public static void ReportToConsole(DetectUnknownHostsResults results)
{
var unknownHosts = results.UnknownHosts;
var mismatchedIpAddressDhcpHosts = results.MismatchedIpAddressDhcpHosts;
if (unknownHosts.Count == 0)
{
Console.WriteLine("No unknown hosts found.", unknownHosts.Count);
}
else
{
Console.WriteLine("Found {0} unknown hosts!", unknownHosts.Count);
Console.WriteLine();
Console.WriteLine("IP Address\tMAC Address\tManufacturer");
foreach (var unknownHost in unknownHosts)
{
Console.WriteLine("{0}\t{1}\t{2}",
unknownHost.IpAddress,
unknownHost.MacAddress,
unknownHost.Manufacturer
);
}
}
// Write out the DHCP reservation IP address mismatches to the console.
if (mismatchedIpAddressDhcpHosts != null)
{
if (mismatchedIpAddressDhcpHosts.Count == 0)
{
Console.WriteLine("No DHCP reservation mismatches found.", unknownHosts.Count);
}
else
{
Console.WriteLine("Found {0} DHCP reservation mismatches!", unknownHosts.Count);
Console.WriteLine();
Console.WriteLine("IP Address\tMAC Address\tManufacturer\tExpected IP Address");
foreach (var mismatch in mismatchedIpAddressDhcpHosts)
{
var arpEntry = mismatch.Key;
var dhcpReservationEntry = mismatch.Value;
Console.WriteLine("{0}\t{1}\t{2}\t{3}",
arpEntry.IpAddress,
arpEntry.MacAddress,
arpEntry.Manufacturer,
dhcpReservationEntry.IpAddress
);
}
}
}
}
public static void ReportToPushover(DetectUnknownHostsResults results, string token, string user, string pushoverApiUrl, bool verbose = false)
{
// Create shallow clones because we need to modify these lists below.
var unknownHosts = new List <ArpScanEntry>(results.UnknownHosts);
var mismatchedIpAddressDhcpHosts = results.MismatchedIpAddressDhcpHosts == null
? new List <KeyValuePair <ArpScanEntry, DhcpReservationEntry> >()
: new List <KeyValuePair <ArpScanEntry, DhcpReservationEntry> >(results.MismatchedIpAddressDhcpHosts);
if (unknownHosts.Count == 0 && (mismatchedIpAddressDhcpHosts == null || mismatchedIpAddressDhcpHosts.Count == 0))
{
return;
}
if (verbose)
{
Console.WriteLine("Checking to see if push notifications need to be sent...");
}
var notificationThreshold = DateTime.Now.AddHours(-NOTIFICATION_THRESHOLD_HOURS);
// ************************************************************************************************
if (unknownHosts.Count > 0)
{
// Read the recently notified hosts from disk.
string recentHostsJson = null;
if (verbose)
{
Console.WriteLine("Using recent hosts JSON from file: " + RecentHostsPath);
}
if (File.Exists(RecentHostsPath))
{
recentHostsJson = File.ReadAllText(RecentHostsPath);
}
if (String.IsNullOrEmpty(recentHostsJson))
{
recentHostsJson = "[]";
}
var recentHostEntries = JsonConvert.DeserializeObject <List <RecentlyNotifiedHostEntry> >(recentHostsJson);
// Remove expired recently notified entries; these ones we can re-notify for if they're still unknown.
recentHostEntries.RemoveAll(x => x.NotifiedAt < notificationThreshold);
// Remove hosts we've already notified for recently.
unknownHosts.RemoveAll(x => recentHostEntries.FindAll(y => y.UnknownHost.IpAddress == x.IpAddress).Count > 0);
// Since we're about to notify for these hosts, add them to the list.
foreach (var unknownHost in unknownHosts)
{
recentHostEntries.Add(new RecentlyNotifiedHostEntry()
{
NotifiedAt = DateTime.Now,
UnknownHost = unknownHost,
});
}
// Update the recently notified JSON back to disk.
recentHostsJson = JsonConvert.SerializeObject(recentHostEntries);
File.WriteAllText(RecentHostsPath, recentHostsJson);
if (unknownHosts.Count > 0)
{
Console.WriteLine($"Found {unknownHosts.Count} unknown hosts that haven't been recently reported via push notification; sending message now...");
// Build the unknown hosts push notification body.
var unknownHostsMessage = new StringBuilder();
unknownHostsMessage.Append("Found unknown host");
if (unknownHosts.Count > 1)
{
unknownHostsMessage.Append("s");
}
unknownHostsMessage.AppendLine(" on network:");
for (int i = 0; i < unknownHosts.Count && i < MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION; i++)
{
var unknownHost = unknownHosts[i];
unknownHostsMessage.AppendFormat("• {0} [{1}] ({2})", unknownHost.IpAddress, unknownHost.MacAddress, unknownHost.Manufacturer);
unknownHostsMessage.AppendLine();
}
if (unknownHosts.Count > MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION)
{
var more = unknownHosts.Count - MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION;
unknownHostsMessage.AppendLine($"{more}...");
}
Pushover.Send(token, user, pushoverApiUrl, unknownHostsMessage.ToString(), verbose);
}
}
// ************************************************************************************************
if (mismatchedIpAddressDhcpHosts == null || mismatchedIpAddressDhcpHosts.Count > 0)
{
// Read the recently notified DHCP reservation mismatches from disk.
string recentMismatchJson = null;
if (verbose)
{
Console.WriteLine("Using recent reservations mismatches JSON from file: " + RecentMismatchesPath);
}
if (File.Exists(RecentMismatchesPath))
{
recentMismatchJson = File.ReadAllText(RecentMismatchesPath);
}
if (String.IsNullOrEmpty(recentMismatchJson))
{
recentMismatchJson = "[]";
}
var recentMismatchEntries = JsonConvert.DeserializeObject <List <RecentlyNotifiedReservationMismatchEntry> >(recentMismatchJson);
// Remove expired recently notified entries; these ones we can re-notify for if they're still unknown.
recentMismatchEntries.RemoveAll(x => x.NotifiedAt < notificationThreshold);
// Remove hosts we've already notified for recently.
mismatchedIpAddressDhcpHosts.RemoveAll(x => recentMismatchEntries.FindAll(y => y.MismatchEntry.Key.IpAddress == x.Value.IpAddress).Count > 0);
// Since we're about to notify for these hosts, add them to the list.
foreach (var mismatchEntry in mismatchedIpAddressDhcpHosts)
{
recentMismatchEntries.Add(new RecentlyNotifiedReservationMismatchEntry()
{
NotifiedAt = DateTime.Now,
MismatchEntry = mismatchEntry,
});
}
// Update the recently notified JSON back to disk.
recentMismatchJson = JsonConvert.SerializeObject(recentMismatchEntries);
File.WriteAllText(RecentMismatchesPath, recentMismatchJson);
if (mismatchedIpAddressDhcpHosts.Count > 0)
{
Console.WriteLine($"Found {mismatchedIpAddressDhcpHosts.Count} DHCP reservation mismatches that haven't been recently reported via push notification; sending message now...");
// Build the unknown hosts push notification body.
var reservationMismatchMessage = new StringBuilder();
reservationMismatchMessage.Append("Found unknown host");
if (mismatchedIpAddressDhcpHosts.Count > 1)
{
reservationMismatchMessage.Append("s");
}
reservationMismatchMessage.AppendLine(" on network:");
for (int i = 0; i < mismatchedIpAddressDhcpHosts.Count && i < MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION; i++)
{
var mismatchEntry = mismatchedIpAddressDhcpHosts[i];
reservationMismatchMessage.AppendFormat("• {0} Actual: [{1}] Expected: [{2}]", mismatchEntry.Key.IpAddress, mismatchEntry.Key.MacAddress, mismatchEntry.Value.MacAddress);
reservationMismatchMessage.AppendLine();
}
if (mismatchedIpAddressDhcpHosts.Count > MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION)
{
var more = mismatchedIpAddressDhcpHosts.Count - MAX_HOSTS_IN_SINGLE_PUSH_NOTIFICATION;
reservationMismatchMessage.AppendLine($"{more}...");
}
Pushover.Send(token, user, pushoverApiUrl, reservationMismatchMessage.ToString(), verbose);
}
}
// ************************************************************************************************
if (unknownHosts.Count == 0 && (mismatchedIpAddressDhcpHosts == null || mismatchedIpAddressDhcpHosts.Count == 0))
{
Console.WriteLine("Did not find any entries that need reporting via push notification.");
}
}
