For o11y on my homelab I run ntopng for traffic & NetAlertX for devices but I wanted a single lighweight tool that showed me every device in my VLANs and what services it talks to, grouped by device, even when its IP changes, without giving everything a static IP.
I built this over the last few months and it solves a lot of observablity without adding new tools using what I already have.
Jocasta sweeps the subnets you give and tracks each device by MAC. Connect a MikroTik or OpenWrt router and its enriches the data with details only routers have.
Connect it to NetFlow and you get hourly traffic for each device.
Connect it to Technitium, AdGuard Home or Pi-hole and you get hourly data on DNS lookups. When you have both, it uses each device's DNS lookups to put names on the IPs in its traffic.
Instead of checking each device in the UI like old times, you can use the built-in MCP. Add Jocasta to Hermes, Claude or Codex and ask whichever model you use. Local LLMs work too, as long as they support tool calling.
Supported routers: MikroTik and OpenWrt
Supported DNS servers: Technitium, AdGuard Home and Pi-hole
It's a single Go binary or Docker image with SQLite. It's still pre-1.0.
anandpushkar088•1h ago
I built this over the last few months and it solves a lot of observablity without adding new tools using what I already have.
Jocasta sweeps the subnets you give and tracks each device by MAC. Connect a MikroTik or OpenWrt router and its enriches the data with details only routers have.
Connect it to NetFlow and you get hourly traffic for each device. Connect it to Technitium, AdGuard Home or Pi-hole and you get hourly data on DNS lookups. When you have both, it uses each device's DNS lookups to put names on the IPs in its traffic.
Instead of checking each device in the UI like old times, you can use the built-in MCP. Add Jocasta to Hermes, Claude or Codex and ask whichever model you use. Local LLMs work too, as long as they support tool calling.
Supported routers: MikroTik and OpenWrt Supported DNS servers: Technitium, AdGuard Home and Pi-hole
It's a single Go binary or Docker image with SQLite. It's still pre-1.0.