v0.5.1

Fixes

• Sensor drops (impairments.sensor_drop, medium/hard) could remove a packet that continues a TLS
  record: a write larger than one loopback segment is recorded as several data packets, and only the
  composer's own segment trains were protected. tshark then parsed the rest of the record as a new one
  ("TLSCiphertext length MUST NOT exceed 2^14 + 2048") and verification failed, depending on how the
  recording host's stack split the write (seen in the 0.5.0 release job on it-baseline-operations
  hard). A data packet that follows another from the same side, with no data from the peer in between,
  is now never dropped or duplicated. Captures with sensor_drop or span_duplicates can differ from
  0.5.0 for the same seed.
• actors/smb_lateral.py: no SyntaxWarning (invalid escape sequence) on import.

Sample captures

Generated with --seed release, two zips per scenario and difficulty:

• <run>-student.zip: capture.pcap, briefing.md (handout) and submission_template.yaml
  (fill it in, then grade it with pcapforge grade answers.json <submission>).
• <run>-instructor.zip: the whole run, including answers.json, siem/ and detections/.
  Keep it away from students.