v5.1 — Live Traffic Capture

🚀 What's new in v5.1

📡 Live traffic capture

• Real-time packet sniffing via LivePcapEngine (AsyncSniffer)
• Matplotlib graph panel opens immediately and updates every 4 seconds
• Deferred covert channel detection runs on stop (batch DNS resolution)
• Session auto-saved to SQLite on stop — reload anytime without re-capture
• Click Visualize! after stop for a point-in-time static PNG + pyvis HTML

⚙️ Pluggable PCAP engines

• Four interchangeable backends: auto, dpkt, scapy, pyshark
• auto tries dpkt first, falls back to scapy
• Engine selector in the toolbar before analysis

🖥️ UI improvements

• Linux layout fixed: zoom buttons, description text, no horizontal overflow
• Static graph canvas resizes with the window — no more navy blue gap
• Spinner stale chain bug fixed — stop always completes cleanly
• macOS minimize restore improved

📖 Docs

• README rewritten with mermaid module overview, live capture usage, engines table
• New DEV.md: full architecture, call flow diagrams, threading model
• New SECURITY.md: coding security guidelines for contributors and agents

📦 Setup

Linux (Ubuntu/Debian):

sudo apt-get update
sudo apt-get install -y python3-tk graphviz tshark
pip3 install -r requirements.txt
sudo python3 Source/main.py

macOS:

brew install graphviz
pip3 install -r requirements.txt
sudo python3 Source/main.py

sudo is required for live capture. File analysis runs without it.
Python 3.10+ required.