Changelog¶

All notable changes to this project are documented here. The format follows Keep a Changelog.

[2.0.0] - 2026-11-01¶

Open-source project files: MIT LICENSE, THIRD_PARTY_NOTICES.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, issue and pull request templates.
Documentation website on GitHub Pages, built from docs/ with MkDocs Material, including a live interactive demo.
Documentation in docs/ with Mermaid diagrams: how it works, demo guide, tech stack, ways to run it, FAQ and troubleshooting.
Automated tests (tests/) covering parsing, geolocation, alert rules, every exporter, every web API and the privileged live-capture pipeline (replayed from the sample, so no root is needed).
GitHub Actions CI on Linux, macOS and Windows.

The sample capture is now synthetic. traffic2.pcap (a real capture) was replaced by sample-browsing.pcap, generated by examples/make_sample_capture.py from an imaginary home network, so the repository contains no real person's traffic. Old captures, reports and screenshots containing real addresses were removed from the git history.
Sample reports moved to examples/sample-output/ and screenshots to docs/images/.
Finding_ip_address.md moved to docs/finding-your-ip.md.

code_explanation_updated_project .md, which described the old single-script version. It is replaced by docs/how-it-works.md.

Rebuilt as NetMap: a live web dashboard with one-click launchers, live capture through the system password prompt, PCAP drag-and-drop, real hostnames (DNS/SNI/HTTP/reverse DNS), security alerts, and HTML/KML/CSV/TXT/JSON exports.

Original command-line script: reads a Wireshark capture, geolocates IPs with GeoLiteCity and writes a KML file for Google My Maps.