Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/henrywallace/netwatch

Passivley track hosts in local network
https://github.com/henrywallace/netwatch

Last synced: 3 months ago
JSON representation

Passivley track hosts in local network

Lists

README

        

# netwatch

netwatch is a library and command line tool for aggregating and inferring
information about hosts in a network by passively sniffing packets. It fashions
events based on changes to those hosts, e.g. a new host with new MAC address
has entered the local network, a known host is using never before used port
22/tcp, or a host is performing an ARP scan.

Dual-licensed under MIT or the UNLICENSE.

## Examples

```
% sudo -E go run main.go --only log
INFO[2019-09-24 20:28:38] using first up interface: eth0
INFO[2019-09-24 20:28:44] new Host(xx:xx:xx:xx:xx:xx, 192.168.86.50)
INFO[2019-09-24 20:28:44] new 1900/udp on Host(xx:xx:xx:xx:xx:xx, 192.168.86.50)
INFO[2019-09-24 20:28:46] new Host(yy:yy:yy:yy:yy:yy, 192.168.86.20)
INFO[2019-09-24 20:28:46] new 44054/tcp on Host(yy:yy:yy:yy:yy:yy, 192.168.86.20)
INFO[2019-09-24 20:28:46] new Host(zz:zz:zz:zz:zz:zz, 0.0.0.0)
INFO[2019-09-24 20:28:46] new 443/tcp on Host(zz:zz:zz:zz:zz:zz, 0.0.0.0)
```

Using the config, you can also configure your own hook events, with builtin
event names, and templated variables for use in commands:
```sh
% cat > config.toml < config.toml <