feat: add soft scan mode (slow ICMP) to avoid switch/AP rate-limiting

Reduces ICMP concurrency from 100 to 10 workers when soft_scan=true,
spreading out probes to avoid rate-limiting on managed switches and APs.
The option is hidden in the UI when TCP check is active (redundant).

Update README (en/fr/es), docs/backend.md with the new scan modes table
and a troubleshooting entry for ICMP rate-limiting.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-05-18 15:26:50 +02:00
parent aa39898c80
commit 5c34143b52
7 changed files with 70 additions and 6 deletions
+12 -2
View File
@@ -125,7 +125,9 @@ Ping sweep + DNS PTR reverse lookup for one or more CIDR ranges.
"dns_server": "192.168.1.1",
"targets": [
{ "vlan_id": 1, "cidr": "192.168.1.0/24" }
]
],
"tcp_check": false,
"soft_scan": false
}
// Response
@@ -136,7 +138,15 @@ Ping sweep + DNS PTR reverse lookup for one or more CIDR ranges.
}
```
Maximum 1024 hosts per target (rejects /21 and wider). 100 concurrent workers. DNS queries use `dnspython` with a 1s timeout.
Maximum 1024 hosts per target (rejects /21 and wider). DNS queries use `dnspython` with a 1s timeout.
**Scan modes** (mutually exclusive options):
| `tcp_check` | `soft_scan` | Behaviour |
|:-----------:|:-----------:|-----------|
| `false` | `false` | ICMP ping, 100 concurrent workers (default) |
| `false` | `true` | ICMP ping, 10 concurrent workers — avoids rate-limiting by switches/APs |
| `true` | _(ignored)_ | TCP-only (ports 22, 80, 443, 8080, 8443), 100 workers — eliminates proxy-ARP false positives |
---