eping 3.86__tar.gz → 4.0__tar.gz

{eping-3.86 → eping-4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: eping
-Version: 3.86
+Version: 4.0
 Summary: Continuous ICMP reachability monitor built on fping, with a CSV logfile analyser (epinga)
 Author-email: Ewald Jeitler <ewald@jeitler.cc>
 License: GPL-3.0-or-later
@@ -17,7 +17,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Dynamic: license-file
 
-# eping.py 3.86
+# eping.py 4.00
 
 Continuous ICMP reachability monitor built on `fping`. Scans a host list in a loop,
 reports each host UP/DOWN/NO-DNS, counts state changes. CLI (curses) or web GUI.
@@ -52,7 +52,7 @@ Portable Windows version (web GUI only, no installation): download and unpack
 [`eping-windows.zip`](https://github.com/ewaldj/eping/blob/main/Windows_Version/eping-windows.zip)
 ([folder](https://github.com/ewaldj/eping/tree/main/Windows_Version/)), then start `eping.exe`.
 
-- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI),
+- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI, Disable autostart / logging / file, CLI options, Check updates),
   `eping.py`, `epinga.py`, `fping.exe` + `cygwin1.dll` (fping for Windows) and an embedded Python.
 - The web GUI opens in the browser (default `http://127.0.0.1:8080`). The port is read from the hosts file
   (`opt: -port 9000`); a port already in use is reported and can be changed in the launcher window.
@@ -197,6 +197,7 @@ DOWN. Columns: hostname/IP, state, RTT (ms), last-change timestamp, change count
 | `C` | clear all hosts and state |
 | `P` | address mode picker — 4 modes (see *Address modes*) |
 | `X` | ADV OPTIONS — live option editing (see *ADV OPTIONS*) |
+| `J` | JUMPHOST — run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
 | `N` | ANALYSE NOW — run epinga.py against the active logfile in the background (see *GENERATE REPORT*) |
 | `G` | GET NAMES — reverse-DNS raw IPs, one-shot, background |
 | `R` | redraw screen |
@@ -244,7 +245,7 @@ Single self-contained page, no external resources.
   - Row 1: view select (9 views), sort order select, SET REFERENCE, ZERO CHANGES,
     CLEAR ALL, address mode select, GET NAMES, ADV OPTIONS, RESET LOG, FILE OPERATIONS
     select, EXIT, font size.
-  - Row 2: match filter (SET/CLEAR), ADV FILTER, host field (ADD/DELETE), comment
+  - Row 2: match filter (SET/CLEAR), ADV FILTER, host field (ADD/DELETE), ADD/DEL LIST, comment
     field (COMMENT), GENERATE REPORT select.
   - View select, sort order select, address mode select and ADV OPTIONS all match the
     CLI's `U`/`O`/`P`/`X` pickers exactly. FILE OPERATIONS (incl. ADD HOSTS FILE FROM CLIENT/
@@ -273,6 +274,13 @@ Single self-contained page, no external resources.
   `+`/`−` font size (works while typing). No keyboard shortcut for `X`/ADV OPTIONS or
   GENERATE REPORT - click required.
 - Host field feeds both ADD/DELETE; ENTER triggers the button used last, ESC clears.
+- **ADD/DEL LIST** (button after DELETE; also Ctrl/Cmd+V on the page while no field has focus): paste a
+  host list - one per line or separated by comma/semicolon/blank, `#` comment, CIDR expanded. A live
+  preview shows found / new / already in list / ignored words / masks out of range; ADD and DELETE are
+  enabled only if they would change something (DELETE over 20 hosts asks to confirm; exact name match
+  only). A pasted inventory `.csv` (with the `IP Address`/`Hostname` header) also updates hosts already in
+  the list: IP entries (e.g. from a `.txt`) are renamed to the CSV hostname, history kept, and the CSV
+  values are attached. Works with `-wvc` too.
 - Files can also be dropped anywhere on the page (max 16MB, see *Host file format*).
 - Commands acknowledge immediately; a click aborts the running round.
 - **Host popup**: hovering a host row (after ~350 ms) shows everything known about it:
@@ -369,6 +377,8 @@ Same bounds as the matching CLI flags (`-lms`/`-lmf` for the last two - see *Out
 | POST | `/api/command` | `{"cmd":"...","value":"..."}` | control (see cmd list below) |
 | POST | `/api/advvalues` | `{"filter":{...}}` | ADV FILTER: values still selectable for a draft selection (same format as `adv_filter`) |
 | POST | `/api/upload` | host list, text | add hosts |
+| POST | `/api/log_sources` | `{"names":[...]}` | SOURCE values of the named logfiles (empty = active logfile), for SELECT JUMPHOST |
+| POST | `/api/jumphost` | `{"action":"info|test|trust|connect|local","host":...,"port":...,"user":...,"secret":...,"hostkey":"ask|accept-new|off","key":...}` | JUMPHOST window (see *SSH source (JUMPHOST)*) |
 
 `cmd` values: `up_only`, `set_filter`, `addr_mode`, `get_names`, `match_filter`,
 `adv_filter`, `sort`, `add`, `del`, `set_ref`, `zero`, `add_comment`, `reset_log`, `clear`,
@@ -379,7 +389,7 @@ value: `key=value`. `reset_log` value: logging off - optional custom file name (
 auto-generated); logging on - `y` (clear) or `new`/`new=<name>` (new file, optional
 custom name). `run_report`: `value` = empty (active logfile) or one `.csv` filename; or
 JSON body field `values`: `[...]` to merge and analyse multiple `.csv` files as one
-(max 25). `save_hosts_file` value: optional target file name (blank
+(max 25); optional body field `sources`: `[...]` restricts the analysis to these SOURCE values. `save_hosts_file` value: optional target file name (blank
 = active `-f` hostfile, or `eping-hosts.txt` if none).
 
 `-wv` answers `403` to `POST /api/command`/`/api/upload`; `-wvc`/`-web` allow both. No
@@ -434,6 +444,9 @@ separated) · `-r` IP range (comma separated, shortened end)
 | `-ipo` | — | off | start with IP ONLY |
 | `-gn` | — | off | GET NAMES once at startup |
 | `-ncs` | — | off | skip `--check-source` |
+| `-ssh` | `[USER@]HOST[:PORT]` | off | run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
+| `-sshkey` | file | agent | private key file for `-ssh` |
+| `-sshhk` | accept-new/ask/off | accept-new | host key check for `-ssh` |
 | `-ncf` | — | off | CSV: do not ping the CSV IP of a name without DNS record |
 | `-up` | — | 0 | learning phase: after N rounds keep only hosts seen UP |
 | `-setref` | — | off | with `-up`: hosts seen UP become new reference list |
@@ -461,11 +474,11 @@ Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
 Unless `-dl`, every round appends to `eping-log_YYYY-MM-DD_HH:MM:SS.csv` (or `-o FILE`):
 
 ```
-TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT
+TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT,SOURCE
 ```
 
 `INV_HOSTNAME` … `INV_COMMENT`: the inventory values of a host added from an inventory CSV (see
-*Inventory CSV import*), empty for all other hosts. Logs without these columns (older
+*Inventory CSV import*), empty for all other hosts. `SOURCE`: `local` or the ssh jump host that produced the row. Logs without these columns (older
 versions) stay readable by epinga.py.
 
 `TBD`: suppressed DOWN observations (`-cf`). `IP`: address actually pinged (empty for
@@ -491,6 +504,29 @@ these rows automatically.
 - Logging off: same dialog, no clear option - `START LOGGING` starts a fresh file
   right away, same optional custom name.
 
+## SSH source (JUMPHOST)
+
+Run fping on a jump host instead of locally (system `ssh` only). Any Linux host with a working `fping`
+(e.g. a caretaker) will do; it resolves the names itself. Start: `-ssh [USER@]HOST[:PORT]` (+ `-sshkey FILE`, `-sshhk MODE`);
+the password or key passphrase is asked on the terminal at startup. At runtime: `J` in the CLI,
+JUMPHOST button in the web GUI (after ADV OPTIONS).
+
+![JUMPHOST window](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/jumphost.png)
+
+- Window: HOST, PORT, USER, PASSWORD (key passphrase), HOST KEY, KEY FILE. TEST checks ssh, login and
+  fping on the jump host, CONNECT switches the scan source, USE LOCAL switches back. A missing local
+  `ssh` is shown in the window.
+- HOST KEY: `accept-new` (default) - hosts seen for the first time are trusted automatically, a changed
+  key is still refused; `ask` - an unknown key is shown with its fingerprint and must be accepted with
+  TRUST KEY; `off` - no check at all (insecure).
+- The switch is applied at the start of the next round; hosts, states and counters are kept.
+- Connection loss: results of the round are discarded, hosts keep their state, a banner is shown and
+  eping reconnects. Logged as `#COMMENT#` rows (`JUMPHOST ... OFFLINE: <reason>`, `JUMPHOST ... ONLINE
+  again`, `SOURCE SWITCH <old> -> <new>`), shown in the report's comment timeline.
+- Log column `SOURCE`: `local` or the jump host of each row.
+- Limits: GET NAMES and the CSV-IP fallback are not available over ssh; at most 4 ssh processes
+  (2 on Windows); the web password transfer is plain HTTP - use `-bind 127.0.0.1` or a trusted network.
+
 ## Web GUI header
 
 Header: `eping.py vX.XX · © Ewald Jeitler · supervised by Nelly · tools.jeitler.cc ·
@@ -532,11 +568,17 @@ logging is off or the logfile is empty/missing.
 ## GENERATE REPORT (web gui) / ANALYSE NOW (CLI `N`)
 
 Runs epinga.py against one or more logfiles in the background while eping.py keeps
-running - not just at exit. Web: GENERATE REPORT dropdown, two entries - `ACTIVE
+running - not just at exit. Web: GENERATE REPORT dropdown, three entries - `ACTIVE
 LOGFILE` analyses the active CSV log (needs logging on, non-empty logfile, else the tab
 closes and a footer error is shown), `CHOOSE LOGFILE` picks one or more `.csv` files in
 the working dir - table (name/size/date), "select all" checkbox, nothing preselected;
-up to 25 files per report, checking a 26th is refused.
+up to 25 files per report, checking a 26th is refused. `SELECT JUMPHOST` lists the
+sources (`local` and jump hosts, log column `SOURCE`) found in the active logfile - all checked,
+ENTER = GENERATE; only the periods of the checked sources are calculated (see *Source filter* in the
+epinga.py section). Shown only if the log holds more than one source.
+
+![SELECT JUMPHOST](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/select-jumphost.png)
+
 More than one selected file is merged chronologically (by mtime) into one temporary
 CSV, analysed as a single logfile, then the temp file is removed. Result opens in a new
 tab; if a selected file was invalid or has meanwhile been removed (e.g. by log rotation
@@ -647,7 +689,7 @@ phases: eping's own work (~0.12s on 4109 hosts).
 - `-p` > 1 and `-i 0` reduce accuracy (false DOWN) — defaults avoid both.
 - `-dr 0` produces flapping hosts in practice — keep the default of 1.
 
-# epinga.py 2.35
+# epinga.py 2.37
 
 Analyses an eping.py CSV log: terminal summary + self-contained HTML report (no
 server, no external assets) with per-host detail, state-change timelines, and
@@ -672,6 +714,7 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-s`, `--start YYYY-MM-DD HH:MM:SS` | rows from this timestamp on |
 | `-e`, `--end YYYY-MM-DD HH:MM:SS` | rows up to this timestamp |
 | `-S`, `--sort {name,flapping,uptime,rtt}` | summary sort order (default `name`) |
+| `--source SOURCE` | only rows of this source - `local` or the jump host label from the log column `SOURCE` (repeatable; see *Source filter*) |
 | `--no-detail` | summary only |
 | `--no-changes` | omit state-change list |
 | `--html FILE` | custom HTML filename |
@@ -679,6 +722,17 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-q`, `--quiet` | suppress progress bar |
 | `--no-version-check` | skip online update check |
 
+## Source filter
+
+Logs written while eping.py ran on a jump host carry a `SOURCE` column. With `--source` (or the
+selection shown on a terminal when the log holds several sources; numbers like `1,3`, ENTER = all)
+only the periods of the selected sources are calculated: uptime, up/down time, RTT, changes and the
+timeline. Periods of other sources are excluded and shown as a gap in the timeline; a state change that
+happened during such a gap is not counted. Without `--source` everything is combined (as before).
+Logs without a `SOURCE` column are treated as `local`.
+
+![epinga report, source local](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/report-source.png)
+
 ## Called from eping.py
 
 `GENERATE REPORT` (web gui) and `N`/ANALYSE NOW (CLI) both run epinga.py in a

{eping-3.86 → eping-4.0}/README.md

@@ -1,4 +1,4 @@
-# eping.py 3.86
+# eping.py 4.00
 
 Continuous ICMP reachability monitor built on `fping`. Scans a host list in a loop,
 reports each host UP/DOWN/NO-DNS, counts state changes. CLI (curses) or web GUI.
@@ -33,7 +33,7 @@ Portable Windows version (web GUI only, no installation): download and unpack
 [`eping-windows.zip`](https://github.com/ewaldj/eping/blob/main/Windows_Version/eping-windows.zip)
 ([folder](https://github.com/ewaldj/eping/tree/main/Windows_Version/)), then start `eping.exe`.
 
-- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI),
+- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI, Disable autostart / logging / file, CLI options, Check updates),
   `eping.py`, `epinga.py`, `fping.exe` + `cygwin1.dll` (fping for Windows) and an embedded Python.
 - The web GUI opens in the browser (default `http://127.0.0.1:8080`). The port is read from the hosts file
   (`opt: -port 9000`); a port already in use is reported and can be changed in the launcher window.
@@ -178,6 +178,7 @@ DOWN. Columns: hostname/IP, state, RTT (ms), last-change timestamp, change count
 | `C` | clear all hosts and state |
 | `P` | address mode picker — 4 modes (see *Address modes*) |
 | `X` | ADV OPTIONS — live option editing (see *ADV OPTIONS*) |
+| `J` | JUMPHOST — run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
 | `N` | ANALYSE NOW — run epinga.py against the active logfile in the background (see *GENERATE REPORT*) |
 | `G` | GET NAMES — reverse-DNS raw IPs, one-shot, background |
 | `R` | redraw screen |
@@ -225,7 +226,7 @@ Single self-contained page, no external resources.
   - Row 1: view select (9 views), sort order select, SET REFERENCE, ZERO CHANGES,
     CLEAR ALL, address mode select, GET NAMES, ADV OPTIONS, RESET LOG, FILE OPERATIONS
     select, EXIT, font size.
-  - Row 2: match filter (SET/CLEAR), ADV FILTER, host field (ADD/DELETE), comment
+  - Row 2: match filter (SET/CLEAR), ADV FILTER, host field (ADD/DELETE), ADD/DEL LIST, comment
     field (COMMENT), GENERATE REPORT select.
   - View select, sort order select, address mode select and ADV OPTIONS all match the
     CLI's `U`/`O`/`P`/`X` pickers exactly. FILE OPERATIONS (incl. ADD HOSTS FILE FROM CLIENT/
@@ -254,6 +255,13 @@ Single self-contained page, no external resources.
   `+`/`−` font size (works while typing). No keyboard shortcut for `X`/ADV OPTIONS or
   GENERATE REPORT - click required.
 - Host field feeds both ADD/DELETE; ENTER triggers the button used last, ESC clears.
+- **ADD/DEL LIST** (button after DELETE; also Ctrl/Cmd+V on the page while no field has focus): paste a
+  host list - one per line or separated by comma/semicolon/blank, `#` comment, CIDR expanded. A live
+  preview shows found / new / already in list / ignored words / masks out of range; ADD and DELETE are
+  enabled only if they would change something (DELETE over 20 hosts asks to confirm; exact name match
+  only). A pasted inventory `.csv` (with the `IP Address`/`Hostname` header) also updates hosts already in
+  the list: IP entries (e.g. from a `.txt`) are renamed to the CSV hostname, history kept, and the CSV
+  values are attached. Works with `-wvc` too.
 - Files can also be dropped anywhere on the page (max 16MB, see *Host file format*).
 - Commands acknowledge immediately; a click aborts the running round.
 - **Host popup**: hovering a host row (after ~350 ms) shows everything known about it:
@@ -350,6 +358,8 @@ Same bounds as the matching CLI flags (`-lms`/`-lmf` for the last two - see *Out
 | POST | `/api/command` | `{"cmd":"...","value":"..."}` | control (see cmd list below) |
 | POST | `/api/advvalues` | `{"filter":{...}}` | ADV FILTER: values still selectable for a draft selection (same format as `adv_filter`) |
 | POST | `/api/upload` | host list, text | add hosts |
+| POST | `/api/log_sources` | `{"names":[...]}` | SOURCE values of the named logfiles (empty = active logfile), for SELECT JUMPHOST |
+| POST | `/api/jumphost` | `{"action":"info|test|trust|connect|local","host":...,"port":...,"user":...,"secret":...,"hostkey":"ask|accept-new|off","key":...}` | JUMPHOST window (see *SSH source (JUMPHOST)*) |
 
 `cmd` values: `up_only`, `set_filter`, `addr_mode`, `get_names`, `match_filter`,
 `adv_filter`, `sort`, `add`, `del`, `set_ref`, `zero`, `add_comment`, `reset_log`, `clear`,
@@ -360,7 +370,7 @@ value: `key=value`. `reset_log` value: logging off - optional custom file name (
 auto-generated); logging on - `y` (clear) or `new`/`new=<name>` (new file, optional
 custom name). `run_report`: `value` = empty (active logfile) or one `.csv` filename; or
 JSON body field `values`: `[...]` to merge and analyse multiple `.csv` files as one
-(max 25). `save_hosts_file` value: optional target file name (blank
+(max 25); optional body field `sources`: `[...]` restricts the analysis to these SOURCE values. `save_hosts_file` value: optional target file name (blank
 = active `-f` hostfile, or `eping-hosts.txt` if none).
 
 `-wv` answers `403` to `POST /api/command`/`/api/upload`; `-wvc`/`-web` allow both. No
@@ -415,6 +425,9 @@ separated) · `-r` IP range (comma separated, shortened end)
 | `-ipo` | — | off | start with IP ONLY |
 | `-gn` | — | off | GET NAMES once at startup |
 | `-ncs` | — | off | skip `--check-source` |
+| `-ssh` | `[USER@]HOST[:PORT]` | off | run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
+| `-sshkey` | file | agent | private key file for `-ssh` |
+| `-sshhk` | accept-new/ask/off | accept-new | host key check for `-ssh` |
 | `-ncf` | — | off | CSV: do not ping the CSV IP of a name without DNS record |
 | `-up` | — | 0 | learning phase: after N rounds keep only hosts seen UP |
 | `-setref` | — | off | with `-up`: hosts seen UP become new reference list |
@@ -442,11 +455,11 @@ Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
 Unless `-dl`, every round appends to `eping-log_YYYY-MM-DD_HH:MM:SS.csv` (or `-o FILE`):
 
 ```
-TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT
+TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT,SOURCE
 ```
 
 `INV_HOSTNAME` … `INV_COMMENT`: the inventory values of a host added from an inventory CSV (see
-*Inventory CSV import*), empty for all other hosts. Logs without these columns (older
+*Inventory CSV import*), empty for all other hosts. `SOURCE`: `local` or the ssh jump host that produced the row. Logs without these columns (older
 versions) stay readable by epinga.py.
 
 `TBD`: suppressed DOWN observations (`-cf`). `IP`: address actually pinged (empty for
@@ -472,6 +485,29 @@ these rows automatically.
 - Logging off: same dialog, no clear option - `START LOGGING` starts a fresh file
   right away, same optional custom name.
 
+## SSH source (JUMPHOST)
+
+Run fping on a jump host instead of locally (system `ssh` only). Any Linux host with a working `fping`
+(e.g. a caretaker) will do; it resolves the names itself. Start: `-ssh [USER@]HOST[:PORT]` (+ `-sshkey FILE`, `-sshhk MODE`);
+the password or key passphrase is asked on the terminal at startup. At runtime: `J` in the CLI,
+JUMPHOST button in the web GUI (after ADV OPTIONS).
+
+![JUMPHOST window](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/jumphost.png)
+
+- Window: HOST, PORT, USER, PASSWORD (key passphrase), HOST KEY, KEY FILE. TEST checks ssh, login and
+  fping on the jump host, CONNECT switches the scan source, USE LOCAL switches back. A missing local
+  `ssh` is shown in the window.
+- HOST KEY: `accept-new` (default) - hosts seen for the first time are trusted automatically, a changed
+  key is still refused; `ask` - an unknown key is shown with its fingerprint and must be accepted with
+  TRUST KEY; `off` - no check at all (insecure).
+- The switch is applied at the start of the next round; hosts, states and counters are kept.
+- Connection loss: results of the round are discarded, hosts keep their state, a banner is shown and
+  eping reconnects. Logged as `#COMMENT#` rows (`JUMPHOST ... OFFLINE: <reason>`, `JUMPHOST ... ONLINE
+  again`, `SOURCE SWITCH <old> -> <new>`), shown in the report's comment timeline.
+- Log column `SOURCE`: `local` or the jump host of each row.
+- Limits: GET NAMES and the CSV-IP fallback are not available over ssh; at most 4 ssh processes
+  (2 on Windows); the web password transfer is plain HTTP - use `-bind 127.0.0.1` or a trusted network.
+
 ## Web GUI header
 
 Header: `eping.py vX.XX · © Ewald Jeitler · supervised by Nelly · tools.jeitler.cc ·
@@ -513,11 +549,17 @@ logging is off or the logfile is empty/missing.
 ## GENERATE REPORT (web gui) / ANALYSE NOW (CLI `N`)
 
 Runs epinga.py against one or more logfiles in the background while eping.py keeps
-running - not just at exit. Web: GENERATE REPORT dropdown, two entries - `ACTIVE
+running - not just at exit. Web: GENERATE REPORT dropdown, three entries - `ACTIVE
 LOGFILE` analyses the active CSV log (needs logging on, non-empty logfile, else the tab
 closes and a footer error is shown), `CHOOSE LOGFILE` picks one or more `.csv` files in
 the working dir - table (name/size/date), "select all" checkbox, nothing preselected;
-up to 25 files per report, checking a 26th is refused.
+up to 25 files per report, checking a 26th is refused. `SELECT JUMPHOST` lists the
+sources (`local` and jump hosts, log column `SOURCE`) found in the active logfile - all checked,
+ENTER = GENERATE; only the periods of the checked sources are calculated (see *Source filter* in the
+epinga.py section). Shown only if the log holds more than one source.
+
+![SELECT JUMPHOST](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/select-jumphost.png)
+
 More than one selected file is merged chronologically (by mtime) into one temporary
 CSV, analysed as a single logfile, then the temp file is removed. Result opens in a new
 tab; if a selected file was invalid or has meanwhile been removed (e.g. by log rotation
@@ -628,7 +670,7 @@ phases: eping's own work (~0.12s on 4109 hosts).
 - `-p` > 1 and `-i 0` reduce accuracy (false DOWN) — defaults avoid both.
 - `-dr 0` produces flapping hosts in practice — keep the default of 1.
 
-# epinga.py 2.35
+# epinga.py 2.37
 
 Analyses an eping.py CSV log: terminal summary + self-contained HTML report (no
 server, no external assets) with per-host detail, state-change timelines, and
@@ -653,6 +695,7 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-s`, `--start YYYY-MM-DD HH:MM:SS` | rows from this timestamp on |
 | `-e`, `--end YYYY-MM-DD HH:MM:SS` | rows up to this timestamp |
 | `-S`, `--sort {name,flapping,uptime,rtt}` | summary sort order (default `name`) |
+| `--source SOURCE` | only rows of this source - `local` or the jump host label from the log column `SOURCE` (repeatable; see *Source filter*) |
 | `--no-detail` | summary only |
 | `--no-changes` | omit state-change list |
 | `--html FILE` | custom HTML filename |
@@ -660,6 +703,17 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-q`, `--quiet` | suppress progress bar |
 | `--no-version-check` | skip online update check |
 
+## Source filter
+
+Logs written while eping.py ran on a jump host carry a `SOURCE` column. With `--source` (or the
+selection shown on a terminal when the log holds several sources; numbers like `1,3`, ENTER = all)
+only the periods of the selected sources are calculated: uptime, up/down time, RTT, changes and the
+timeline. Periods of other sources are excluded and shown as a gap in the timeline; a state change that
+happened during such a gap is not counted. Without `--source` everything is combined (as before).
+Logs without a `SOURCE` column are treated as `local`.
+
+![epinga report, source local](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/report-source.png)
+
 ## Called from eping.py
 
 `GENERATE REPORT` (web gui) and `N`/ANALYSE NOW (CLI) both run epinga.py in a

{eping-3.86 → eping-4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "eping"
-version = "3.86"
+version = "4.00"
 description = "Continuous ICMP reachability monitor built on fping, with a CSV logfile analyser (epinga)"
 readme = "README.md"
 license = { text = "GPL-3.0-or-later" }