Frequently asked questions
Answers to questions that come up when interpreting a capture.
Why is there a byte count but no body?
A size is metadata. The capture may have omitted or truncated a payload. Check its availability before exporting or replaying it.
Does local capture mean nothing leaves the Mac?
The proxy forwards requests to their destinations. Exports and evidence you authorize an agent to read may also leave the Mac. Review the actual excerpt and the receiving client.
Does a successful request mean the app recovered?
No. A transfer can finish while a player stays silent or an image fails to decode. Record the device observation separately. For a repeatable comparison, follow the HLS workflow.
Which view should I use first?
Use Table and Explorer for a specific URL, response or family of endpoints. Use Timeline to compare order, duration and gaps. For a single rare failure you must reopen later, choose a recording.
Do I need certificate trust to see whether the target is routed?
Not for every routing question. The proxy can observe a connection without seeing its decrypted response. Verify one fresh action on the intended target, then decide whether inspecting one permitted host is necessary. Select the setup guide for your device.
Is a saved rule already serving traffic?
No. Saving or importing a rule does not prove an active runtime match. Trigger a fresh request and compare scope, response and override attribution. An Effect Bundle can package several related rules without proving they were enabled.
Should I use MCP or the terminal?
Use the MCP guide for a conversational client asking a scoped question. Use CLI setup for offline help and repeatable terminal queries. Do not assume every tool has a same-named command or that either interface can approve itself.
What should go into a useful bug report?
Record the target, the action, the observation window, the one changed condition, what the proxy reported and what appeared on the device. Share the smallest reviewed excerpt that answers the question. Include missing evidence as a limitation, not as a negative result. For a failure you cannot narrow down, use the symptom index.