Summarize saved Wireshark4.x captures with enforced native resource limits, serialized admission, stable snapshot verification and retained fact/text pages. Preserve complete inventories within resource budgets and source uncertainty; report cleanup failure with partial Evidence and retained ownership. Verified six recorded corpora /13026 packets with independent Scapy/Python oracles, real CLI/MCP/schema parity,60 SNI names,132 DNS addresses and1000 URIs. Real TShark CI now exercises summary/paging. Actual Windows/Bun Wireshark remains unverified; macOS capture requires a separate enforceable-bound decision. Co-authored-by: 3QL <85309073+3QL@users.noreply.github.com> Co-authored-by: N0zoM1z0 <161784452+N0zoM1z0@users.noreply.github.com>
8 lines
386 B
TypeScript
8 lines
386 B
TypeScript
import type { PcapAnalysisPort } from "../application/pcap/PcapAnalysisPort.js";
|
|
import { PcapProvider } from "../pcap/PcapProvider.js";
|
|
|
|
/** Construct one pcap provider bound to the caller-selected tools. */
|
|
export const createPcapAnalysisProvider = (
|
|
environment: Readonly<Record<string, string | undefined>> = process.env,
|
|
): PcapAnalysisPort => new PcapProvider({ environment });
|