Capture intake
The deployment-ready interface is in place. Packet parsing should be added with a compatible server-side PCAP parser or dedicated analysis worker; Vercel serverless functions do not provide Wireshark/tshark automatically.
Evidence checklist
AP BSSID / SSID / channel
Beacon frame count
Two client MAC addresses
Probe request count
Association request / response
EAPOL / WPA handshake evidence
Management / Control / Data counts