Repository navigation
NETWATCH v0.1.0-alpha.1 — Local Network Intelligence & Device Inventory
Pre-release
Pre-release
NETWATCH v0.1.0-alpha.1 — Developer Preview
"Know Every Device on Your LAN. Without the Cloud Watching."
Local Network Intelligence & Device Inventory. 100% offline, zero cloud, zero telemetry.
🧠 Beyond Ephemeral Scanning: Asset Intelligence
Traditional network scanners (like Advanced IP Scanner or Angry IP Scanner) are momentary utilities: they perform a fire-and-forget sweep, render a transient table, and discard all state when closed. They have no memory, no temporal awareness, and cannot distinguish a brand new intruder from a stable home workstation.
In NETWATCH, scanning is only the sensor (ingestion mechanism). The true product is the Local Asset Ledger & Reconciliation Engine:
| Capability | Ephemeral Scanners | NETWATCH (Local Network Intelligence) |
|---|---|---|
| Core Question | "What is responding right now?" | "What was here? What changed? Who joined, left, or drifted IP? When?" |
| State & Memory | Ephemeral (wiped on app exit) | Persistent local SQLite database across reboots |
| Asset Lifecycle | No concept of first seen / history | Dedicated timeline tracking joins, departures, and IP migrations |
| Flap Resistance | Single missed ping triggers disconnect | Threshold reconciliation (misses = 2) prevents sleep-mode false alerts |
| New Device Detection | Undifferentiated list row | Explicit isNew status badge until acknowledged by user |
| Data Privacy | Cloud uploads / external API calls common | 100% Sovereign: Air-gapped IEEE OUI lookup, zero external requests, zero telemetry |
🚀 Key Capabilities & Architectural Invariants
- ⚡ Super Fast Subnet Discovery: Active, unprivileged parallel ARP and ICMP sweeps across private IPv4 LANs with concurrent TCP fallback.
- 🏷️ Local Hardware Fingerprinting: Local MAC vendor classification via embedded IEEE OUI database (
internal/oui/ieee-oui.txt) with zero external network egress. - ⏱️ Flap-Resistant Reconciliation: Smart status tracking marks devices offline only after two consecutive missed sweeps (
misses = 2), preventing false disconnect alerts for sleeping Wi-Fi devices. - 🔌 Integrated Diagnostics: Native user-mode Ping with latency measurement, TCP port probing, and RFC-compliant Wake-on-LAN (WoL).
- 📜 Historical Network Timeline: Persistent SQLite local ledger tracking joins, leaves, and IP address migrations.
- 🛡️ Triple-Layer Loopback Security: Local API binds exclusively to
127.0.0.1:<random-port>guarded by an ephemeral 192-bit Bearer token, anti-DNS rebinding Host validation, and cross-site Origin isolation. - ⚙️ Real Settings & Background Auto-Scan: Background auto-scan engine worker executing periodic network sweeps (
1m,5m,15m,1h) with dynamic interval reconfiguration. - 🗄️ Database Inspection & Maintenance: Live SQLite metrics panel, VACUUM defragmentation compaction, and PRAGMA integrity validation.
📦 Downloads & Verification
| Asset | Platform | Description |
|---|---|---|
netwatch.exe |
Windows 10/11 x64 | Standalone portable executable (embedded React 19 UI & SQLite engine) |
- Architecture: AMD64 (x64)
- License: Dual-licensed under MIT and Apache 2.0