Open achill-es opened 2 years ago
It should be possible, in the event of an attack being detected to step out of the main loop, connect to wifi network, then mqtt server and post a record.
Alternatively, if you have a running Node-red instance with a serial interface, you could read from the serial port and post to MQTT within Node-red, which is what I am currently doing. I skipped the timestamp from the esp32 because modding time is a pain.
if (packet_rate>0) {
Serial.print("{Channel:");
Serial.print(channels[ch_index]);
Serial.print(",Packets:");
Serial.print(packet_rate);
Serial.println("}");
}
It should be possible, in the event of an attack being detected to step out of the main loop, connect to wifi network, then mqtt server and post a record. Alternatively, if you have a running Node-red instance with a serial interface, you could read from the serial port and post to MQTT within Node-red, which is what I am currently doing. I skipped the timestamp from the esp32 because modding time is a pain. if (packet_rate>0) { Serial.print("{Channel:"); Serial.print(channels[ch_index]); Serial.print(",Packets:"); Serial.print(packet_rate); Serial.println("}"); }
Hi @vongyver , i'm currently trying to implement the deauth detector into my home assistant + node-red build as sensor, so i can properly alert via App, Telegram, Lights, etc. Would you be kind enough to share your Node-Red-Template for properly splitting up the serial input into a MQTT-Topic? Thanks in advance and best regards.
Sadly, I deleted the code for this. If I recall I just was counting the triggers and alerting when it increased within Node-Red. Best of luck with the project! Thank you for the work.
On Mon, Jul 3, 2023 at 7:11 AM chris-nite @.***> wrote:
It should be possible, in the event of an attack being detected to step out of the main loop, connect to wifi network, then mqtt server and post a record. Alternatively, if you have a running Node-red instance with a serial interface, you could read from the serial port and post to MQTT within Node-red, which is what I am currently doing. I skipped the timestamp from the esp32 because modding time is a pain. if (packet_rate>0) { Serial.print("{Channel:"); Serial.print(channels[ch_index]); Serial.print(",Packets:"); Serial.print(packet_rate); Serial.println("}"); }
Hi @vongyver https://github.com/vongyver , i'm currently trying to implement the deauth detector into my home assistant + node-red build as sensor, so i can properly alert via App, Telegram, Lights, etc. Would you be kind enough to share your Node-Red-Template for properly splitting up the serial input into a MQTT-Topic? Thanks in advance and best regards.
— Reply to this email directly, view it on GitHub https://github.com/SpacehuhnTech/DeauthDetector/issues/20#issuecomment-1618235643, or unsubscribe https://github.com/notifications/unsubscribe-auth/AASTLSWASEJDZU4MRGUURJLXOLAHLANCNFSM5TSTIJNA . You are receiving this because you were mentioned.Message ID: @.***>
Wouldn't it be a nice improvement to add a function that publishes the channel number where an deauth attack has been identified (LED on) to a pre-configured MQTT broker?
The broker would implicitly record the UTC for the event for later deep analysis.
More ideas on this proposed enhancement welcome...