Skip to content
Beta Every feature free, no card.

Install the agent.

One small service on any machine in the network. It sweeps with ICMP and ARP, asks each host that answers who it is, and draws what it finds on your board — live, while it sweeps.

Runs on
Linux, macOS, Windows
Architectures
x86_64 and ARM64
Privileges
CAP_NET_RAW only, on Linux
Network
Outbound HTTPS to api.infrality.io
Releases
v0.1.6, signed manifest, SHA-256
Dependencies
None

Four steps, about five minutes

  1. 1

    Install it on the network

    On a machine that stays on: a server, a VM, a spare mini PC, a Raspberry Pi. The installer needs sudo once.

    shell 
    $ curl -fsSL https://www.infrality.io/agent/install.sh | sudo bash

    It checks the release manifest's signature against a pinned key before trusting any checksum. Read it first: install.sh, or download a package.

  2. 2

    Create an API key

    An admin of your organization creates one in the dashboard. It is shown once, and by default it works for the first agent that uses it and no other.

    Agents belong to an organization: create one first if you only have a personal space. Start free if you have no account yet.

  3. 3

    Point it at your network

    Edit /etc/infrality-agent/config.yaml with the key and the range to sweep.

    config.yaml 
    ingestor:
  api_key: "nk_your_key_here"
  base_url: "https://api.infrality.io"

scan:
  cidr: 192.168.1.0   # the network to sweep
  mask: "24"
  interval: 0         # 0 = connect and scan only when asked
                      # set 30m, 12h, 7d or 1mo to repeat on its own
  4. 4

    Start it, then scan

    It registers, shows as online, and waits. Nothing is swept until you press Scan on it in the dashboard, or set it to repeat on its own.

    shell 
    sudo systemctl enable --now infrality-agent

Every setting, several networks, running it as a service, and what to do when a board stays empty: the agent's documentation.

Packages

Linux · x86_64 · release v0.1.6

PackageDownload
.deb

Debian · Ubuntu · Mint · Pop!_OS

Not in this release
.rpm

Fedora · RHEL · CentOS · Rocky Linux

Not in this release
.tar.gz

Universal — any Linux distribution

Not in this release

checksums.txt — SHA-256 for every v0.1.6 asset

What it does on your network

For the firewall review, every probe, port and connection is listed in its network footprint.

It reads
ICMP echo and an ARP sweep of the ranges you give it, then mDNS, NetBIOS, LLMNR, SNMP, SSDP, reverse DNS, a TLS handshake and an HTTP title for each host that answered.
It does not
Change configuration, capture traffic, log in to anything, or install anything on other machines.
How it runs
On Linux as its own unprivileged account holding one capability, CAP_NET_RAW, under a systemd sandbox. It connects out and opens no port.
Who controls it
Your organization's admins: start and stop sweeps, change the range and schedule, pause it or remove it, all recorded in the audit trail.

Start with one network.

Create an account, draw or import a board, and put the agent on one machine when you want the map to keep itself current. Every feature is free during the beta.

Start free Install the agent