netalertx/NetAlertX
NetAlertX
NetAlertX is a distributed network scanner and asset discovery tool designed to identify connected devices and track unauthorized hardware. It aggregates discovery results from multiple remote monitoring nodes into a single centralized inventory hub to provide unified network visibility.
The project distinguishes itself by integrating as a bridge to MQTT brokers for smart home automation and providing a dedicated interface for AI agents to query system data. It employs multi-protocol identity resolution using DNS, mDNS, and NetBIOS to identify hardware and generates synthetic identifiers to ensure inventory persistence for devices lacking standard network IDs.
The system covers a broad range of capabilities, including real-time device status monitoring and event-driven notifications via webhooks and email. It features a plugin framework for extending discovery and automation, as well as diagnostic tools for remote packet scanning and traceroute. Visual monitoring is handled through customizable dashboards and self-healing wallboards.
Features
- Hub-and-Spoke Agent Deployment - Aggregates discovery data from distributed remote monitoring nodes into a single central hub for unified visibility.
- Network Discovery Scanners - Aggregates discovery results from multiple remote monitoring nodes into a centralized inventory hub for network visibility.
- Device Presence Alerts - Sends real-time alerts when new devices join or existing devices leave the network to maintain asset visibility.
- Asset Categorization Rules - Automatically groups and labels discovered devices using logical conditions and vendor-specific matching rules.
- Distributed Data Synchronization Systems - Maintains a unified network inventory by synchronizing discovery results from distributed remote monitoring nodes.
- Infrastructure Data Imports - Imports device lists and network data from third-party routers and API endpoints to centralize inventory.
- Inventory Data Synchronization - Transfers network discovery data between remote collectors and a central server using direct uploads or retrieval.
- Network Control APIs - Offers authenticated web APIs to programmatically query and control discovered devices, events, and network metrics.
- Event Notifications - Dispatches notifications to external services whenever network changes or specific device events occur.
- Multi-Protocol Identity Resolution - Identifies hardware by sequentially querying DNS, mDNS, and NetBIOS protocols to resolve network addresses.
- Network Device Discovery - Scans local networks using ARP and DHCP to identify and categorize connected hardware devices.
- Network Environment Scanning - Provides active network discovery to identify connected devices and analyze performance metrics within local network environments.
- Event-Driven Notification Triggers - Dispatches real-time alerts and webhooks in response to changes in device status and network event logs.
- Automated Asset Governance - Automatically categorizes devices, assigns network nodes, and groups hardware by vendor using automated rules.
- Distributed Status Aggregators - Provides unified oversight by aggregating health and discovery data from distributed remote monitoring instances.
- Multi-Site Monitoring - Collects asset data from distributed remote sites via sync nodes to maintain a unified inventory view.
- Network Connectivity Monitoring - Tracks the real-time online or offline status of devices to detect unauthorized hardware joining the network.
- Real-Time Monitoring Dashboards - Provides a visual interface for tracking device online status and overall network health in real-time.
- AI Assistant Integrations - Provides specialized interfaces that allow AI agents to query and interact with network monitoring data.
- Data Exposure - Exposes system state and metrics via standardized REST API endpoints for external AI agents and automation tools.
- Data Mapping - Maps data from third-party systems and network protocols into centralized device and scan tables.
- Network Diagnostic Interfaces - Executes remote network utilities like traceroute and packet scans through a programmable interface for troubleshooting.
- External Workflow Triggers - Pushes network events to external automation platforms via webhooks to trigger downstream operational workflows.
- Network Webhooks - Provides mechanisms to trigger external events and workflows via webhooks based on network state changes.
- Persistence Identifiers - Generates synthetic tracking keys for devices without standard IDs to ensure consistent inventory tracking over time.
- MQTT Messaging Integrations - Publishes device status and network statistics to MQTT brokers for integration with smart home controllers.
- Network Device Arrival Notifiers - Sends alerts via webhooks and email when new or existing devices join or leave the network.
- Network Diagnostics - Offers programmable tools for running remote connectivity tests and packet scans to troubleshoot network issues.
- Plugin Development Frameworks - Implements a framework for integrating third-party scripts to expand device discovery and custom automation.
- Plugin-Based Logic Extensions - Uses a plugin-based model to execute third-party scripts and binaries for extending discovery and monitoring.
- Custom Notification Triggers - Triggers custom alerts to external platforms when specific monitored network conditions are met.
- Device Connectivity Tracking - Monitors network changes and records online/offline status transitions for assets over time.
- Device State Monitors - Tracks whether discovered and manual assets are online or offline using periodic ping requests.
- Network Health Visualizations - Displays real-time asset visibility and network health through dedicated dashboards and monitoring wallboards.
- Network Task Automation - Executes sequences of actions based on triggers and logical conditions to handle network discovery and cleanup.
- Notification Dispatchers - Implements a dispatching system that routes network alerts to various external communication platforms.
- Observability Data Exporters - Streams device changes and network metrics to external automation platforms and webhooks for operational workflows.
