ninedter / pcap-hunter

What it does

• Multi-Provider LLM Support. three interchangeable backends under Settings → LLM & reports:
• Configurable Context Budget. select a 10K–1M-token model window with a conservative 50% input ceiling, or explicitly enable unlimited mode to send all sanitized evidence at once.
• Evidence-Grounded Reporting. SOC-ready reports with severity-calibrated assessments, false-positive awareness, confidence qualifiers, a Risk Matrix rendered as a real Markdown table, and an IOC Summary table.
• LLM-Optional Evidence View. parsed packet, flow, IOC, correlation, stage, and warning evidence remains visible when generation is skipped or the provider is unavailable.
• Multi-Language Reports. 9 languages with region-specific terminology: English, Traditional Chinese (Taiwan), Simplified Chinese, Japanese, Korean, Italian, Spanish, French, German.