Andy Dixon
5dbf85f84e
Phase 4: authorised HTTPS interception (Mode B)
...
Toggleable transparent interception via mitmdump in a venv. Own RSA CA generated
in-app, downloadable (public cert only, key never leaves the box), with per-OS
install guide and fingerprint. nftables redirect accepts only dnat'd connections
(never an open proxy). HTTP Explorer with headers and opt-in body viewers (JSON/
text/hex/image, sandboxed). Honest status: pinned/untrusting = reported errors,
excluded hosts pass through, bodies off by default. Helper op + systemd unit +
installer venv build + boot restore.
2026-10-10 08:05:42 +01:00
Andy Dixon
4320428f41
Add illustrated LaTeX user guide (British English, skim-first design) with UI screenshots
2026-10-09 22:20:04 +01:00
Andy Dixon
658015b2a7
Track web/dist/.gitkeep so a fresh clone satisfies go:embed
2026-10-09 22:16:31 +01:00
Andy Dixon
b6ce5b5611
UI robustness: error boundary per page; fix null-array crashes (TLS certificates, idle dashboard interfaces, stats slices)
2026-10-09 22:14:24 +01:00
Andy Dixon
331ac04759
Docs: encryption/TLS guide, development guide, troubleshooting, CHANGELOG; API reference for Phase 3/5 endpoints
2026-10-09 22:07:51 +01:00
Andy Dixon
42165f2669
Benchmarks doc with measured Pi 5 figures; record Findings + H16/H17 results
2026-10-09 22:04:53 +01:00
Andy Dixon
6429e99cd9
Benchmark harness (python3-only); enable MemoryAccounting on pilens.service
2026-10-09 22:03:30 +01:00
Andy Dixon
fa5445e4a4
Phase 5: Findings diagnostics panel; pin Go toolchain 1.27.2 (0 called stdlib vulns); npm audit clean
2026-10-09 22:01:03 +01:00
Andy Dixon
68702f1b2e
Docs: mark Phase 3 implemented (conversations, follow stream, DNS/TLS explorers, statistics)
2026-10-09 18:43:42 +01:00
Andy Dixon
8292113a66
TLS explorer: report the true negotiated version (supported_versions / QUIC), not the compat record version; capture QUIC server port
2026-10-09 18:42:06 +01:00
Andy Dixon
6605a1d467
Phase 3: conversations, Follow TCP Stream, DNS explorer, TLS metadata explorer, statistics
...
Conversations and statistics are computed from the SQLite summary index (across
segments); stream payload via tshark follow; DNS/TLS fields via tshark. TLS is
metadata-only and labelled 'encrypted pass-through' throughout.
2026-10-09 18:39:39 +01:00
Andy Dixon
ab79730195
Record Raspberry Pi 5 hardware acceptance results
2026-10-09 18:26:26 +01:00
Andy Dixon
d8bfcee2fc
Recovery: reindex interrupted sessions and fix packet counts; actionable AP activation error
2026-10-09 18:22:56 +01:00
Andy Dixon
43cbcc4076
KillMode=mixed so shutdown finalises captures cleanly; dumpcap -F pcapng; fix installer AP check pattern
2026-10-09 18:19:09 +01:00
Andy Dixon
0edca7fdd7
Return empty rows (not null) for filtered pages with no matches
2026-10-09 18:18:14 +01:00
Andy Dixon
46513bab88
Hardware fixes: rpi_volt under-voltage fallback, dnsmasq except-interface=lo, installer AP check after iw install
2026-10-09 18:13:17 +01:00
Andy Dixon
1c31e3b3d5
Documentation: network policy, security model, forensics, operations, API, testing, limitations
2026-10-09 17:58:58 +01:00
Andy Dixon
01b568aaf7
Web UI, packaging, systemd units, installer scripts, namespace integration tests
...
React/TS analyser (virtualised packet list, protocol tree, verified hex mapping),
setup wizard, network/devices/health/library/settings pages. Installer with
backup and rollback, uninstall/repair/diagnose. Docker+netns integration suite
covering DHCP, DNS, NAT, isolation, IPv6 blocking, capture and export.
2026-10-09 17:56:02 +01:00
Andy Dixon
31e39bdbef
Management API, service binary and host probes
...
TLS-only HTTP API with Argon2id auth, setup token, CSRF, TOTP, login throttling,
management source allow-list; network apply via helper; capture endpoints;
SSE events; crash recovery of interrupted segments; systemd notify/watchdog.
2026-10-09 17:39:24 +01:00
Andy Dixon
52da3c13f6
Core packages: config validation, network renderers, root helper, auth, SQLite store, capture engine
...
Capture engine streams dumpcap pcapng into verbatim, hashed segments with
per-segment tshark summaries; display filters, PDML dissection with verified
byte ranges, export and import. Tests run in a Debian trixie container.
2026-10-09 17:34:32 +01:00
Andy Dixon