BUG FIXES & IMPROVEMENTS • Fixed a crash when viewing TLS 1.3 handshake packets. • Large captures now import in the background with a progress screen, so the app no longer freezes. • Clear message when a capture is over the 4 GB limit or storage is low. • Closing a capture while it is still loading now stops it immediately. • Protocol tags in Host Details now wrap neatly and are sorted alphabetically. • Improved stability when reading unusual or damaged capture files. • Large application updates to come.

Adjustable row density. New filter-bar toggle cycles between Classic, Compact, and Comfortable layouts in the Packets browser. Compact fits ~22 rows per phone screen; Comfortable mirrors iOS Mail's two-line look. On iPad, Classic uses a denser style single-line row. App Switcher privacy. Sight now hides the analysis surface behind the Kestrel logo whenever the app leaves the foreground, so the iOS App Switcher thumbnail and AirPlay mirroring. Faster first-tap haptic response and internal robustness improvements.

WHAT'S NEW IN V1.2.0 CSV Export — Three profiles: Summary (Excel-ready, 9 columns), Detailed (every protocol layer, ~24 columns), Flow (one row per conversation). Export everything or just bookmarked packets, with bookmark notes preserved as columns. Filenames indicate scope at a glance. Smart Bookmarks — Bookmarking a flow, host, DNS query, or stream now resolves to all related packets in CSV exports. Tap "View" on any bookmark to jump straight to that data with the right filter applied. Expanded Protocol Detection — Added classification for SMB, mDNS, DHCP, NTP, SNMP, SSDP, and QUIC. Dashboard Navigation — Every dashboard widget is now interactive. Tap Total Packets to open Packets, tap a Top Talker to filter Hosts to that IP, tap "TCP" in Protocol Distribution to filter the Packets list, and so on. Subtle chevrons indicate what's tappable. Haptic Feedback — Bike-spoke clicker feedback when scrolling lists. Crisp tap feedback on buttons.

Documentation and metadata update. Clarified feature descriptions, refined audience details, and updated supporting materials. No changes to app functionality or behavior.

Analyst Bookmarks — Flag any packet, flow, host, DNS query, or TCP stream with a note explaining its significance. Bookmarks are preserved in the PDF export as a dedicated findings section. Enhanced IPv6 support — Addresses are displayed in canonical RFC 5952 form (fe80::1834:797f:10a6:74f4) across the UI and all exports. Search now matches any textual representation of the same address — expanded, compressed, or mixed case. Disk-backed TCP reassembly — Large captures no longer strain memory. Streams exceeding 1 MB per direction spill to protected temporary storage and are read on demand, enabling analysis of multi-gigabyte captures on-device. Refined PDF reports — Duration formatted as human-readable time (e.g. 1h 7m 5s), complete Top Talkers listings, paginated bookmark sections with per-page continuation, and properly sized IPv6 columns. Accurate flow filtering — "View Source Packets" now captures both directions of a flow using full 4-tuple matching (source and destination IPs plus ports), surfacing exactly the packets belonging to that conversation. Timeline performance — Large captures now build their timeline on a background thread with stride-based sampling, eliminating UI freezes on multi-gigabyte files.