Use KiloBytes for Host View and Improve PCAP filename save

Author: AndrewQuijano

src/libinspector/device_detail_page.py

@@ -430,9 +430,6 @@ def process_network_flows(df: pandas.DataFrame):
     local_timezone = datetime.datetime.now(datetime.timezone.utc).astimezone().tzinfo
     df['first_seen'] = df['first_seen'].dt.tz_localize('UTC').dt.tz_convert(local_timezone)
     df['last_seen'] = df['last_seen'].dt.tz_localize('UTC').dt.tz_convert(local_timezone)
-
-    df['inferred_activity'] = None
-    df['confirmation'] = False
     df = df.reset_index(drop=True)
 
     st.markdown("#### Network Flows")
@@ -477,7 +474,7 @@ def show_device_details(mac_address: str):
                  SELECT MIN(timestamp) AS first_seen,
                         MAX(timestamp) AS last_seen,
                         COALESCE(dest_hostname, dest_ip_address) AS dest_info,
-                        SUM(byte_count) * 8 AS Bits
+                        ROUND(SUM(byte_count) / 1024.0, 2) AS KiloBytes
                  FROM network_flows
                  WHERE src_mac_address = ?
                    AND timestamp >= ?
@@ -490,7 +487,7 @@ def show_device_details(mac_address: str):
                  SELECT MIN(timestamp) AS first_seen,
                         MAX(timestamp) AS last_seen,
                         COALESCE(src_hostname, src_ip_address) AS src_info,
-                        SUM(byte_count) * 8 AS Bits
+                        ROUND(SUM(byte_count) / 1024.0, 2) AS KiloBytes
                  FROM network_flows
                  WHERE dest_mac_address = ?
                    AND timestamp >= ?

src/libinspector/server/packet_collector.py

@@ -185,14 +185,17 @@ def make_pcap_filename(start_time: int, end_time: int) -> str:
     Returns:
         str: Human-readable filename.
     """
-    start_dt = datetime.datetime.fromtimestamp(start_time)
-    duration_seconds = end_time - start_time
+    # Determine the local timezone object of the machine running the script.
+    local_tz = datetime.datetime.now().astimezone().tzinfo
 
-    # Format the start time: e.g., 'Oct-31-2025_113100AM'
-    safe_start = start_dt.strftime("%b-%d-%Y_%I:%M:%S%p")
+    # We explicitly tell fromtimestamp() that the input is UTC.
+    start_dt_utc = datetime.datetime.fromtimestamp(start_time, tz=datetime.timezone.utc)
+    start_dt_localized = start_dt_utc.astimezone(local_tz)
+    duration_seconds = end_time - start_time
+    safe_start = start_dt_localized.strftime("%b-%d-%Y_%I:%M:%S%p")
 
     # Generate the filename with duration
-    filename = f"{safe_start}_{duration_seconds}s.pcap"
+    filename = f"{safe_start}_{duration_seconds:.2f}s.pcap"
     return filename