Cobra 402c4e849b Replace nmap ARP scan with passive /proc/net/arp read — no active probing (#449) ...

- Removed get_local_subnets() and scan_subnet() — no longer needed
- Added read_arp_cache() to read kernel ARP table from /proc/net/arp
- Added fallback to 'ip neigh show' if /proc/net/arp unavailable
- Added lookup_oui() to query system /usr/share/hwdata/oui.txt for vendor names
- Removed subprocess nmap call and re import (no longer needed)
- run() now directly reads ARP cache instead of scanning subnets
- Zero active network traffic — purely passive monitoring
- Removed sudo requirement

2026-04-08 21:01:12 -04:00

..

deploy.sh

Use dedicated net-alerter Matrix service account, keep credentials out of repo

2026-03-25 06:20:37 -04:00

net_alerter.py

Replace nmap ARP scan with passive /proc/net/arp read — no active probing (#449)

2026-04-08 21:01:12 -04:00