Tools
Overview
Eon Insights is a monorepo of Go binaries, one per cmd/<name> directory.
Each has a Makefile target (make <name>) that builds it for
linux/arm64, linux/amd64, and darwin/arm64 into
bin/<os>/<arch>/<name>. Run go run cmd/<name>/<name>.go ... during
development, or the built binary in production — except for capture and
scascand, which are multi-file package main directories built via
go run ./cmd/<name> ... (no single <name>.go entry point); see their
respective pages.
Most daemons follow the same conventions: a -c <file> flag pointing at a
YAML config file, a -debug flag for verbose zerolog output, and a
ClickHouse connection block (host/port/database/username/password)
in that config. Daemons that consume a task queue (tlsscand, nmapscand,
notifyd, pcapworker, scascand) connect to Redis via
asynq and shut down gracefully on
SIGINT/SIGTERM.
| Tool | Type | Purpose |
|---|---|---|
| insights | HTTP API | Main REST API the dashboard talks to |
| capture | Daemon/CLI | Passive capture of TLS, QUIC, SSH, IKE/IPsec, OpenVPN |
| hostsync | Daemon | Discovers hosts/clients from captured traffic, enqueues scans |
| tlsscand | Worker daemon | Processes queued TLS scan tasks |
| nmapscand | Worker daemon | Processes queued nmap port/service scan tasks |
| tlsscan | CLI | One-shot TLS/SSL scan of a single endpoint |
| tlslab | Test server | TLS protocol simulator for testing capture/scan tools |
| datagen | CLI | Generates synthetic hosts/clients/handshakes for development |
| ja3import | CLI | Imports JA3 fingerprint databases (Trisul, SSLBL, browsers) |
| fingerprintd | HTTP API | Centralized TLS fingerprint database service |
| pcapworker | Worker daemon | Extracts TLS handshakes from uploaded PCAP files |
| notifyd | Worker + scheduler | Certificate-expiry and malware-fingerprint alerts (email/Slack/webhook) |
| sca | CLI | One-shot Software Composition Analysis scan of a repository |
| scascand | Worker daemon | Processes queued SCA repository scans |
| devctl | Dev tool (TUI) | Starts/stops/monitors all of the above during local development |