Function loadWifiInterfaces

web/scripts/ragnar_modern.js:9036–9105

()

                        <td class="px-2 py-1 font-mono">${escapeHtml(sp.status)}</td>
                        <td class="px-2 py-1">${forming}</td>
                        <td class="px-2 py-1">${badge}</td>
                    </tr>`;
                }).join('') +
                '</tbody></table>';
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        (d.advisories || []).forEach(a => {
            html += `<div class="mt-2 px-3 py-2 rounded border text-xs text-gray-400 border-slate-700 bg-slate-900/40">${escapeHtml(a)}</div>`;
        });
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function dtpTrustBaseline() {
    try {
        await postAPI('/api/net/dtp-baseline', { action: 'reset' });
        addConsoleMessage('DTP baseline reset — re-learning current DTP speakers', 'info');
        await runDtpWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset DTP baseline: ' + e.message, 'error');
    }
}

// ---- CDP Watch (passive Cisco Discovery flood / spoof / info-leak) ---------
const _CDP_VERDICT_STYLE = {
    clean:         ['bg-green-950/40 border-green-900 text-green-400', '✓ No CDP anomaly — speakers match the trusted baseline'],
    'cdp-enabled': ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ CDP is enabled here — it leaks IOS version / mgmt IP / native VLAN in clear'],
    spoof:         ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue CDP speaker — spoofed neighbour (possible fake IP phone / VoIP-VLAN-hop)'],
    flood:         ['bg-red-950/60 border-red-800 text-red-300', '🛑 CDP flood — neighbour-table / CPU exhaustion DoS (Yersinia)'],
    cdpwn:         ['bg-red-950/60 border-red-800 text-red-300', '🛑 CDPwn exploit shape — malformed CDP TLV matching an Armis CDPwn CVE (CVE-2020-3110/3111/3118/3119/3120)'],
    'trailing-data': ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ Trailing data after the declared length — smuggled bytes / Etherleak (CVE-2003-0001)'],
    unknown:       ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _cdpFillIfaces() {
    const sel = document.getElementById('cdp-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runCdpWatch() {
    const out = document.getElementById('cdp-results');
    if (!out) return;
    const btn = (typeof event !== 'undefined' && event && event.target) ? event.target : null;
    const ifaceSel = document.getElementById('cdp-iface');