Commit Graph
16 Commits
Author SHA1 Message Date
Andy Dixon 331ac04759 Docs: encryption/TLS guide, development guide, troubleshooting, CHANGELOG; API reference for Phase 3/5 endpoints 2026-10-09 22:07:51 +01:00
Andy Dixon 42165f2669 Benchmarks doc with measured Pi 5 figures; record Findings + H16/H17 results 2026-10-09 22:04:53 +01:00
Andy Dixon 6429e99cd9 Benchmark harness (python3-only); enable MemoryAccounting on pilens.service 2026-10-09 22:03:30 +01:00
Andy Dixon fa5445e4a4 Phase 5: Findings diagnostics panel; pin Go toolchain 1.27.2 (0 called stdlib vulns); npm audit clean 2026-10-09 22:01:03 +01:00
Andy Dixon 68702f1b2e Docs: mark Phase 3 implemented (conversations, follow stream, DNS/TLS explorers, statistics) 2026-10-09 18:43:42 +01:00
Andy Dixon 8292113a66 TLS explorer: report the true negotiated version (supported_versions / QUIC), not the compat record version; capture QUIC server port 2026-10-09 18:42:06 +01:00
Andy Dixon 6605a1d467 Phase 3: conversations, Follow TCP Stream, DNS explorer, TLS metadata explorer, statistics
Conversations and statistics are computed from the SQLite summary index (across
segments); stream payload via tshark follow; DNS/TLS fields via tshark. TLS is
metadata-only and labelled 'encrypted pass-through' throughout.
2026-10-09 18:39:39 +01:00
Andy Dixon ab79730195 Record Raspberry Pi 5 hardware acceptance results 2026-10-09 18:26:26 +01:00
Andy Dixon d8bfcee2fc Recovery: reindex interrupted sessions and fix packet counts; actionable AP activation error 2026-10-09 18:22:56 +01:00
Andy Dixon 43cbcc4076 KillMode=mixed so shutdown finalises captures cleanly; dumpcap -F pcapng; fix installer AP check pattern 2026-10-09 18:19:09 +01:00
Andy Dixon 0edca7fdd7 Return empty rows (not null) for filtered pages with no matches 2026-10-09 18:18:14 +01:00
Andy Dixon 46513bab88 Hardware fixes: rpi_volt under-voltage fallback, dnsmasq except-interface=lo, installer AP check after iw install 2026-10-09 18:13:17 +01:00
Andy Dixon 1c31e3b3d5 Documentation: network policy, security model, forensics, operations, API, testing, limitations 2026-10-09 17:58:58 +01:00
Andy Dixon 01b568aaf7 Web UI, packaging, systemd units, installer scripts, namespace integration tests
React/TS analyser (virtualised packet list, protocol tree, verified hex mapping),
setup wizard, network/devices/health/library/settings pages. Installer with
backup and rollback, uninstall/repair/diagnose. Docker+netns integration suite
covering DHCP, DNS, NAT, isolation, IPv6 blocking, capture and export.
2026-10-09 17:56:02 +01:00
Andy Dixon 31e39bdbef Management API, service binary and host probes
TLS-only HTTP API with Argon2id auth, setup token, CSRF, TOTP, login throttling,
management source allow-list; network apply via helper; capture endpoints;
SSE events; crash recovery of interrupted segments; systemd notify/watchdog.
2026-10-09 17:39:24 +01:00
Andy Dixon 52da3c13f6 Core packages: config validation, network renderers, root helper, auth, SQLite store, capture engine
Capture engine streams dumpcap pcapng into verbatim, hashed segments with
per-segment tshark summaries; display filters, PDML dissection with verified
byte ranges, export and import. Tests run in a Debian trixie container.
2026-10-09 17:34:32 +01:00