drop pcap with grpc · parse :path method calls · stream ids · message lengths · flag error bursts and method enumeration · csv+json export · runs locally
cleartext h2c preferred · tls grpc shows stream metadata only when hpack decodable
heuristic screener · metadata only · no protobuf decode · parses artifacts locally · not definitive proof