Function checkPwnUpdates

web/scripts/ragnar_modern.js:6964–7032

()

                    return `<tr class="border-t border-slate-800">
                        <td class="px-2 py-1 font-mono ${rogue ? 'text-red-300' : 'text-gray-200'}">${escapeHtml(s.src)}${s.broadcast ? ' <span class="text-amber-300">bcast</span>' : ''}</td>
                        <td class="px-2 py-1 text-gray-400">${escapeHtml((s.modes || []).join(', '))}</td>
                        <td class="px-2 py-1 ${stCls}">${strata}${s.kod ? ' KoD' : ''}</td>
                        <td class="px-2 py-1 font-mono ${bigOff ? 'text-red-300' : 'text-gray-400'}">${off}</td>
                        <td class="px-2 py-1 font-mono text-gray-400">${escapeHtml((s.refids || []).join(', ') || '—')}</td>
                        <td class="px-2 py-1">${rogue ? '<span class="text-red-300">ROGUE</span>' : '<span class="text-gray-500">trusted</span>'}</td>
                    </tr>`;
                }).join('') + '</tbody></table>';
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        if (d.advisories && d.advisories.length) {
            html += '<ul class="text-xs text-cyan-400/80 mt-2 list-disc pl-5">' +
                d.advisories.map(a => '<li>' + escapeHtml(a) + '</li>').join('') + '</ul>';
        }
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function ntpTrustBaseline() {
    try {
        await postAPI('/api/net/ntp-baseline', { action: 'reset' });
        addConsoleMessage('NTP baseline reset — re-learning current time source(s)', 'info');
        await runNtpWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset NTP baseline: ' + e.message, 'error');
    }
}

// ---- ICMP Watch (passive ICMP-redirect / L3 route injection) ---------------
const _ICMP_VERDICT_STYLE = {
    clean:         ['bg-green-950/40 border-green-900 text-green-400', '✓ No ICMP redirects / injections / floods detected'],
    anomaly:       ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ ICMP anomaly — a redirect/IRDP from a known gateway (verify)'],
    recon:         ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ ICMP reconnaissance — timestamp / address-mask / info requests'],
    tunnel:        ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ ICMP tunnelling — oversized echo payloads (covert channel / exfil)'],
    flood:         ['bg-red-950/60 border-red-800 text-red-300', '🛑 ICMP flood — ping-flood / smurf DoS'],
    'rogue-irdp':  ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue IRDP router advertisement — gateway injection'],
    redirect:      ['bg-red-950/60 border-red-800 text-red-300', '🛑 ICMP Redirect — Layer-3 man-in-the-middle (route injection)'],
    unknown:       ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _icmpFillIfaces() {
    const sel = document.getElementById('icmp-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}