Skip to content

v5.0

Choose a tag to compare

@srixivas srixivas released this 27 Apr 18:24
· 17 commits to master since this release

What's new

πŸš€ Engine

  • Pluggable packet engine: dpkt (default, fast), Scapy (TLS-aware), PyShark (tshark-backed)
  • Streaming PCAP reader β€” memory stays flat regardless of file size
  • Engine selector in the toolbar, right next to Analyze! so you always know what's running
  • Covert traffic DNS checks now run in parallel after parsing β€” no more per-packet blocking lookups

πŸ—„οΈ Analysis

  • SQLite session cache β€” reload a previous run without re-parsing the PCAP
  • Interactive graph panel embedded in the main window; click any node to see IP, domain, sessions, and protocols

πŸ–₯️ UI

  • Progress spinner with phase labels: Reading packets β†’ Resolving hosts β†’ Rendering graph
  • Graph Panel and Interactive Graph unlock only after a successful Visualize!
  • macOS: clicking the dock icon reliably raises the window
  • macOS: focus returns automatically after analysis and graph operations β€” no more title-bar clicks

πŸ”§ Internals

  • Python 3.10+ only β€” Python 2 fully removed
  • Pydantic-backed memory state with typed models across all modules
  • 86 tests, tox isolated envs (default + all-engines), CI on Python 3.10 / 3.11 / 3.12