4bb95fdb97
Add a --report flag to the pcap command that prints one forensic summary of a whole capture (endpoint inventory, fingerprint distribution, intel verdicts, detection alerts, and a coverage section with the TLS miss rate and throughput) instead of the per-event stream, folding in intel and detection automatically when a seeded database is present. Add a tls_handshakes_fingerprinted counter and Counters::tls_miss_rate so truncated and multi-segment ClientHellos the capture clipped are reported rather than mistaken for absence. Add criterion benches over the vendored captures and the parse/hash hot path. Plus frontend landing and asset polish. |
||
|---|---|---|
| .. | ||
| .github/workflows | ||
| crates | ||
| frontend | ||
| infra | ||
| scripts | ||
| testdata/pcap | ||
| .dockerignore | ||
| .env.example | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||
| LICENSE | ||
| NOTICE.md | ||
| cloudflared.compose.yml | ||
| compose.yml | ||
| deny.toml | ||
| dev.compose.yml | ||
| install.sh | ||
| justfile | ||
| rustfmt.toml | ||