Issues

capinfos packet count runs on the request thread inside the upload @Transactional, pinning a DB connection
NotYuSheng/TracePcap#826 · opened on Sep 28, 2026
Story BeaconDetector flags internal service keepalives (e.g. NetBIOS to the DC) as CRITICAL C2 keepalive
NotYuSheng/TracePcap#823 · opened on Sep 20, 2026
1
RFC: name the 'Represent' (knowledge) stage; decide early-substrate vs. late-projection
NotYuSheng/TracePcap#822 · opened on Sep 19, 2026
RFC + Epic: Autonomous pcap investigation (technique library + goal-driven orchestrator) — "Pentera for pcap"
NotYuSheng/TracePcap#819 · opened on Sep 19, 2026
1
Story-mode info popovers use OverlayTrigger+rootClose, not useEscapeLayer (CLAUDE.md convention)
NotYuSheng/TracePcap#817 · opened on Sep 19, 2026
Knowledge layer: contributors each load conversationFacts independently (~3x I/O per assemble)
NotYuSheng/TracePcap#816 · opened on Sep 19, 2026
RFC + Epic: Blackboard knowledge layer + deterministic checks + agent narration
NotYuSheng/TracePcap#813 · opened on Sep 19, 2026
Windows sign-in identity (#809): review follow-ups
NotYuSheng/TracePcap#812 · opened on Sep 19, 2026
feat: extract Windows identity (username, real name) from LDAP + Kerberos traffic
NotYuSheng/TracePcap#809 · opened on Sep 13, 2026
Demo: use TracePcap to walk through a real network-forensics incident scenario
NotYuSheng/TracePcap#808 · opened on Sep 13, 2026
.env.example defaults TRACEPCAP_AUTH_ENABLED=true, crashing the base stack (contradicts docs' off-by-default claim)
NotYuSheng/TracePcap#802 · opened on Aug 20, 2026
PcapParserService's per-parse string pool has no capacity bound
NotYuSheng/TracePcap#797 · opened on Aug 20, 2026
Report download fails on dense topology diagrams: JSON string length exceeds Jackson's 20MB default
NotYuSheng/TracePcap#792 · opened on Aug 20, 2026
No execution test for the memory-budget-derived values in docker-entrypoint.sh
NotYuSheng/TracePcap#791 · opened on Aug 20, 2026
OOM on large captures: the parser holds the whole file in heap, and the OOM takes the web server with it
NotYuSheng/TracePcap#779 · opened on Aug 14, 2026
3
Analysis transaction can exhaust the connection pool at full async concurrency
NotYuSheng/TracePcap#767 · opened on Aug 14, 2026
Module boundaries are UI-shaped, and there is no shared kernel
NotYuSheng/TracePcap#734 · opened on Aug 13, 2026
2
Test strategy: close the middle of the pyramid (the gap #630 came through)
NotYuSheng/TracePcap#659 · opened on Aug 12, 2026
6
Investigator-owned canvas: persisted layout, grouping regions, canvas annotations
NotYuSheng/TracePcap#649 · opened on Aug 11, 2026
Persistent entity identity across re-addressing (entity layer above IP/MAC)
NotYuSheng/TracePcap#648 · opened on Aug 11, 2026
Network graph: relational selection (focus node + N hops, expand neighbours, path between hosts)
NotYuSheng/TracePcap#647 · opened on Aug 11, 2026
Scheduled monitor-snapshot retention bypasses snapshot reordering and change-detection replay
NotYuSheng/TracePcap#635 · opened on Aug 10, 2026
feat: cross-snapshot investigation agent for Monitor mode
NotYuSheng/TracePcap#626 · opened on Jul 28, 2026
feat: wire human annotations into StoryService as agent memory
NotYuSheng/TracePcap#625 · opened on Jul 28, 2026
feat: widen the agent tool surface beyond the conversations table
NotYuSheng/TracePcap#624 · opened on Jul 28, 2026