Function verifyServiceRestart

web/scripts/ragnar_modern.js:7817–7880

()

        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runArpCheck() {
    const out = document.getElementById('arp-results');
    if (!out) return;
    const btn = (typeof event !== 'undefined' && event && event.target) ? event.target : null;
    const ifaceSel = document.getElementById('arp-check-iface');
    const iface = ifaceSel && ifaceSel.value ? ifaceSel.value : '';
    _ndBusy(btn, true, 'Checking…');
    out.classList.remove('hidden');
    out.innerHTML = '<p class="text-sm text-gray-400">Reading neighbour table…</p>';
    try {
        _arpFillIfaces();
        const d = await fetchAPI('/api/net/arp-check' + (iface ? '?interface=' + encodeURIComponent(iface) : ''));
        if (!d || d.success === false) {
            out.innerHTML = '<p class="text-sm text-red-400">Error: ' + escapeHtml((d && d.error) || 'failed') + '</p>';
            return;
        }
        const [cls, label] = _ARP_VERDICT_STYLE[d.verdict] || _ARP_VERDICT_STYLE.unknown;
        const gw = d.gateway || {};
        const mismatch = gw.baseline && gw.mac && gw.baseline !== gw.mac;
        let html = `<div class="mb-2 px-3 py-2 rounded border ${cls} text-sm">${label}</div>`;
        html += '<table class="min-w-full text-sm text-gray-300 whitespace-nowrap"><tbody>' +
            `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">Interface</td><td class="px-3 py-1.5 font-mono">${escapeHtml(d.interface || 'default route')}</td></tr>` +
            `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">Gateway</td><td class="px-3 py-1.5 font-mono">${escapeHtml(gw.ip || '—')}</td></tr>` +
            `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">Current MAC</td><td class="px-3 py-1.5 font-mono ${mismatch ? 'text-red-400' : ''}">${escapeHtml(gw.mac || '—')}</td></tr>` +
            `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">Trusted MAC</td><td class="px-3 py-1.5 font-mono">${escapeHtml(gw.baseline || '—')}${gw.learned ? ' <span class="text-xs text-gray-500">(learned now)</span>' : ''}</td></tr>` +
            (gw.fhrp_shape ? `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">FHRP</td><td class="px-3 py-1.5">${escapeHtml(gw.fhrp_shape)} virtual MAC ${gw.fhrp_confirmed ? '<span class="text-green-400">✓ confirmed (expected HSRP/VRRP gateway)</span>' : '<span class="text-amber-300">shape match — confirm via FHRP Watch</span>'}</td></tr>` : '') +
            `<tr class="border-t border-slate-800"><td class="px-3 py-1.5 text-gray-500">Neighbours</td><td class="px-3 py-1.5">${d.neighbor_count != null ? d.neighbor_count : '—'}</td></tr>` +
            '</tbody></table>';
        if (d.impersonators && d.impersonators.length) {
            html += '<p class="text-xs text-gray-400 mt-2">One MAC answering for many IPs:</p><ul class="text-xs text-gray-400 list-disc pl-5">' +
                d.impersonators.map(i => {
                    const ips = i.ips || [];
                    return '<li class="font-mono">' + escapeHtml(i.mac) + ' → ' + escapeHtml(ips.slice(0, 6).join(', ')) + (ips.length > 6 ? '…' : '') + '</li>';
                }).join('') + '</ul>';
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}

// ---- DHCP Guardian card (rogue DHCP + starvation, detection-only) ----------
const _DHCP_VERDICT_STYLE = {
    clean:      ['bg-green-950/40 border-green-900 text-green-400', '✓ No rogue DHCP server or starvation detected'],
    suspicious: ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ DHCP anomaly — review below'],
    rogue:      ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue / fake DHCP server detected'],
    starvation: ['bg-red-950/60 border-red-800 text-red-300', '🛑 DHCP starvation (pool-exhaustion) detected'],
    unknown:    ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _dhcpFillIfaces() {