API-bounded vs OS/stack mechanisms

[sclevenger7777]

Hi Emmanuel thank you again for your explanation in #831.

Your point about distinguishing capture API limits of L4 only via VPNService from actual network behavior made sense. Viewing ambiguity itself as
a property of the capture mechanism, rather than something to be “fixed,”
is a useful and interesting.

As I build tools that consume PCAPdroid exports, I’m exploring structured
heuristics for early classification of artifacts (API-bounded vs OS/stack mechanisms)
instead of treating them as miscaptures. If you have any tips or best way to set pcapDroid for specific captures I'd be happy to
hear them all.

thank for your hard work, I love the app
Shawn