fix: sécuriser shutdown, config par défaut et reconnexion socket

Co-authored-by: aider (openrouter/openai/gpt-5.3-codex) <aider@aider.chat>

internal/tlsparse/parser_test.go

@@ -251,3 +251,39 @@ func TestParserConnectionStateTracking(t *testing.T) {
 		t.Error("IsClientHello() should return true for valid ClientHello")
 	}
 }
+
+func TestParserClose_Idempotent(t *testing.T) {
+	parser := NewParser()
+
+	if err := parser.Close(); err != nil {
+		t.Fatalf("first Close() error = %v", err)
+	}
+	if err := parser.Close(); err != nil {
+		t.Fatalf("second Close() error = %v", err)
+	}
+}
+
+func TestExtractTCPMeta_MSSInvalid_NoPanic(t *testing.T) {
+	tcp := &layers.TCP{
+		Window: 1234,
+		Options: []layers.TCPOption{
+			{
+				OptionType: layers.TCPOptionKindMSS,
+				OptionData: []byte{0x05}, // malformed (1 byte instead of 2)
+			},
+		},
+	}
+
+	meta := extractTCPMeta(tcp)
+
+	found := false
+	for _, opt := range meta.Options {
+		if opt == "MSS_INVALID" {
+			found = true
+			break
+		}
+	}
+	if !found {
+		t.Fatalf("expected MSS_INVALID in options, got %v", meta.Options)
+	}
+}