Skip to content

feature lan

EDAMAME Dev edited this page Feb 4, 2026 · 11 revisions

Network


Feature: lan

πŸ” Network

Overview The Network tab provides Nmap-style LAN discovery with five sub-views. Radar displays an interactive circular map with devices positioned by proximity, color-coded by criticality (red for high-risk, green for safe). Table shows a sortable spreadsheet with IP, hostname, MAC, vendor, and criticality columns. Detailed presents rich device cards with icons, names, and status indicators. Networks logs your Wi-Fi connection history with network details. Events tracks device activity timeline (new devices, reactivations, inactivations). Each device card reveals open ports, CVE vulnerabilities, vendor info, and 'AI report' for LLM analysis. Toggle 'Auto scan' for continuous discovery, or click 'Scan' for manual refresh. The legend shows counts by criticality level and device type (computers, phones, cameras, routers, IoT). 'Forget' clears the network history.

βš™οΈ Sub-Features

1. πŸ”§ Radar – Interactive Device Map

Description: The Radar tab displays an interactive circular visualization with devices positioned around concentric rings based on network proximity. At the top, a search bar lets you filter by 'Name, IP, ports...', and an 'Auto scan' toggle enables continuous discovery. Network interface details are shown (Wi-Fi IP, Gateway, BSSID, last scan time). Devices appear as colored icons: red/orange for high-criticality devices, green for low-criticality. Device types are visually distinguished with icons (computer monitors, phones, cameras, routers, IoT devices). Device names appear as labels (e.g., 'iphone-amy', 'router-media', 'camera-office', 'raspberrypi'). On the left, a legend shows counts by category: Devices, New devices, Reactivated devices, Unusual ports, High/Medium/Low criticality, and device types (Computers, Phones, Cameras, Stealth, Dismissed, Deleted). Click 'Scan' button in the corner to trigger a manual network scan, or 'Forget' to clear the network history.


List View Detail View
Radar – Interactive Device Map - List Radar – Interactive Device Map - Detail

Screenshot of Radar – Interactive Device Map - Multi-pane layout showing list and detail views



2. πŸ”§ Table – Sortable Device List

Description: The Table tab displays a sortable spreadsheet view of all discovered devices. Columns include: IP (e.g., 192.168.11.212), Identifier (device hostname like 'ps5', 'modem', 'camera-garage'), MAC (hardware address), Vendor (manufacturer like 'microsoft', 'dell', 'foscam', 'hikvision'), Criticality (High/Medium/Low), and Active (Yes/No). Click column headers to sort. A search bar at the top filters across all fields. Click any row to open a detail pane showing: Last seen timestamp, First seen date, IPv4 address, Hostname, editable Custom name field, Criticality level, Device type with icon, Vendor, Operating system info, and a list of open ports with IANA service names and CVE references. Action buttons at the bottom: 'I verified all ports' (green) dismisses all port alerts, 'Delete' removes the device, and 'Close' hides the pane. An 'AI report' button generates an LLM analysis of device security.


List View Detail View
Table – Sortable Device List - List Table – Sortable Device List - Detail

Screenshot of Table – Sortable Device List - Multi-pane layout showing list and detail views



3. πŸ”§ Detailed – Device Card View

Description: The Detailed tab displays each discovered device as an expanded card with rich information at a glance. At the top, filter statistics show device counts by status (Devices, New, Reactivated, Unusual ports, Inactive) and criticality (High in red, Medium in orange, Low in green), plus device type counts (Computers, Phones, Cameras, Stealth, Dismissed, Deleted). Each card shows: device name in bold (e.g., 'pc-gaming', 'printer-kitchen', 'ps4', 'modem'), an icon representing the device type (red for high-criticality, orange for medium, green for low), IP address, MAC address, and Vendor name. Status indicators on the right show new/active status with colored dots. Cards are scrollable and can be clicked to open the full detail pane. The layout provides quick visual scanning of your entire network inventory.


List View Detail View
Detailed – Device Card View - List Detailed – Device Card View - Detail

Screenshot of Detailed – Device Card View - Multi-pane layout showing list and detail views



4. πŸ”§ Networks – Connection History

Description: The Networks tab displays a history of all Wi-Fi and wired networks you've connected to. Each network entry shows as a card with: a Wi-Fi icon, the network details in the format 'Wi-Fi: [IP/subnet], Gateway: [gateway IP], BSSID: [access point MAC]', a 'Wi-Fi' badge indicating connection type, and the last scan timestamp on the right. This view helps you track which networks you've accessed, compare device discoveries across locations (home, office, coffee shop), and identify if you've connected to any potentially suspicious networks. Click a network entry to view the devices discovered on that network during your last visit.


Networks – Connection History

Screenshot of Networks – Connection History



5. πŸ”§ Events – Device Activity Timeline

Description: The Events tab displays a chronological timeline of device activity across all networks. At the top, filter buttons let you focus on event types: 'New' (green), 'Reactivated' (blue), and 'Inactivated' (orange). A search field filters by 'Name, IP, ports...'. Each event card shows: the device icon with type-specific color, device name in bold (e.g., 'ps4', 'nas-home', 'ps5', 'iot-gateway2', 'router-security'), the network it was seen on (e.g., 'Wi-Fi: 192.168.67.32/24'), status badges indicating the event type, and an 'Active' badge if currently online. The timestamp appears on the right. A trash icon on each card allows you to delete the device record from history. This view is essential for monitoring network changes - detecting new unauthorized devices, tracking when devices come and go, and maintaining visibility into your network's evolution over time.


List View Detail View
Events – Device Activity Timeline - List Events – Device Activity Timeline - Detail

Screenshot of Events – Device Activity Timeline - Multi-pane layout showing list and detail views



6. πŸ”§ Discovery Features – How Scanning Works

Description: EDAMAME uses multiple discovery techniques: ICMP ping and broadcast ping for host discovery, ARP/NDP for MAC address resolution, TCP/UDP port scanning for service detection, mDNS for smart device discovery, and HTTP banner analysis for version detection. Scans are rate-limited and safe for production networks.

πŸ“ UI Elements & Data

  • Community Sharing – P2P Device Metadata

    • Share device information securely with other EDAMAME users on your network via encrypted P2P mesh (libp2p). Desktop devices with admin privileges help mobile devices discover MAC addresses and additional network details they can't obtain directly. All shared data is signed and verified.
  • CVE Analysis – Vulnerability Detection

    • Automatically checks discovered services against MITRE CVE database. Identifies known vulnerabilities for open ports and service versions. Provides severity ratings and remediation guidance for each CVE.
  • Device Profiling – Automatic Classification

    • Automatically identifies device types (computer, router, printer, camera, IoT, smart TV, etc.) using network ports, service signatures, manufacturer OUI database, and behavior patterns. Customizable device names for easier identification.

πŸ“‹ Contents


🏠 Navigation


This page was automatically generated from feature definitions.

Clone this wiki locally