NetAlertX

Use it when

• You want an alert the moment an unknown or unauthorized device joins your home lab, office LAN, or a customer site
• You need a continuously updated device inventory across VLANs, branch offices, or multiple client networks without deploying a full NMS or SIEM

What it solves

Not the fit when

• Not a full NMS or SIEM; the README itself points to Zabbix, Nagios, and NetBox for infrastructure monitoring and IPAM source-of-truth needs
• ARP-based scanning may miss devices on other subnets or Wi-Fi-only networks without alternate scan methods
• Requires elevated network capabilities (NET_RAW, NET_ADMIN) and host networking; run behind an authenticated reverse proxy since RBAC is delegated to the proxy or SSO layer
• full infrastructure metrics and log monitoring
• intrusion detection on traffic content
• ip address management source of truth
• vulnerability scanning of hosts
• internet uptime or bandwidth monitoring

Install

mkdir -p /local_data_dir/config /local_data_dir/db && docker run -d --network=host --restart unless-stopped --cap-add=NET_RAW --cap-add=NET_ADMIN --cap-add=NET_BIND_SERVICE -v /local_data_dir:/data -v /etc/localtime:/etc/localtime:ro --tmpfs /tmp:uid=20211,gid=20211,mode=1700 -e PORT=20211 -e APP_CONF_OVERRIDE='{"GRAPHQL_PORT":"20214"}' ghcr.io/netalertx/netalertx:latest

Invoke

Open the web UI on the configured port (default 20211) to see discovered devices; configure scan methods (arp-scan, Pi-hole DB or DHCP leases import, generic DHCP leases, UniFi controller import, SNMP router import) and route alerts to 80+ notification services via Apprise, NTFY, Pushover, Pushsafer, or webhooks; use Sync Nodes for multi-site inventory

Alternatives

No reviewed alternatives recorded yet.