197 lines
20 KiB
Plaintext
197 lines
20 KiB
Plaintext
|
+
|
|||
|
|
dÏi`7 ã ó¬ a € RC t60 t R t^ RIt^ RIt^ RIt^ RIt^ RIt^ RIHtH t ^ RI
|
|||
|
|
H t H t H
|
|||
|
|
t
|
|||
|
|
]P P ]P P! ]4 R4 t]P P ]P P! ]4 RR4 t]P P ]P P! ]4 RR4 t]P P ]P P! ]4 RR 4 t]P P ]P P! ]4 R
|
|||
|
|
4 t^ t^dtR R lt]! ]4 t] ^ k R
|
|||
|
|
R ltR R lt RDR R llt ]3R R llt R R lt ]R3R R llt R R lt!R R lt"R R lt#R R lt$R! t%]! R"R#7 t&]%! 4 ]&PO R$] R%7 R& 4 t(]&PO R'4 R( 4 t)]&PO R)4 R* 4 t*]&PO R+4 R, 4 t+]&PO R-4 ]3R. R/ ll4 t,]&PO R04 R1 4 t-]&PO R24 R3 4 t.]&PO R44 R5 4 t/]&PO R64 R7 4 t0]&PO R84 R9 R: l4 t1]&PO R;4 R< 4 t2]3R=8X d ^ RI4t4]4Pj ! R>R?R@RARB7 R# R# )Ez]
|
|||
|
|
WiFi Recon Dashboard
|
|||
|
|
Reads from events.db (written by udp_ingest.py), serves a live web UI.
|
|||
|
|
N)ÚFastAPIÚRequest)Ú HTMLResponseÚStreamingResponseÚ FileResponsez events.dbÚ templateszdashboard.htmlÚstaticz
|
|||
|
|
dashboard.cssz dashboard.jszoui.txtc óR € V ^8„ d QhR\ R\ \ \ 3, /# )é ÚpathÚreturn©ÚstrÚdict)Úformats "Úcoordinator/dashboard.pyÚ __annotate__r s" € ÷
|
|||
|
|
ñ
|
|||
|
|
”Cð
|
|||
|
|
œD¤¤c �Nñ
|
|||
|
|
ó c óÌ € / p\ P P V 4 ' g V# \ V R RR7 ;_uu_ 4 pV F� pRV9 d K VP R4 pV^ , P 4 P
|
|||
|
|
RR4 P 4 pV^, P 4 pV' g Ks V' g K} WaV& Kƒ RRR4 V# + ' g i T# ; i)zutf-8Úignore)ÚencodingÚerrorsz(hex)Ú-Ú:N)Úosr ÚexistsÚopenÚsplitÚstripÚreplaceÚupper)r ÚdbÚfÚlineÚpartsÚprefixÚvendors & r Ú _load_ouir' sµ € Ø€BÜ
|
|||
|
|
�7‰7�>‰>˜$× Ò Øˆ Ü
|
|||
|
|
ˆd˜W¨X× 6Õ 6¸!ÛˆDؘdÔ"ÙØ—J‘J˜wÓ'ˆEؘ1•X—^‘^Ó%×-Ñ-¨c°3Ó7×=Ñ=Ó?ˆFؘ1•X—^‘^Ó%ˆF߉vŸ&™&Ø #�6“
|
|||
|
|
ñ ÷
|
|||
|
|
7ð €I÷
|
|||
|
|
7Ö 6ð €Iús Á A1CÂ6CÃ CÃ C# c óR € V ^8„ d QhR\ R\ \ \ 3, /# )r
|
|||
|
|
Úmacr )r ÚtupleÚbool)r s "r r r + s# € ÷ 3ñ 3”Cð 3œE¤#¤t )Õ ,ñ 3r c óZ € V ' d \ V 4 ^8 d R# \ V P RR4 P RR4 R, ^4 p\ V^, 4 pT' d R # T P 4 R, p\ P TR4 R3# \ d Ru # i ; i)
|
|||
|
|
z£
|
|||
|
|
Returns (vendor_name, is_randomized).
|
|||
|
|
Randomized MACs have the locally-administered bit set (bit 1 of first byte).
|
|||
|
|
OUI lookup is meaningless for randomized MACs.
|
|||
|
|
ÚUnknownFr Ú r :Nr
|
|||
|
|
N:Né N)r- F)zRandomized MACT)ÚlenÚintr r+ Ú
|
|||
|
|
ValueErrorr Ú_OUI_DBÚget)r) Ú
|
|||
|
|
first_byteÚ
|
|||
|
|
randomizedr% s & r Ú
|
|||
|
|
oui_lookupr7 + s› € ÷ ”#�c“(˜Q”,Ø!Ð!ð"ܘŸ™ S¨"Ó-×5Ñ5°c¸2Ó>¸rÕBÀBÓGˆ
|
|||
|
|
ܘ* tÕ+Ó,ˆ
|
|||
|
|
÷ Ø'Ð'Ø
|
|||
|
|
�Y‰Y‹[˜�_€FÜ �K‰K˜ Ó *¨EÐ 2Ð2øô ô "Ø!Ò!ð"ús œAB Â
|
|||
|
|
B*Â)B*c ó8 € V ^8„ d QhR\ P /# ©r
|
|||
|
|
r )Úsqlite3Ú
|
|||
|
|
Connection)r s "r r r ? s € ÷ ñ ”'×$Ñ$ñ r c ód € \ P ! \ 4 p \ P V n V # ©N)r: ÚconnectÚDB_PATHÚRowÚ row_factory©Úconns r Úget_connrD ? s! € Ü �?Š?œ7Ó #€DÜ —{‘{€DÔØ €Kr c óR € V ^8„ d QhR\ R\ R\ \ , /# )r
|
|||
|
|
ÚsqlÚparamsr )r r* Úlistr )r s "r r r E s% € ÷ #ñ #Œsð #œEð #¬4´:ñ #r c óÜ € \ 4 ;_uu_ 4 pVP W4 P 4 pR R R 4 X Uu. uF p\ V4 NK up# + ' g i L+; iu upi r= )rD ÚexecuteÚfetchallr )rF rG rC ÚrowsÚrs && r ÚqueryrN E sJ € Ü �Œ�tØ�|‰|˜CÓ(×1Ñ1Ó3ˆ÷
|
|||
|
|
á !Ó "™T˜ŒD�ŽG™TÑ "Ð"÷
|
|||
|
|
�üâ "s “ A¿A)Á A& c óJ € V ^8„ d QhR\ R, R\ R\ /# )r
|
|||
|
|
Ú last_seenNÚ thresholdr )r r1 )r s "r r r K s% € ÷ ñ œC $�Jð ´3ð Ìñ r c óô € V ' g R # \ P P V 4 p\ P P 4 V,
|
|||
|
|
P 4 pW18: d R# R # \ d R # i ; i)ÚofflineÚonline)ÚdatetimeÚ
|
|||
|
|
fromisoformatÚutcnowÚ
|
|||
|
|
total_secondsr2 )rP rQ ÚdtÚdeltas && r Ú _node_statusr[ K sg € ß ÙðÜ
|
|||
|
|
×
|
|||
|
|
Ñ
|
|||
|
|
×
|
|||
|
|
,Ñ
|
|||
|
|
,¨YÓ
|
|||
|
|
7ˆÜ×"Ñ"×)Ñ)Ó+¨bÕ0×?Ñ?ÓAˆØ Ô-ˆxÐ<°9Ð<øÜ ô Úðús ŒAA( Á&A( Á( A7Á6A7c ó: € V ^8„ d QhR\ \ , /# r9 ©rH r )r s "r r r W s € ÷ ñ ”Tœ$•Zñ r c ó € \ R 4 p \ R4 pV Uu/ uF q"R, VbK ppV FÈ pVP VR, / 4 pVP R4 VR& VP R4 VR& VP R4 VR& VP R4 VR& VR, ;' g
|
|||
|
|
VR, VR& VR, ' d \ VR, ^ R 7 VR
|
|||
|
|
& K± \ VR, ^<R 7 VR
|
|||
|
|
& KÊ V # u upi ) a
|
|||
|
|
SELECT
|
|||
|
|
node_id,
|
|||
|
|
MAX(received_at) AS last_beacon,
|
|||
|
|
COUNT(*) AS total_events,
|
|||
|
|
MIN(received_at) AS first_seen
|
|||
|
|
FROM beacon_events
|
|||
|
|
GROUP BY node_id
|
|||
|
|
ORDER BY last_beacon DESC
|
|||
|
|
zÕ
|
|||
|
|
SELECT node_id, received_at AS last_heartbeat,
|
|||
|
|
uptime_ms, free_heap, wifi_rssi
|
|||
|
|
FROM heartbeat_events
|
|||
|
|
WHERE id IN (SELECT MAX(id) FROM heartbeat_events GROUP BY node_id)
|
|||
|
|
Únode_idÚlast_heartbeatÚ uptime_msÚ free_heapÚ wifi_rssiÚ last_beaconrP ©rQ Ústatus)rN r4 r[ )rL Úhb_rowsrM Úhb_mapÚhbs r Ú build_nodesrj W s € Ü ð ó €Dô ð ó €Gñ (/Ó
|
|||
|
|
/¡w !� �l˜AŠo¡w€FÐ
|
|||
|
|
/Û
|
|||
|
|
ˆØ
|
|||
|
|
�Z‰Z˜˜)� bÓ
|
|||
|
|
)ˆØ Ÿf™fÐ%5Ó 6ˆÐ
|
|||
|
|
ÑØ Ÿf™f [Ó 1ˆˆ+‰Ø Ÿf™f [Ó 1ˆˆ+‰Ø Ÿf™f [Ó 1ˆˆ+‰Ø Ð 0Õ 1× EÐ E°Q°}Õ5Eˆˆ+‰à Ð
|
|||
|
|
× Ô Ü& qÐ)9Õ':ÀbÔIˆAˆh‹Kä& q¨ Õ'7À2ÔFˆAˆh‹Kñ ð €Kùò 0s ›C?c ó` € V ^8„ d QhR\ R\ R, R\ \ , /# )r
|
|||
|
|
Úlimitr_ Nr )r1 r rH r )r s "r r r y s) € ÷
|
|||
|
|
ñ
|
|||
|
|
œð
|
|||
|
|
´#¸µ*ð
|
|||
|
|
ÌÌTÍ
|
|||
|
|
ñ
|
|||
|
|
r c óF € V' d \ R W34 # \ RV 34 # )zt
|
|||
|
|
SELECT * FROM beacon_events
|
|||
|
|
WHERE node_id = ?
|
|||
|
|
ORDER BY id DESC LIMIT ?
|
|||
|
|
zJ
|
|||
|
|
SELECT * FROM beacon_events
|
|||
|
|
ORDER BY id DESC LIMIT ?
|
|||
|
|
©rN ©rl r_ s &&r Ú build_eventsrp y s: € ßÜð ð Ð
|
|||
|
|
ó ð ô
|
|||
|
|
ð ð ˆó ð r c ó: € V ^8„ d QhR\ \ , /# r9 r] )r s "r r r † s € ÷ ñ œœT�
|
|||
|
|
ñ r c ó € \ R 4 p V # )aØ
|
|||
|
|
SELECT
|
|||
|
|
ssid,
|
|||
|
|
bssid,
|
|||
|
|
MAX(rssi) AS best_rssi,
|
|||
|
|
ROUND(AVG(rssi), 1) AS avg_rssi,
|
|||
|
|
channel,
|
|||
|
|
encryption,
|
|||
|
|
COUNT(*) AS times_seen,
|
|||
|
|
COUNT(DISTINCT node_id) AS node_count,
|
|||
|
|
MAX(received_at) AS last_seen
|
|||
|
|
FROM beacon_events
|
|||
|
|
WHERE bssid IS NOT NULL
|
|||
|
|
GROUP BY bssid
|
|||
|
|
ORDER BY times_seen DESC
|
|||
|
|
rn )rL s r Úbuild_networksrs † s € Ü ð ó €Dð €Kr c ó: € V ^8„ d QhR\ \ , /# r9 r] )r s "r r r š s € ÷ ñ ”tœD•zñ r c óÎ € \ R4 p V FN p\ RVR, 34 pV Uu. uF q3R, NK
|
|||
|
|
upVR& \ VR, 4 w rEWAR& WQR& KP V # u upi )zK
|
|||
|
|
Per unique src_mac: aggregated stats and the SSIDs they were probing for.
|
|||
|
|
a:
|
|||
|
|
SELECT
|
|||
|
|
src_mac,
|
|||
|
|
COUNT(*) AS times_seen,
|
|||
|
|
COUNT(DISTINCT node_id) AS node_count,
|
|||
|
|
MAX(rssi) AS best_rssi,
|
|||
|
|
ROUND(AVG(rssi), 1) AS avg_rssi,
|
|||
|
|
COUNT(DISTINCT NULLIF(ssid,'')) AS unique_ssids,
|
|||
|
|
MIN(received_at) AS first_seen,
|
|||
|
|
MAX(received_at) AS last_seen
|
|||
|
|
FROM probe_events
|
|||
|
|
WHERE src_mac IS NOT NULL
|
|||
|
|
GROUP BY src_mac
|
|||
|
|
ORDER BY times_seen DESC
|
|||
|
|
z˜
|
|||
|
|
SELECT DISTINCT ssid FROM probe_events
|
|||
|
|
WHERE src_mac = ? AND ssid IS NOT NULL AND ssid != ''
|
|||
|
|
ORDER BY ssid
|
|||
|
|
Úsrc_macÚssidÚ probed_ssidsr& r6 )rN r7 )rL rM Ú ssid_rowsÚsr& r6 s r Ú
|
|||
|
|
build_clientsr{ š sƒ € ô ð ó €Dó ˆÜð ð � �lˆ_ó ˆ ñ
|
|||
|
|
1:Ó :± ¨1˜vŸY˜Y± Ñ :ˆˆ.ÑÜ '¨¨) Ó 5ÑˆØ ˆ(‰ Ø$ˆ,‹ñ ð €Kùò ;s ©A"c ó$ € V ^8„ d QhR\ /# r9 )r )r s "r r r » s € ÷ 26ñ 26œ$ñ 26r c óÊ € \ R4 p V Uu. uF qR, NK
|
|||
|
|
pp\ R4 p/ pV Fi pVR, pWT9 d$ RVRVR, RVR, RVR, R/ /WE& R VR , R
|
|||
|
|
VR
|
|||
|
|
, R VR , /WE, R, VR, & Kk \ VP 4 R R
|
|||
|
|
R7 pV F p\ VR, 4 VR& K RVRV/# u upi )zÒ
|
|||
|
|
For every BSSID, return per-node RSSI stats side by side.
|
|||
|
|
Result: { node_ids: [...], networks: [{bssid, ssid, channel, encryption,
|
|||
|
|
node_count, nodes: {node_id: {best_rssi, avg_rssi, times_seen}}}] }
|
|||
|
|
z;SELECT DISTINCT node_id FROM beacon_events ORDER BY node_idr_ aÊ
|
|||
|
|
SELECT
|
|||
|
|
bssid,
|
|||
|
|
MAX(ssid) AS ssid,
|
|||
|
|
MAX(channel) AS channel,
|
|||
|
|
MAX(encryption) AS encryption,
|
|||
|
|
node_id,
|
|||
|
|
MAX(rssi) AS best_rssi,
|
|||
|
|
ROUND(AVG(rssi), 1) AS avg_rssi,
|
|||
|
|
COUNT(*) AS times_seen
|
|||
|
|
FROM beacon_events
|
|||
|
|
WHERE bssid IS NOT NULL
|
|||
|
|
GROUP BY bssid, node_id
|
|||
|
|
ORDER BY bssid, node_id
|
|||
|
|
Úbssidrw ÚchannelÚ
|
|||
|
|
encryptionÚnodesÚ best_rssiÚavg_rssiÚ
|
|||
|
|
times_seenc ó& € \ V R , 4 # )r� )r0 )Úxs &r Ú<lambda>Ú"build_cross_node.<locals>.<lambda>ç s € ”c˜!˜G�*”or T)ÚkeyÚreverseÚ
|
|||
|
|
node_countÚnode_idsÚnetworks)rN ÚsortedÚvaluesr0 )Ú node_rowsrM rŒ rL r� r~ ÚresultÚnets r Úbuild_cross_noder“ » s
|
|||
|
|
€ ô ÐSÓT€IÙ'0Ó1¡y !�9— � ¡y€HÐ1ä ð ó €Dð €HÛ
|
|||
|
|
ˆØ�'•
|
|||
|
|
ˆØ Ô à˜eؘa �iؘa �lØ ˜a �oؘbð ˆH‰Oð
|
|||
|
|
˜!˜K�.Ø ˜!˜J�-Ø ˜!˜L�/ð2
|
|||
|
|
ˆ�˜Õ 9¥ Ó.ñ ô Ø�‰ÓÙ %Øô€Fó
|
|||
|
|
ˆÜ G¥ Ó -ˆˆLÓñ ð
|
|||
|
|
˜ *¨fÐ 5Ð5ùòW 2s �C c ó> € V ^8„ d QhR\ R\ R, /# )r
|
|||
|
|
r_ r Nr
|
|||
|
|
)r s "r r r ð s € ÷ $ñ $œsð $¤t¨d¥{ñ $r c ó € \ R V 34 pV' g R# V^ , p\ RV 34 pV' d
|
|||
|
|
V^ , M/ pVP R4 VR& VP R4 VR& VP R4 VR& VP R4 VR& VR, ' d \ VR, ^ R7 VR& M\ VR , ^<R7 VR& VR
|
|||
|
|
, ' d \ VR
|
|||
|
|
, ^4 MRVR
|
|||
|
|
& \ \
|
|||
|
|
V R 7 VR & V# )
|
|||
|
|
aà
|
|||
|
|
SELECT
|
|||
|
|
node_id,
|
|||
|
|
MIN(received_at) AS first_seen,
|
|||
|
|
MAX(received_at) AS last_seen,
|
|||
|
|
COUNT(*) AS total_events,
|
|||
|
|
COUNT(DISTINCT ssid) AS unique_ssids,
|
|||
|
|
COUNT(DISTINCT bssid) AS unique_bssids,
|
|||
|
|
AVG(rssi) AS avg_rssi,
|
|||
|
|
MIN(rssi) AS min_rssi,
|
|||
|
|
MAX(rssi) AS max_rssi
|
|||
|
|
FROM beacon_events
|
|||
|
|
WHERE node_id = ?
|
|||
|
|
GROUP BY node_id
|
|||
|
|
Nz¬
|
|||
|
|
SELECT received_at AS last_heartbeat, uptime_ms, free_heap, wifi_rssi
|
|||
|
|
FROM heartbeat_events
|
|||
|
|
WHERE node_id = ?
|
|||
|
|
ORDER BY id DESC LIMIT 1
|
|||
|
|
r` ra rb rc re rf rP rƒ ro Úevents)rN r4 r[ Úroundrp Ú EVENT_CAP)r_ rL Údetailrg ri s & r Úbuild_node_detailrš ð s € Ü ð ð ˆó €D÷ ÙØ
|
|||
|
|
�!�W€FÜð ð
|
|||
|
|
ˆó €G÷ ˆ�Ž B€BØ !Ÿv™vÐ&6Ó 7€FÐ Ñ Ø !Ÿv™v kÓ 2€Fˆ;ÑØ !Ÿv™v kÓ 2€Fˆ;ÑØ !Ÿv™v kÓ 2€Fˆ;ÑØ
|
|||
|
|
Ð × Ô Ü'¨Ð/?Õ(@ÈBÔOˆˆxÒä'¨¨{Õ(;ÀrÔJˆˆxÑØ9?À
|
|||
|
|
×9KÔ9Kœ˜v jÕ 1°1Ô5ÐQU€Fˆ:ÑÜ%¬I¸wÔG€Fˆ8ÑØ €Mr c óê € \ 4 ;_uu_ 4 p V P R4 V P R4 V P R4 V P 4 RRR4 R# + ' g i R# ; i)z8Create tables if they don't exist. Runs once at startup.aF
|
|||
|
|
CREATE TABLE IF NOT EXISTS beacon_events (
|
|||
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT, received_at TEXT NOT NULL,
|
|||
|
|
node_id TEXT, node_ts INTEGER, ssid TEXT, bssid TEXT,
|
|||
|
|
rssi INTEGER, channel INTEGER, encryption TEXT, importance TEXT, confidence TEXT
|