Live Now: capture source and destination ports by site, keep records offline, and queue sync when signal returns.