internal/

Package asn1 decodes BER-encoded structures from untrusted input.

Package capture wraps libpcap so the engine sees one interface whether packets come from a live NIC or a saved capture file.

Package engine turns captured packets into parser events.

Package event defines the common envelope every parser emits.

Command gensample writes testdata/sample.pcap, the small synthetic capture used to exercise percept from the command line.

Package ntlmssp decodes NTLM authentication messages.

Package output writes parser events somewhere useful.

Package parser defines the contract every protocol parser implements and the registry the engine uses to dispatch traffic to them.

Package parsers is where protocol parsers are wired into a registry.