drop tls clienthello/serverhello pcap text · parse classical + pqc group negotiation · runs locally
drop tls clienthello/serverhello pcap text · local only
heuristic screener · vendor schema varies · not definitive proof