Transparent mode is great but invasive, and mitmextract is fine for non real-time analysis.
Sometimes you might want to analyze traffic on production systems and changing routes is not an option.
What I would love to see is a way of doing a non-invasive, realtime processing of http traffic, eg when a specific post request is made, trigger some job.
That would be nice indeed. Mitmextract uses libnids, which can do stream reassembly on the fly. It's not such a big step going from reassembling a pcap file to doing the same thing on network traffic.
Sometimes you might want to analyze traffic on production systems and changing routes is not an option.
What I would love to see is a way of doing a non-invasive, realtime processing of http traffic, eg when a specific post request is made, trigger some job.