Create a complete firmware project using PlatformIO and the latest ESP-IDF framework for the Waveshare ESP32-P4-NANO board, which includes both the ESP32-P4 core and an onboard ESP32-C6 for dual-core functionality. The device should act as a fully autonomous, air-gapped network auditing and red teaming multi-tool, capable of performing real-time Ethernet-based reconnaissance while hosting a secure, self-contained Wi-Fi access point for user interaction. The Ethernet interface (via LAN8720 RMII PHY) should support active tools such as ARP scanning, TCP port scanning, ICMP sweep pings, DNS and DHCP monitoring, and custom packet injection (using LWIP raw sockets or similar low-level access). The device must also support passive sniffing and MAC address fingerprinting for identifying devices on the LAN.

Simultaneously, the ESP32-C6 must broadcast a secure WPA2-protected Wi-Fi access point with static IP 192.168.4.1, isolated from the LAN, allowing a phone or laptop to connect. A web-based dashboard must be hosted from this IP, served directly via esp_http_server and delivering all frontend assets from a FAT32-formatted microSD card, mounted using esp_vfs_fat and sdmmc_cmd. The /sdcard/www/ folder should contain an HTML5/JavaScript single-page application that allows the user to trigger scans, configure settings, view or download logs, and monitor system status. Logs and config files must be saved in /sdcard/logs/ and /sdcard/config/, with optional support for file uploads and future scripting.

The system must never bridge Ethernet and Wi-Fi traffic, maintaining complete network segmentation between the LAN under test and the operator interface. Include features such as OTA firmware update capability (served locally or via SD card), optional HTTP basic authentication, LED status indicators, and a modular architecture for extending new scanning or attack modules. Ensure the architecture is scalable, production-ready, and compliant with best practices for embedded security and field-portable diagnostic tools. This project should deliver a mobile-friendly, air-gapped, plug-and-play packet analysis tool optimized for red teams, cybersecurity researchers, and network engineers.