jokob-sk / NetAlertX

🖧🔍 WIFI / LAN intruder detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.
GNU General Public License v3.0
3.12k stars 186 forks source link

Google Home hub appears to respond to ARP-SCAN with .255 broadcast address #867

Closed jonwaland closed 3 weeks ago

jonwaland commented 3 weeks ago

Is there an existing issue for this?

Current Behavior

Google Home hub keeps "appearing" to flip IP address, despite being statically allocated.

It seems ARP-SCAN thinks the device is on 192.168.1.255 - the broadcast address!

02:00:19 Devices List:[{'ip': '192.168.1.39', 'mac': '60:01:94:66:ad:d1', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.34', 'mac': '34:ab:95:a7:f5:a1', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.64', 'mac': '28:6c:07:86:9f:fb', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.129', 'mac': 'f0:2f:74:f3:76:4c', 'hw': 'ASUSTek COMPUTER INC.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.69', 'mac': 'f0:b4:29:c3:87:b6', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.70', 'mac': '2c:3a:e8:43:cb:27', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.131', 'mac': '00:24:1d:27:1c:32', 'hw': 'GIGA-BYTE TECHNOLOGY CO.,LTD.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.71', 'mac': '78:11:dc:dc:2f:0b', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.132', 'mac': '10:62:eb:95:52:24', 'hw': 'D-Link International', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.75', 'mac': '84:f3:eb:84:f8:eb', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.76', 'mac': '84:f3:eb:85:00:e3', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.66', 'mac': 'f0:b4:29:b8:41:1d', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.80', 'mac': 'bc:dd:c2:ee:84:6e', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.143', 'mac': 'e4:f0:42:01:ca:36', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.79', 'mac': '78:11:dc:91:54:b1', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.85', 'mac': '04:cf:8c:9b:3a:fd', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.72', 'mac': '78:11:dc:e1:f8:cd', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.73', 'mac': '84:f3:eb:85:01:7d', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.148', 'mac': '40:9b:cd:26:7d:88', 'hw': 'D-Link International', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.74', 'mac': '84:f3:eb:84:f9:a2', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.141', 'mac': 'a4:77:33:bf:86:01', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.159', 'mac': '2c:cc:44:c3:3d:95', 'hw': 'Sony Interactive Entertainment Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.174', 'mac': '5c:34:00:34:7a:7f', 'hw': 'Hisense Electric Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.87', 'mac': '80:7d:3a:4f:49:34', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.135', 'mac': 'a4:f1:e8:9d:20:70', 'hw': 'Apple, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.160', 'mac': '44:ea:30:36:3b:c7', 'hw': 'Samsung Electronics Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.183', 'mac': '00:e0:4c:68:00:8f', 'hw': 'REALTEK SEMICONDUCTOR CORP.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.164', 'mac': 'f0:18:98:a6:59:34', 'hw': 'Apple, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.184', 'mac': '3c:a6:f6:58:ee:b1', 'hw': 'Apple, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.84', 'mac': '40:31:3c:79:d6:59', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.77', 'mac': '80:7d:3a:4f:49:16', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.176', 'mac': 'd8:8c:79:1c:5b:68', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.145', 'mac': '48:d6:d5:44:11:e8', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.151', 'mac': '34:ea:34:88:df:0d', 'hw': 'HangZhou Gubei Electronics Technology Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.153', 'mac': '78:11:dc:71:14:77', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.155', 'mac': '3c:8d:20:45:eb:10', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.147', 'mac': '48:d6:d5:5e:02:40', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.86', 'mac': '80:7d:3a:4f:4c:a3', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.254', 'mac': '28:d1:27:4d:c5:d1', 'hw': 'Beijing Xiaomi Mobile Software Co., Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.255', 'mac': 'd8:8c:79:1c:5b:68', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.175', 'mac': 'e8:7f:6b:aa:18:15', 'hw': 'Samsung Electronics Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.68', 'mac': 'f0:b4:29:bd:ea:47', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.142', 'mac': 'a4:77:33:bf:88:09', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.146', 'mac': '20:df:b9:30:55:e9', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.163', 'mac': '84:cc:a8:64:7e:60', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.170', 'mac': '34:ce:00:e8:2d:08', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.78', 'mac': '80:7d:3a:4f:48:53', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.144', 'mac': '48:d6:d5:5f:a7:c0', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.65', 'mac': '28:6c:07:86:a8:4a', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.152', 'mac': 'b8:27:eb:aa:b5:d2', 'hw': 'Raspberry Pi Foundation', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.89', 'mac': '5c:cf:7f:bd:74:49', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.91', 'mac': 'c4:4f:33:8b:8e:9d', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.83', 'mac': '7c:49:eb:b1:92:2a', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.158', 'mac': '78:11:dc:7a:24:d3', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.37', 'mac': '22:43:ae:76:28:92', 'hw': '(Unknown: locally administered)', 'interface': '192.168.1.0/24 --interface=eno1'}]
192.168.1.176   d8:8c:79:1c:5b:68   Google, Inc.
192.168.1.255   d8:8c:79:1c:5b:68   Google, Inc.
02:05:32 Devices List:[{'ip': '192.168.1.37', 'mac': '22:43:ae:76:28:92', 'hw': '(Unknown: locally administered)', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.89', 'mac': '5c:cf:7f:bd:74:49', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.83', 'mac': '7c:49:eb:b1:92:2a', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.91', 'mac': 'c4:4f:33:8b:8e:9d', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.39', 'mac': '60:01:94:66:ad:d1', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.129', 'mac': 'f0:2f:74:f3:76:4c', 'hw': 'ASUSTek COMPUTER INC.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.131', 'mac': '00:24:1d:27:1c:32', 'hw': 'GIGA-BYTE TECHNOLOGY CO.,LTD.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.132', 'mac': '10:62:eb:95:52:24', 'hw': 'D-Link International', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.69', 'mac': 'f0:b4:29:c3:87:b6', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.65', 'mac': '28:6c:07:86:a8:4a', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.64', 'mac': '28:6c:07:86:9f:fb', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.71', 'mac': '78:11:dc:dc:2f:0b', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.72', 'mac': '78:11:dc:e1:f8:cd', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.143', 'mac': 'e4:f0:42:01:ca:36', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.76', 'mac': '84:f3:eb:85:00:e3', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.75', 'mac': '84:f3:eb:84:f8:eb', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.80', 'mac': 'bc:dd:c2:ee:84:6e', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.148', 'mac': '40:9b:cd:26:7d:88', 'hw': 'D-Link International', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.74', 'mac': '84:f3:eb:84:f9:a2', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.85', 'mac': '04:cf:8c:9b:3a:fd', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.159', 'mac': '2c:cc:44:c3:3d:95', 'hw': 'Sony Interactive Entertainment Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.79', 'mac': '78:11:dc:91:54:b1', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.145', 'mac': '48:d6:d5:44:11:e8', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.141', 'mac': 'a4:77:33:bf:86:01', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.142', 'mac': 'a4:77:33:bf:88:09', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.183', 'mac': '00:e0:4c:68:00:8f', 'hw': 'REALTEK SEMICONDUCTOR CORP.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.70', 'mac': '2c:3a:e8:43:cb:27', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.164', 'mac': 'f0:18:98:a6:59:34', 'hw': 'Apple, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.184', 'mac': '3c:a6:f6:58:ee:b1', 'hw': 'Apple, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.144', 'mac': '48:d6:d5:5f:a7:c0', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.153', 'mac': '78:11:dc:71:14:77', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.151', 'mac': '34:ea:34:88:df:0d', 'hw': 'HangZhou Gubei Electronics Technology Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.84', 'mac': '40:31:3c:79:d6:59', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.87', 'mac': '80:7d:3a:4f:49:34', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.176', 'mac': 'd8:8c:79:1c:5b:68', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.77', 'mac': '80:7d:3a:4f:49:16', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.147', 'mac': '48:d6:d5:5e:02:40', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.155', 'mac': '3c:8d:20:45:eb:10', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.73', 'mac': '84:f3:eb:85:01:7d', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.254', 'mac': '28:d1:27:4d:c5:d1', 'hw': 'Beijing Xiaomi Mobile Software Co., Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.255', 'mac': 'd8:8c:79:1c:5b:68', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.86', 'mac': '80:7d:3a:4f:4c:a3', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.146', 'mac': '20:df:b9:30:55:e9', 'hw': 'Google, Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.163', 'mac': '84:cc:a8:64:7e:60', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.170', 'mac': '34:ce:00:e8:2d:08', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.152', 'mac': 'b8:27:eb:aa:b5:d2', 'hw': 'Raspberry Pi Foundation', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.34', 'mac': '34:ab:95:a7:f5:a1', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.177', 'mac': '9c:5a:81:ba:6a:46', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.78', 'mac': '80:7d:3a:4f:48:53', 'hw': 'Espressif Inc.', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.175', 'mac': 'e8:7f:6b:aa:18:15', 'hw': 'Samsung Electronics Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.68', 'mac': 'f0:b4:29:bd:ea:47', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.66', 'mac': 'f0:b4:29:b8:41:1d', 'hw': 'Xiaomi Communications Co Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.158', 'mac': '78:11:dc:7a:24:d3', 'hw': 'XIAOMI Electronics,CO.,LTD', 'interface': '192.168.1.0/24 --interface=eno1'}, {'ip': '192.168.1.160', 'mac': '44:ea:30:36:3b:c7', 'hw': 'Samsung Electronics Co.,Ltd', 'interface': '192.168.1.0/24 --interface=eno1'}]
192.168.1.176   d8:8c:79:1c:5b:68   Google, Inc.
192.168.1.255   d8:8c:79:1c:5b:68   Google, Inc.

Expected Behavior

device doesn't get allocated .255 address

Steps To Reproduce

add a google home hub to the network. Set static IP. wait.

app.conf

(cant post)

docker-compose.yml

services:
  netalertx:
    container_name: netalertx
    image: "jokobsk/netalertx:latest"      
    network_mode: "host"        
    restart: unless-stopped
    volumes:
      - /home/walaj/docker/netalertx/config:/app/config
      - /home/walaj/docker/netalertx/db:/app/db      
    environment:
      - TZ=Australia/Sydney
      - PGID=1000
      - PUID=1000    
      - PORT=20211

What branch are you running?

Production

app.log

log.txt

Debug enabled

jokob-sk commented 3 weeks ago

Hi @jonwaland ,

I have the same issue, but I don't think that's something that can be fixed in the app. Maybe I'm wrong, but that's probably how Google implemented some of their discovery mechanism.

Not sure though. The thing is however I only consume the output from the scanners, so if e.g. ARPSCAN reports an address then that address gets stored.

I'll keep this open for a bit - Let's see if someone has an idea.

You can bock the IP if you want:

https://github.com/jokob-sk/NetAlertX/blob/main/docs/NOTIFICATIONS.md

Let me know what you think.

Thanks, j

jonwaland commented 3 weeks ago

TBH, I didn't think it was the app - its very much an ARP-SCAN and Google Home Hub interaction. Google device should not be responding on the broadcast address.

So what I want to do is just ignore IP Address changes for this device - it has a static IP - I still want to know if it is offline. What's the best way to do this?

jokob-sk commented 3 weeks ago

You should be able to achieve this by unselecting "Alert All Events" and selecting "Alert Down". Let me know how to make the documentation clearer so it's more obvious in the descriptions and this article: https://github.com/jokob-sk/NetAlertX/blob/main/docs/NOTIFICATIONS.md

Let me know what you think.

Thanks, j

jonwaland commented 3 weeks ago

Ahh - I got that I can disable most of the notifications, I was also wondering about being able to block the actual events.

The notifications page is fine.