LanLens 1.6.0 expands network discovery and topology analysis while adding a supported multi-architecture container for AMD64 and ARM64.
Highlights
- Added supported Docker images for
linux/amd64andlinux/arm64. - Added DNS names and aliases, stable preferred device names, and opt-in read-only AXFR synchronization with optional encrypted TSIG authentication.
- Added MAC-only endpoint discovery from SNMP bridge tables, switch/port/VLAN context, and SNMP interface rate trends.
- Expanded Network Topology with relationship and VLAN filters plus detailed relationship evidence.
- Added an optional persistent REST API Bearer token with read-only-by-default access.
- Added passive detection for the encrypted Sophos Security Heartbeat channel without exporting traffic data.
- Added segment sorting and confirmed, batched bulk deletion for stale or false inventory rows.
Discovery and reliability fixes
- Routed scans no longer treat proxy-ARP or synthetic TCP-RST responses as proof that an entire subnet exists.
- Routed devices remain separate IP identities even when several hosts expose one shared MAC address.
- Direct MAC owners retain their metadata and history, including overlapping scan ranges.
- Device-list loading no longer performs per-device service and port-scan queries.
- SNMP-learned devices, repeat sightings, counter resets, API rate fields, and VM-to-host filtering were hardened.
- SSH credential checks now reject unknown or changed host keys.
Docker
docker pull alexrosbach/lanlens:1.6.0
docker compose up -d --force-recreatealexrosbach/lanlens:latest points to the same production image.
- Platforms:
linux/amd64,linux/arm64 - Manifest digest:
sha256:655c179943ded9372d68b5c318d93614eddaa14431ffafcda8f71d8a1e429a7d - Version/build:
1.6.0/20261024.0002 - Production merge commit:
b8f09083d267e805ac1adc5b850187e2d94dacdd
Back up the persistent /data volume before upgrading. Database migrations run automatically when the updated container starts.
Validation
- 199 backend tests passed
- frontend production build passed (979 modules)
- full Chromium suite passed (23 tests)
- full frontend dependency audit reports 0 known vulnerabilities
- AMD64 and emulated ARM64 registry images passed
/api/healthstartup tests
Security, privacy, and licenses
- AXFR is opt-in and read-only; source-IP ACLs and optional TSIG are documented.
- TSIG secrets are encrypted and never returned by the configuration API.
- No direct frontend dependency was added; the updated dependency license set remains compatible with the project.
- Sophos Heartbeat detection reuses the existing local packet-capture path and does not decrypt or export payloads.