Skip to content

v1.1.0 — Host-scoped PCAP triage

Latest

Choose a tag to compare

@defamp defamp released this 16 Oct 07:50

Changelog

v1.1.0 — 2026-10-16

  • Add repeatable --host IP_OR_CIDR filters for IPv4 and IPv6.
  • Match either packet endpoint against any supplied host/network before all analysis.
  • Label the analysis scope in terminal, Markdown, HTML and full JSON reports.
  • Preserve the IOC-only JSON shape and existing detection thresholds/exit codes.
  • Explain no-match results, non-IP exclusion and CIDR normalization in the README.
  • Test real synthetic PCAP/PCAPNG captures, CLI output, validation and detection isolation.