Update all documentation to reflect the resolved HTTP nginx capture
issue via kretprobe on __x64_sys_recvfrom.
Changes:
- README.md: Update HTTP status table showing kretprobe is now working
- docs/services/ja4ebpf.md: Replace tracepoint with kretprobe in hooks table,
mark issue as resolved with validation reference
- docs/architecture.md: Clarify TC HTTP plain capture is packet-level only
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>