v0.3.5

Added

• IPv6 neighbor discovery. scan/monitor (--ipv6/--no-ipv6, on by default) now discover devices over IPv6 as well as ARP: an active sweep pings the link-local all-nodes multicast address (ff02::1), and passive monitoring additionally parses Neighbor Solicitation/Advertisement traffic. This closes a real gap - a device that is IPv6-only, or deliberately configured off IPv4 to evade an ARP-only monitor, was previously invisible. lanfence check reports IPv6 availability on the interface.
• New rogue-device vendor signatures backed by real, confirmed vendor strings: hisilicon_camera_soc, allwinner_sbc_or_camera, orange_pi, and an ai-thinker match folded into esp32_esp8266.
• lanfence vendor-refresh and a full ~40,000-entry IEEE OUI vendor table (see prior release notes).

Changed

• Corrected/downgraded several hostname-based rogue-device signatures (bunny/turtle replacing unverified bashbunny/lanturtle, pineapple downgraded) after verification found weaker support than originally assumed; removed omg-cable and flipper outright as unverifiable.

Fixed

• run_active_sweep no longer marks every known device "disconnected" when a scan sweep fails entirely (e.g. no root) - it now only marks devices offline when at least one scan mechanism actually completed.

Full changelog: https://github.com/rosscooney/LanFence/blob/main/CHANGELOG.md