is only set on inet:whois:rec nodes when processing a domain lookup that had to fall back to legacy WHOIS support.

v3.24.0 - 2025-06-13

  • Updated DNS resolution libraries.

v3.23.0 - 2025-06-13

Features and Enhancements

  • Updated the service to build from Synapse v2.213.0.

v3.22.0 - 2025-06-06

Features and Enhancements

  • Updated how DNS resolvers are managed internally by synapse-nettools.

v3.21.0 - 2025-05-13

Features and Enhancements

  • Removed $lib.str usage from synapse-nettools.

v3.20.0 - 2025-01-17

Features and Enhancements

  • Updated deprecated $lib.list() usage to JSON style syntax.

v3.19.0 - 2025-01-09

Features and Enhancements

  • Updated the creation of inet:whois:iprec nodes to set the :created property.

v3.18.0 - 2024-12-02

Features and Enhancements

  • Update the service to build from Synapse v2.190.0.

v3.17.0 - 2024-09-25

Automatic Migrations

  • Migrate all inet:whois:iprec:registrant properties created by Synapse-Nettools by appending them to the node’s :contacts property and removing the :registrant value.

Features and Enhancements

  • Update the service to no longer create deprecated inet:whois:iprec:registrant properties from whois data.

v3.16.0 - 2024-08-20

Features and Enhancements

  • Update the service to build from Synapse v2.178.0.

v3.15.0 - 2024-03-26

Features and Enhancements

  • Update the service to build from Synapse v2.165.0.

v3.14.0 - 2024-03-01

Features and Enhancements

  • Update the service to build from Synapse v2.164.0.

v3.13.1 - 2024-02-16

Features and Enhancements

  • Update deprecated $lib.dict() usage to JSON style syntax.

v3.13.0 - 2023-11-15

Features and Enhancements

  • Update the service to build from Synapse v2.154.1.

v3.12.0 - 2023-10-13

Features and Enhancements

  • Update the service to build from Synapse v2.151.0.

v3.11.0 - 2023-09-18

Features and Enhancements

  • Update ingest to use inet:whois:iprec:contacts instead of the deprecated inet:whois:iprec:registrant property.

v3.10.1 - 2023-08-28

Bugfixes

  • Fix an issue where nettools.whois results containing error messages resulting from failed connections to WHOIS servers were being used to make inet:whois:rec nodes.

v3.10.0 - 2023-08-21

Features and Enhancements

  • Update the service to build from Synapse v2.144.0.

v3.9.0 - 2023-07-28

Features and Enhancements

  • Update the service to build from Synapse v2.143.0.

v3.8.0 - 2023-07-07

Features and Enhancements

  • Update the service to build from Synapse v2.141.0.

v3.7.0 - 2023-05-18

Features and Enhancements

  • Update the service to build from Synapse v2.134.0.

v3.6.0 - 2023-05-09

Features and Enhancements

  • Update the service to build from Synapse v2.133.0.

v3.5.1 - 2023-04-14

Bugfixes

  • Fix an issue where partial results from nettools.whois would raise an exception rather than ingesting the data that was available.

  • Fix an issue where nettools.whois results containing an invalid domain_name were not handled properly.

v3.5.0 - 2023-02-02

Features and Enhancements

  • Automatically only display TXT results table when DMARC is selected in Synapse-NetTools workflows.

  • Update the service to build from Synapse v2.122.0.

Bugfixes

  • Fix an issue where the --jobs argument to nettools.dns.variants was not handled correctly.

v3.4.1 - 2022-12-06

Bugfixes

  • Fix a packaging issue.

v3.4.0 - 2022-12-05

Features and Enhancements

  • Add boot hooks to the container entrypoint. Move the entrypoint script to /vertex/synapse/entrypoint.sh.

v3.3.0 - 2022-10-09

Features and Enhancements

  • Update the service to build from Synapse v2.110.0.

v3.2.0 - 2022-07-20

Features and Enhancements

  • Add support for specifying the DNS name servers used when performing DNS lookups.

v3.1.0 - 2022-07-06

Features and Enhancements

  • Add timeout argument to IP WHOIS command.

  • Restore DNS and WHOIS node actions.

  • Allow for multiple FQDNs/IPs in workflow queries.

  • Improve UX for workflows.

Bugfixes

  • Set RDAP rate-limiting backoff to 5 seconds so retries will execute with default 30 second timeout.

v3.0.0 - 2022-06-03

Features and Enhancements

  • Update permissions to use power-ups.nettools.user rule.

  • Update FQDN DNS APIs to yield results in a message tuple format.

  • Port WHOIS command to use --asof style caching.

  • Provide DNS types as multiple arguments to nettools.dns.

  • Add Optic Workflows for WHOIS and DNS queries.

v2.16.0 - 2022-05-17

Features and Enhancements

  • Update to the newest Synapse v2.93.0 to support AHA provisioning.

Bugfixes

  • Load storm package readonly to allow containers to run as non-root user.

v2.15.1 - 2022-04-29

Bugfixes

  • Fix an issue where DNS lookups could fail for INDA encoded domains which were not IDNA2008 compatible.

v2.15.0 - 2022-03-28

Features and Enhancements

  • Update the Nettools service to build off of the current Synapse base image.

v2.14.2 - 2021-12-09

Bugfixes

  • Downgrade aiodns errors from error to warning log level. Supress NXDOMAIN errors since they can be overly verbose.

Improved Documentation

  • Update the nettools.whois command documentation to include the ipwhois light edges created by the command.

v2.14.1 - 2021-11-09

Bugfixes

  • Fix an issue were empty responses could cause BadTypeValu exceptions when making nodes for DNS records.

v2.14.0 - 2021-11-01

Features and Enhancements

  • Embed some of the NetTools documentation into the Storm Package delivered by the NetTools Storm Service so it is available in Optic.

Bugfixes

  • Fix an if statement in the nettools.dns.variants Storm command which was relying on a incorrect Storm behavior.

v2.13.2 - 2021-09-23

Bugfixes

  • Fix a bug where bad PTR record names could teardown a Storm query.

  • Fix a bug where timeout error messages were being logged incorrectly.

v2.13.1 - 2021-08-30

Bugfixes

  • Fix a bug where the inet:whois:iprec:contacts property did not contain all of the contacts which were derived from the record.

  • Fix a bug where Python timeouts errors were incorrectly being sent to users, resulting in confusing error messages.

  • Fix a bug where nettools.dns and nettools.whois would lose path variable scope when using --yield.

  • Suppress errors in the getFqdnDns() API when enumerating subdomains.

v2.13.0 - 2021-07-20

Features and Enhancements

  • Update the service to use tini as a container entrypoint.

v2.12.0 - 2021-07-14

Features and Enhancements

  • Update the service to ensure that the meta:source node is always made in the current View prior to creating any nodes which may be linked to it via a light edge. This removes the service onload event as a result.

Bugfixes

  • Correct the Storm command form hinting to correctly represent nodes which may be yielded from commands.

v2.11.0 - 2021-06-21

Features and Enhancements

  • Update the service to build from Synapse v2.43.0.

v2.10.1 - 2021-06-18

Bugfixes

  • Correctly handle PTR records containing empty strings. (#32)

  • Fix a display issue in the help output for nettools.dns.variants. (#32)

  • Add missing debug output in nettools.dns. (#33)

v2.10.0 - 2021-06-14

Features and Enhancements

  • Add Storm command to find variants of an FQDN that have DNS entries.

v2.9.0 - 2021-06-11

Features and Enhancements

  • Add API to brute force discover subdomains of an FQDN.

v2.8.0 - 2021-05-17

Features and Enhancements

  • Add a --dmarc option to retrieve DMARC records for a FQDN.

  • Set the :dns:rev property on inet:ipv4 and inet:ipv6 nodes when it is available.

  • Update the service to build from Synapse v2.38.0.

v2.7.0 - 2021-04-26

Features and Enhancements

  • Update the service to include information for the getCellInfo() API.

v2.6.0 - 2021-04-19

Features and Enhancements

  • Add Optic actions for whois, dns, and dnswild. (#23)

Bugfixes

  • Handle whois returning string instead of datetime. (#22)

v2.5.0 - 2021-01-09

Features and Enhancements

  • Add SOA records to nettools.dns. (#21)

  • Build new Docker tags for the latest release in a given major version. For example, this adds the v2.x.x Docker tag. (#20)

v2.4.0 - 2020-12-03

Features and Enhancements

  • Updated synapse version dependency to 2.12.3 (#19)

  • Implement last-enriched convention to allow re-enrichment delay (#18)

v2.3.0 - 2020-11-13

Features and Enhancements

  • Add support for CNAME and PTR records to nettools.dns. (#17)

Bugfixes

  • Prevent creating ps:contact nodes when there is no data to record. (#17)

v2.2.2 - 2020-09-21

Bugfixes

  • Update ipwhois version requirement to pull in a bugfix for null values in whois records. (#16)

v2.2.1 - 2020-09-11

Bugfixes

  • Fix an issue with handling invalid times in whois records. (#13)

  • Update the contacts array prop on inet:whois:iprec nodes instead of overwriting it. (#14)

v2.2.0 - 2020-09-04

Features and Enhancements

  • Create inet:cidr4/inet:cidr6 nodes when ingesting ipwhois results. (#11)

  • Allow fallback ASN lookup methods. (#10)

Bugfixes

  • Fix incorrect handling of whois records with only one nameserver. (#12)

Improved Documentation

  • Document nodedata added by commands. (#9)

v2.1.1 - 2020-07-09

Bugfixes

  • Fix a Docker image packaging issue. (#8)

v2.1.0 - 2020-06-30

Features and Enhancements

  • Make the --yield behavior consistent for Storm Services. (#6)

Improved Documentation

  • Add Initial Documentation. (#7)

v2.0.1 - 2020-06-23

Features and Enhancements

  • Initial release of the Synapse NetTools service.