IP Traffic Spy v1.0.1

Full Changelog: https://github.com/NTDLS/IP-Traffic-Spy/commits/1.0.1

New 🎉

• IPv6 capture alongside IPv4, including extension headers.
• Filters: CIDR blocks, port ranges, and Advanced Rules that combine address, port, protocol, TCP flags, host and payload text.
• Filter options: an optional “match all groups” mode, one-click presets, and saving and loading filters as .ipsf files. Filters are also restored automatically when the program starts.
• Right-click filters for conversations, remote IP, port, host and protocol, plus “Remove Filters Matching This Packet”.
• Filters menu: Apply Filters To Grid, Clear All Filters, and Hide This Program’s Own DNS Lookups.
• Grid columns: Direction, Flags, TTL, IP, Frag, Matched By.
• Readable summaries in the Text column for DNS, HTTP and TLS server names.
• Packet Details: a decoded pane (IP, TCP, UDP, ICMP, DNS, HTTP, TLS), a proper hex dump, and Prev/Next buttons.
• Actions menu: Auto-Scroll and DNS Lookups toggles.
• Status bar: filter count and hidden-packet count.

Changed 😎

• Packets up to 64 KB are captured instead of dropped, and packet memory is capped at about 512 MB.
• Host names are looked up for every address seen, even for packets your filters hide.
• host example.com rules now match the site’s real IP addresses, not only reverse DNS.
• The grid trims old rows in batches rather than one at a time.
• Save Data to .csv is now truly comma-separated, and its header row includes Protocol.

Fixed 🐛

• Crashes and hangs from threading problems (host-name cache, Clear Grid).
• Pause stalling on busy networks, and filter dialogs reopening after being closed.
• Hotkeys firing twice.
• Host names no longer fill in once the grid is full.
• The grid flashing when it trimmed old rows.
• The program’s own DNS lookups no longer cause a snowballing loop of extra traffic.
• The first row now works with every right-click command.
• Port filters now validate their input.