Repository navigation
Target scan
The node alerts, in the web UI and over the mesh, when it hears a device on your watchlist. A watchlist entry can be a full MAC address, a vendor prefix (the first three bytes of a MAC), a tracer ID (T-xxxx), or a network name.
You give the node a watchlist. During a target scan it listens on the channels you set and compares every device it hears against that list. A match raises an alert. The scan skips any device on the allowlist.
- Web UI: add entries under Targets, then Scan tab → Target Scan → Start Scan.
-
Over mesh: set the watchlist, then start the scan:
@ALL CONFIG_TARGETS:AA:BB:CC:DD:EE:FF|T-00A3|MyNetwork-
@ALL SCAN_START:2:300:1..11scans both radios for 300 seconds on channels 1 to 11. The channel value is required.
| Setting | What it does | Default |
|---|---|---|
| Watchlist | MACs, vendor prefixes, tracer IDs, or network names to alert on | empty |
| Radio |
0 Wi-Fi, 1 Bluetooth, 2 both |
both |
| Channels | Which Wi-Fi channels to scan | 1 to 11 |
Each target sends at most one mesh alert every 30 seconds, unless its signal changes by 5 dB or the node moves.
The allowlist holds devices the target scan and baseline ignore, such as your own gear. Add entries under Scan tab → Allow list.
Confirm the device is on a channel you are scanning, and that it is not on the allowlist. A device weaker than the signal filter is dropped before it is checked; lower the filter with @ALL CONFIG_RSSI:-90.
The mesh command reference lists every scan command and value.
Start
Nodes
Find devices
- Target scan
- Device discovery
- Device classifier
- Probe requests
- Randomized MAC tracer
- Drone Remote ID
- Triangulation
Watch an area
Detect attacks
Capture and respond
How-to
Reference
Build