ca7450beff
test(perf): evaluate larger and non-HTTP packet workflows ( #3232 )
...
Add reproducible larger/non-HTTP packet cost measurements, an independent header oracle, exact page validation and separate factual/plan grading. Document caller-selected controls and retain negative/mixed model results. Production defaults and APIs remain unchanged.
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
Co-authored-by: Kaoru0822 <[email protected] >
2026-10-14 16:18:22 +08:00
Olorin and N0zoM1z0
9c34c091b3
feat(captures): discover installed protocol and field definitions ( #2496 )
...
* feat(captures): discover installed protocol and field definitions
* test(captures): isolate the direct glossary oracle profile
* test(captures): accept padded kernel limit reports
* fix(captures): detach every retained glossary column
* fix(captures): describe every field discovery CLI option
* fix(captures): retain discovery operation across cleanup retries
---------
Co-authored-by: N0zoM1z0 <[email protected] >
2026-10-13 15:55:25 +09:00
a2d8b94dd5
feat(fiddler): inspect native SAZ captures
...
Inspect bounded recorded raw HTTP/XML SAZ archives and page retained capture Evidence. Preserve exact stored bytes and provenance, validate ZIP/XML integrity, and require an enforceable decoder memory bound.
Verified 356 real recorded sessions against independent byte and metadata oracles, public CLI/MCP parity, retained pages, and related interface checks. Current Fiddler Everywhere GUI and non-Linux producer workflows remain unverified.
Co-authored-by: zahhak <[email protected] >
Co-authored-by: N0zoM1z0 <[email protected] >
2026-10-13 02:51:14 +00:00
Ysopwnable and Olorinm
f611d8ce72
feat(captures): inspect recorded packets with bounded TShark delivery ( #2318 )
...
Inspect selected fields in existing captures through shared CLI/MCP Evidence.
Page matching frames without changing dissection or two-pass read coverage;
retain failed descriptor/process cleanup ownership and reject excess admission.
Verified with real TShark 4.0.17 and 4.2.2, public Wireshark recordings,
owned HTTP application traffic, real CLI/MCP workflows and schema checks.
Co-authored-by: Olorinm <[email protected] >
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
2026-10-12 19:35:35 +00:00