CLI

Expansive command surface for Wiretap 0.5 — grouped in wiretap --help. Run wiretap <cmd> --help for flags, or wiretap help-all to dump every help text.

Map

# Analysis
wiretap analyze|a|summary|stats|dump|search|hypotheses|explain|inspect
wiretap diff|correlate|cluster|entropy|checksum|strings|timestamps
wiretap fingerprint|export|eval|experiment|tui|visualize|report|replay|format

# Project
wiretap init|project [init|status|info|path|tree]
wiretap sample [add|list|show|rm|label]
wiretap annotate [list] | unannotate | note

# Schema & codegen
wiretap schema [infer|diff|merge|edit|fmt|lint] | validate | lint | generate [go|kaitai|wireshark]

# Capture
wiretap index | watch | capture

# Tooling
wiretap catalog|passes|config|env|doctor|docs|about|completion|help-all|version

Recon helpers

wiretap stats examples/mystery/captures.hex
wiretap dump examples/mystery/captures.hex --limit 2
wiretap search --ascii HTTP examples/mystery/captures.hex
wiretap summary examples/mystery/captures.hex
wiretap fingerprint examples/mystery/captures.hex
wiretap hypotheses examples/mystery/captures.hex --kind checksum
wiretap passes

Analyze

wiretap analyze examples/mystery/captures.hex
wiretap analyze --budget quick --jobs 4 examples/mystery/captures.hex
wiretap analyze --format html -o report.html examples/mystery/captures.hex
wiretap analyze --pcap authorized.pcap

Budgets: quick | normal | exhaustive. Formats: text | json | html.

Differential & probes

wiretap diff PATH
wiretap correlate --label KEY PATH
wiretap experiment run
wiretap entropy PATH
wiretap checksum PATH
wiretap cluster PATH
wiretap explain --at 0x04..0x05 PATH

Schema & codegen

wiretap schema infer PATH > schema.yaml
wiretap validate schema.yaml
wiretap generate go schema.yaml --package pkg
wiretap generate kaitai schema.yaml
wiretap generate wireshark schema.yaml --package pkg
wiretap compare-schemas a.yaml b.yaml

Project & notes

wiretap project init ./my-proto
wiretap sample add file.bin
wiretap note 0x04 "likely length"
wiretap note --list

Local docs

wiretap docs index
wiretap docs architecture
wiretap docs brand

Markdown docs ship in the repo under docs/. This site mirrors the highlights for browsing. Sources live in docs-site/ for GitHub Pages.