NetFlowScout

This distribution includes an eCapture protocol subset and build-time patches for
https://github.com/gojue/ecapture, pinned v2.8.1 / afcc9345ff8f09f96811a158cf768d284b4c7e1b.
Copyright CFC4N and the eCapture contributors. Licensed under Apache License 2.0.
The private NetFlowScout probe ABI adds capture-time socket inode verification,
explicit bounded-capture/loss signals, OpenSSL _ex hooks, PID namespace handling,
monotonic timestamps, reorder flushing, a Unix socket publisher, and tracked tcp_close notifications.

wazero, gopacket, WASI libc, libc++ and all Go dependencies retain their respective licenses.
The protocol module bundles WASI libc and libc++; their licenses are included in the package.

internal/tcpstream contains gopacket v1.4.0 reassembly code under its BSD license,
with an RST lifecycle fix. See internal/tcpstream/LICENSE and README.md.

plugins/protocols/HPACKTables.h contains RFC 7541 tables generated from
golang.org/x/net v0.39.0, Copyright The Go Authors, BSD license.
See plugins/protocols/LICENSE.hpack and the packaged licenses/HPACK-LICENSE.

The passive goquic endpoint probe is a separate NetFlowScout implementation.
It derives supported quic-go layouts from target DWARF and kernel identity fields
from BTF; it does not modify, proxy or embed the target application. quic-go,
qpack, cilium/ebpf and compression dependencies retain their respective licenses.
