Module tcpdump 

Streaming packet capture via tcpdump -lnn over SSH.

Each capture is registered with a u64 handle. The capture task pulls lines from SshClient::execute_command_streaming and republishes them on the global event bus as CoreEvent::TcpdumpLine so the Swift layer can append rows in real time without holding a per-capture FFI callback.

Stop is cooperative: stop(id) cancels the streaming token, which tears down the SSH channel and ends the capture task.

Structs

TcpdumpEvent

One line from a running tcpdump capture, as forwarded over the event bus.

TcpdumpRegistry

Tracks active captures so callers can stop them by id.