expand backend listeners

[ghost]

It's not enough to listen to pcap traffic. Pcap doesn't understand encrypted traffic (for good reason), although it will collect timing and 'metadata'.

This is just one example of the eternal struggle we're signing up for: if we don't help the user watch themselves as well as antagonists are watching them, we're not doing all we can.

We need to dig up other backend listeners that would be worth operating.

[ghost]

Possible candidates:

• CapAnalysis
• nDPI (subset of OpenDPI)

[ghost]

Here's another easy one: filesystem inspectors. We might have to roll our own, at least a wrapper.

• Cookie Monster (inspects saved cookies)
• cache inspector (can we get a look at browser caches?)