olivier/stupid-simple-network-inventory
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add Apple to brand tables and troubleshooting section (proxy-ARP)

Browse Source 
- Add Apple ecosystem row in all three README brand tables
- Add Troubleshooting section explaining proxy-ARP false positives and
  the TCP check fix (fr/en/es)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Olivier
2026-05-18 12:00:58 +02:00
parent 4d1e49671b
commit ce1402b5f3
3 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+18
View File
@@ -318,6 +318,7 @@ Multiple logos can appear simultaneously if several keywords match.
| Mail | Mail server | `mail`, `smtp`, `imap`, `postfix`, `dovecot`, `mailcow`, `mailu`, `roundcube` |
| Database | MariaDB | `mariadb`, `maria db` |
| Orchestration | Kubernetes | `kubernetes`, `k8s`, `kubectl`, `k3s` |
| Apple ecosystem | Apple | `apple`, `iphone`, `ipad`, `ipados`, `macbook`, `imac`, `mac mini`, `mac pro`, `mac studio`, `macos`, `mac os`, `ios`, `icloud`, `airpods`, `airdrop` |
| OS | Debian | `debian` |
| OS | Ubuntu | `ubuntu` |
| Automation | Ansible | `ansible` |
@@ -393,6 +394,23 @@ npm run dev # Vite dev server on :5173, proxies /api/ to :8000
---
## 🔧 Troubleshooting
### Scan returns hundreds of false positives (proxy-ARP / UniFi)
**Symptom** — Auto-discovery reports as many hosts as there are addresses in the subnet (e.g. 254 for a `/24`), while only a few machines are actually present.
**Cause** — Some network equipment (notably UniFi Security Gateway, Dream Machine, and similar devices) enables proxy-ARP and responds to ICMP pings for **every** IP in the subnet, spoofing the source IP of the reply. The built-in source-IP check in the scanner cannot filter these false positives.
**Fix** — Enable the **"TCP check (anti proxy-ARP)"** option in the scan configuration screen. This option probes each host on TCP ports 22, 80, 443, 8080, and 8443 after the ICMP ping:
- A **real host** replies with RST (port closed) or accepts the connection → marked alive.
- A **ghost IP**: the gateway silently drops the SYN without replying → timeout → discarded.
> **Note**: a device whose firewall silently drops (*DROP*, without RST) **all** probed ports will not be discovered automatically and must be added manually.
---
## 🏗️ Architecture
See [`docs/architecture.md`](docs/architecture.md) for the detailed request flow, Docker setup, and authentication model.