Skip to content

feat: add pcap live network capture — complete M2, bump to v0.2.1#4

Merged
akosidencio merged 1 commit into
mainfrom
dev
Apr 4, 2026
Merged

feat: add pcap live network capture — complete M2, bump to v0.2.1#4
akosidencio merged 1 commit into
mainfrom
dev

Conversation

@akosidencio

Copy link
Copy Markdown
Contributor
  • PcapIngestor in conan-net/src/capture.rs: captures TCP port 80/443 traffic for a configurable window and emits NetworkConnection events
  • HTTP/1.1 header parsing: matches registry on Host header; also emits for Authorization: Bearer tokens in cleartext even without a registry hit
  • TLS SNI extraction from raw ClientHello bytes — identifies HTTPS destinations without decrypting traffic
  • Per-connection deduplication within a capture window
  • Graceful permission-denied error with fix instructions (setcap / sudo)
  • Gated behind optional feature: cargo build --features pcap-capture
  • conan scan --source pcap --pcap-secs N --pcap-iface IFACE
  • 6 unit tests for packet parser edge cases
  • M2 roadmap fully complete, bump version 0.2.0 → 0.2.1

- PcapIngestor in conan-net/src/capture.rs: captures TCP port 80/443 traffic
  for a configurable window and emits NetworkConnection events
- HTTP/1.1 header parsing: matches registry on Host header; also emits for
  Authorization: Bearer tokens in cleartext even without a registry hit
- TLS SNI extraction from raw ClientHello bytes — identifies HTTPS destinations
  without decrypting traffic
- Per-connection deduplication within a capture window
- Graceful permission-denied error with fix instructions (setcap / sudo)
- Gated behind optional feature: cargo build --features pcap-capture
- conan scan --source pcap --pcap-secs N --pcap-iface IFACE
- 6 unit tests for packet parser edge cases
- M2 roadmap fully complete, bump version 0.2.0 → 0.2.1
@akosidencio akosidencio merged commit c46c0c7 into main Apr 4, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant