eping 3.91__tar.gz → 4.1__tar.gz

{eping-3.91 → eping-4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: eping
-Version: 3.91
+Version: 4.1
 Summary: Continuous ICMP reachability monitor built on fping, with a CSV logfile analyser (epinga)
 Author-email: Ewald Jeitler <ewald@jeitler.cc>
 License: GPL-3.0-or-later
@@ -17,7 +17,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Dynamic: license-file
 
-# eping.py 3.91
+# eping.py 4.01
 
 Continuous ICMP reachability monitor built on `fping`. Scans a host list in a loop,
 reports each host UP/DOWN/NO-DNS, counts state changes. CLI (curses) or web GUI.
@@ -52,7 +52,7 @@ Portable Windows version (web GUI only, no installation): download and unpack
 [`eping-windows.zip`](https://github.com/ewaldj/eping/blob/main/Windows_Version/eping-windows.zip)
 ([folder](https://github.com/ewaldj/eping/tree/main/Windows_Version/)), then start `eping.exe`.
 
-- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI),
+- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI, Disable autostart / logging / file, CLI options, Check updates),
   `eping.py`, `epinga.py`, `fping.exe` + `cygwin1.dll` (fping for Windows) and an embedded Python.
 - The web GUI opens in the browser (default `http://127.0.0.1:8080`). The port is read from the hosts file
   (`opt: -port 9000`); a port already in use is reported and can be changed in the launcher window.
@@ -192,11 +192,12 @@ DOWN. Columns: hostname/IP, state, RTT (ms), last-change timestamp, change count
 | `F` | add hosts from a file |
 | `O` | sort order picker — 5 orders (see *Views and sort orders*) |
 | `T` | add comment — timestamped CSV row (logging on only) |
-| `S` | set reference — shown list becomes new base list |
+| `S` | set reference — shown list becomes new base list (hosts not shown are removed and no longer pinged) |
 | `Z` | zero changes — reset CH-TIME/CH NO, states kept |
 | `C` | clear all hosts and state |
 | `P` | address mode picker — 4 modes (see *Address modes*) |
 | `X` | ADV OPTIONS — live option editing (see *ADV OPTIONS*) |
+| `J` | JUMPHOST — run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
 | `N` | ANALYSE NOW — run epinga.py against the active logfile in the background (see *GENERATE REPORT*) |
 | `G` | GET NAMES — reverse-DNS raw IPs, one-shot, background |
 | `R` | redraw screen |
@@ -299,9 +300,11 @@ unless lowered). `CH NO` counts changes; `Z` resets it.
 
 CLI `U` and web GUI's view select/`U` picker (see *CLI mode*) reach the same 9 views.
 The web GUI's own `U` keyboard shortcut only cycles ALL HOSTS → CURRENTLY-UP →
-UP+FLAPPING → ALL HOSTS (see *Web GUI* keyboard shortcuts). A view also limits what's
-probed — filtered hosts aren't probed until back to ALL HOSTS. Host list snapshotted at
-switch time. A view with no matches is rejected, previous view stays active.
+UP+FLAPPING → ALL HOSTS (see *Web GUI* keyboard shortcuts). A view is a pure display
+filter, evaluated live on every refresh: all hosts keep being pinged, a host that goes
+DOWN leaves `CURRENTLY-UP`, a host that comes UP appears. Only SET REFERENCE removes the
+hosts that are not shown from the host list (they are no longer pinged) and resets the
+view to ALL HOSTS. A view with no matches is rejected, previous view stays active.
 
 `ALWAYS-UP`/`ALWAYS-DOWN`: never changed state this run (`CH NO` = 0). `NO-DNS` counts
 as DOWN for `CURRENTLY-DOWN`/`ALWAYS-DOWN`/`DOWN+FLAPPING`.
@@ -376,6 +379,8 @@ Same bounds as the matching CLI flags (`-lms`/`-lmf` for the last two - see *Out
 | POST | `/api/command` | `{"cmd":"...","value":"..."}` | control (see cmd list below) |
 | POST | `/api/advvalues` | `{"filter":{...}}` | ADV FILTER: values still selectable for a draft selection (same format as `adv_filter`) |
 | POST | `/api/upload` | host list, text | add hosts |
+| POST | `/api/log_sources` | `{"names":[...]}` | SOURCE values of the named logfiles (empty = active logfile), for SELECT JUMPHOST |
+| POST | `/api/jumphost` | `{"action":"info|test|trust|connect|local","host":...,"port":...,"user":...,"secret":...,"hostkey":"ask|accept-new|off","key":...}` | JUMPHOST window (see *SSH source (JUMPHOST)*) |
 
 `cmd` values: `up_only`, `set_filter`, `addr_mode`, `get_names`, `match_filter`,
 `adv_filter`, `sort`, `add`, `del`, `set_ref`, `zero`, `add_comment`, `reset_log`, `clear`,
@@ -386,7 +391,7 @@ value: `key=value`. `reset_log` value: logging off - optional custom file name (
 auto-generated); logging on - `y` (clear) or `new`/`new=<name>` (new file, optional
 custom name). `run_report`: `value` = empty (active logfile) or one `.csv` filename; or
 JSON body field `values`: `[...]` to merge and analyse multiple `.csv` files as one
-(max 25). `save_hosts_file` value: optional target file name (blank
+(max 25); optional body field `sources`: `[...]` restricts the analysis to these SOURCE values. `save_hosts_file` value: optional target file name (blank
 = active `-f` hostfile, or `eping-hosts.txt` if none).
 
 `-wv` answers `403` to `POST /api/command`/`/api/upload`; `-wvc`/`-web` allow both. No
@@ -441,8 +446,11 @@ separated) · `-r` IP range (comma separated, shortened end)
 | `-ipo` | — | off | start with IP ONLY |
 | `-gn` | — | off | GET NAMES once at startup |
 | `-ncs` | — | off | skip `--check-source` |
+| `-ssh` | `[USER@]HOST[:PORT]` | off | run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
+| `-sshkey` | file | agent | private key file for `-ssh` |
+| `-sshhk` | accept-new/ask/off | accept-new | host key check for `-ssh` |
 | `-ncf` | — | off | CSV: do not ping the CSV IP of a name without DNS record |
-| `-up` | — | 0 | learning phase: after N rounds keep only hosts seen UP |
+| `-up` | — | 0 | learning phase: after N rounds show only hosts seen UP (view CURRENTLY-UP; all hosts are still pinged until SET REFERENCE) |
 | `-setref` | — | off | with `-up`: hosts seen UP become new reference list |
 
 Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
@@ -468,11 +476,11 @@ Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
 Unless `-dl`, every round appends to `eping-log_YYYY-MM-DD_HH:MM:SS.csv` (or `-o FILE`):
 
 ```
-TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT
+TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT,SOURCE
 ```
 
 `INV_HOSTNAME` … `INV_COMMENT`: the inventory values of a host added from an inventory CSV (see
-*Inventory CSV import*), empty for all other hosts. Logs without these columns (older
+*Inventory CSV import*), empty for all other hosts. `SOURCE`: `local` or the ssh jump host that produced the row. Logs without these columns (older
 versions) stay readable by epinga.py.
 
 `TBD`: suppressed DOWN observations (`-cf`). `IP`: address actually pinged (empty for
@@ -498,6 +506,29 @@ these rows automatically.
 - Logging off: same dialog, no clear option - `START LOGGING` starts a fresh file
   right away, same optional custom name.
 
+## SSH source (JUMPHOST)
+
+Run fping on a jump host instead of locally (system `ssh` only). Any Linux host with a working `fping`
+(e.g. a caretaker) will do; it resolves the names itself. Start: `-ssh [USER@]HOST[:PORT]` (+ `-sshkey FILE`, `-sshhk MODE`);
+the password or key passphrase is asked on the terminal at startup. At runtime: `J` in the CLI,
+JUMPHOST button in the web GUI (after ADV OPTIONS).
+
+![JUMPHOST window](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/jumphost.png)
+
+- Window: HOST, PORT, USER, PASSWORD (key passphrase), HOST KEY, KEY FILE. TEST checks ssh, login and
+  fping on the jump host, CONNECT switches the scan source, USE LOCAL switches back. A missing local
+  `ssh` is shown in the window.
+- HOST KEY: `accept-new` (default) - hosts seen for the first time are trusted automatically, a changed
+  key is still refused; `ask` - an unknown key is shown with its fingerprint and must be accepted with
+  TRUST KEY; `off` - no check at all (insecure).
+- The switch is applied at the start of the next round; hosts, states and counters are kept.
+- Connection loss: results of the round are discarded, hosts keep their state, a banner is shown and
+  eping reconnects. Logged as `#COMMENT#` rows (`JUMPHOST ... OFFLINE: <reason>`, `JUMPHOST ... ONLINE
+  again`, `SOURCE SWITCH <old> -> <new>`), shown in the report's comment timeline.
+- Log column `SOURCE`: `local` or the jump host of each row.
+- Limits: GET NAMES and the CSV-IP fallback are not available over ssh; at most 4 ssh processes
+  (2 on Windows); the web password transfer is plain HTTP - use `-bind 127.0.0.1` or a trusted network.
+
 ## Web GUI header
 
 Header: `eping.py vX.XX · © Ewald Jeitler · supervised by Nelly · tools.jeitler.cc ·
@@ -539,11 +570,17 @@ logging is off or the logfile is empty/missing.
 ## GENERATE REPORT (web gui) / ANALYSE NOW (CLI `N`)
 
 Runs epinga.py against one or more logfiles in the background while eping.py keeps
-running - not just at exit. Web: GENERATE REPORT dropdown, two entries - `ACTIVE
+running - not just at exit. Web: GENERATE REPORT dropdown, three entries - `ACTIVE
 LOGFILE` analyses the active CSV log (needs logging on, non-empty logfile, else the tab
 closes and a footer error is shown), `CHOOSE LOGFILE` picks one or more `.csv` files in
 the working dir - table (name/size/date), "select all" checkbox, nothing preselected;
-up to 25 files per report, checking a 26th is refused.
+up to 25 files per report, checking a 26th is refused. `SELECT JUMPHOST` lists the
+sources (`local` and jump hosts, log column `SOURCE`) found in the active logfile - all checked,
+ENTER = GENERATE; only the periods of the checked sources are calculated (see *Source filter* in the
+epinga.py section). Shown only if the log holds more than one source.
+
+![SELECT JUMPHOST](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/select-jumphost.png)
+
 More than one selected file is merged chronologically (by mtime) into one temporary
 CSV, analysed as a single logfile, then the temp file is removed. Result opens in a new
 tab; if a selected file was invalid or has meanwhile been removed (e.g. by log rotation
@@ -654,7 +691,7 @@ phases: eping's own work (~0.12s on 4109 hosts).
 - `-p` > 1 and `-i 0` reduce accuracy (false DOWN) — defaults avoid both.
 - `-dr 0` produces flapping hosts in practice — keep the default of 1.
 
-# epinga.py 2.35
+# epinga.py 2.37
 
 Analyses an eping.py CSV log: terminal summary + self-contained HTML report (no
 server, no external assets) with per-host detail, state-change timelines, and
@@ -679,6 +716,7 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-s`, `--start YYYY-MM-DD HH:MM:SS` | rows from this timestamp on |
 | `-e`, `--end YYYY-MM-DD HH:MM:SS` | rows up to this timestamp |
 | `-S`, `--sort {name,flapping,uptime,rtt}` | summary sort order (default `name`) |
+| `--source SOURCE` | only rows of this source - `local` or the jump host label from the log column `SOURCE` (repeatable; see *Source filter*) |
 | `--no-detail` | summary only |
 | `--no-changes` | omit state-change list |
 | `--html FILE` | custom HTML filename |
@@ -686,6 +724,17 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-q`, `--quiet` | suppress progress bar |
 | `--no-version-check` | skip online update check |
 
+## Source filter
+
+Logs written while eping.py ran on a jump host carry a `SOURCE` column. With `--source` (or the
+selection shown on a terminal when the log holds several sources; numbers like `1,3`, ENTER = all)
+only the periods of the selected sources are calculated: uptime, up/down time, RTT, changes and the
+timeline. Periods of other sources are excluded and shown as a gap in the timeline; a state change that
+happened during such a gap is not counted. Without `--source` everything is combined (as before).
+Logs without a `SOURCE` column are treated as `local`.
+
+![epinga report, source local](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/report-source.png)
+
 ## Called from eping.py
 
 `GENERATE REPORT` (web gui) and `N`/ANALYSE NOW (CLI) both run epinga.py in a

{eping-3.91 → eping-4.1}/README.md

@@ -1,4 +1,4 @@
-# eping.py 3.91
+# eping.py 4.01
 
 Continuous ICMP reachability monitor built on `fping`. Scans a host list in a loop,
 reports each host UP/DOWN/NO-DNS, counts state changes. CLI (curses) or web GUI.
@@ -33,7 +33,7 @@ Portable Windows version (web GUI only, no installation): download and unpack
 [`eping-windows.zip`](https://github.com/ewaldj/eping/blob/main/Windows_Version/eping-windows.zip)
 ([folder](https://github.com/ewaldj/eping/tree/main/Windows_Version/)), then start `eping.exe`.
 
-- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI),
+- Contains `eping.exe` (small launcher window: web port, Start / Stop / Restart, open web GUI, Disable autostart / logging / file, CLI options, Check updates),
   `eping.py`, `epinga.py`, `fping.exe` + `cygwin1.dll` (fping for Windows) and an embedded Python.
 - The web GUI opens in the browser (default `http://127.0.0.1:8080`). The port is read from the hosts file
   (`opt: -port 9000`); a port already in use is reported and can be changed in the launcher window.
@@ -173,11 +173,12 @@ DOWN. Columns: hostname/IP, state, RTT (ms), last-change timestamp, change count
 | `F` | add hosts from a file |
 | `O` | sort order picker — 5 orders (see *Views and sort orders*) |
 | `T` | add comment — timestamped CSV row (logging on only) |
-| `S` | set reference — shown list becomes new base list |
+| `S` | set reference — shown list becomes new base list (hosts not shown are removed and no longer pinged) |
 | `Z` | zero changes — reset CH-TIME/CH NO, states kept |
 | `C` | clear all hosts and state |
 | `P` | address mode picker — 4 modes (see *Address modes*) |
 | `X` | ADV OPTIONS — live option editing (see *ADV OPTIONS*) |
+| `J` | JUMPHOST — run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
 | `N` | ANALYSE NOW — run epinga.py against the active logfile in the background (see *GENERATE REPORT*) |
 | `G` | GET NAMES — reverse-DNS raw IPs, one-shot, background |
 | `R` | redraw screen |
@@ -280,9 +281,11 @@ unless lowered). `CH NO` counts changes; `Z` resets it.
 
 CLI `U` and web GUI's view select/`U` picker (see *CLI mode*) reach the same 9 views.
 The web GUI's own `U` keyboard shortcut only cycles ALL HOSTS → CURRENTLY-UP →
-UP+FLAPPING → ALL HOSTS (see *Web GUI* keyboard shortcuts). A view also limits what's
-probed — filtered hosts aren't probed until back to ALL HOSTS. Host list snapshotted at
-switch time. A view with no matches is rejected, previous view stays active.
+UP+FLAPPING → ALL HOSTS (see *Web GUI* keyboard shortcuts). A view is a pure display
+filter, evaluated live on every refresh: all hosts keep being pinged, a host that goes
+DOWN leaves `CURRENTLY-UP`, a host that comes UP appears. Only SET REFERENCE removes the
+hosts that are not shown from the host list (they are no longer pinged) and resets the
+view to ALL HOSTS. A view with no matches is rejected, previous view stays active.
 
 `ALWAYS-UP`/`ALWAYS-DOWN`: never changed state this run (`CH NO` = 0). `NO-DNS` counts
 as DOWN for `CURRENTLY-DOWN`/`ALWAYS-DOWN`/`DOWN+FLAPPING`.
@@ -357,6 +360,8 @@ Same bounds as the matching CLI flags (`-lms`/`-lmf` for the last two - see *Out
 | POST | `/api/command` | `{"cmd":"...","value":"..."}` | control (see cmd list below) |
 | POST | `/api/advvalues` | `{"filter":{...}}` | ADV FILTER: values still selectable for a draft selection (same format as `adv_filter`) |
 | POST | `/api/upload` | host list, text | add hosts |
+| POST | `/api/log_sources` | `{"names":[...]}` | SOURCE values of the named logfiles (empty = active logfile), for SELECT JUMPHOST |
+| POST | `/api/jumphost` | `{"action":"info|test|trust|connect|local","host":...,"port":...,"user":...,"secret":...,"hostkey":"ask|accept-new|off","key":...}` | JUMPHOST window (see *SSH source (JUMPHOST)*) |
 
 `cmd` values: `up_only`, `set_filter`, `addr_mode`, `get_names`, `match_filter`,
 `adv_filter`, `sort`, `add`, `del`, `set_ref`, `zero`, `add_comment`, `reset_log`, `clear`,
@@ -367,7 +372,7 @@ value: `key=value`. `reset_log` value: logging off - optional custom file name (
 auto-generated); logging on - `y` (clear) or `new`/`new=<name>` (new file, optional
 custom name). `run_report`: `value` = empty (active logfile) or one `.csv` filename; or
 JSON body field `values`: `[...]` to merge and analyse multiple `.csv` files as one
-(max 25). `save_hosts_file` value: optional target file name (blank
+(max 25); optional body field `sources`: `[...]` restricts the analysis to these SOURCE values. `save_hosts_file` value: optional target file name (blank
 = active `-f` hostfile, or `eping-hosts.txt` if none).
 
 `-wv` answers `403` to `POST /api/command`/`/api/upload`; `-wvc`/`-web` allow both. No
@@ -422,8 +427,11 @@ separated) · `-r` IP range (comma separated, shortened end)
 | `-ipo` | — | off | start with IP ONLY |
 | `-gn` | — | off | GET NAMES once at startup |
 | `-ncs` | — | off | skip `--check-source` |
+| `-ssh` | `[USER@]HOST[:PORT]` | off | run fping on a jump host via ssh (see *SSH source (JUMPHOST)*) |
+| `-sshkey` | file | agent | private key file for `-ssh` |
+| `-sshhk` | accept-new/ask/off | accept-new | host key check for `-ssh` |
 | `-ncf` | — | off | CSV: do not ping the CSV IP of a name without DNS record |
-| `-up` | — | 0 | learning phase: after N rounds keep only hosts seen UP |
+| `-up` | — | 0 | learning phase: after N rounds show only hosts seen UP (view CURRENTLY-UP; all hosts are still pinged until SET REFERENCE) |
 | `-setref` | — | off | with `-up`: hosts seen UP become new reference list |
 
 Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
@@ -449,11 +457,11 @@ Hard-enforced at startup and live via ADV OPTIONS (`-web` only), same bounds.
 Unless `-dl`, every round appends to `eping-log_YYYY-MM-DD_HH:MM:SS.csv` (or `-o FILE`):
 
 ```
-TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT
+TIMESTAMP,HOSTNAME,PREVIOUS_STATE,CURRENT_STATE,RTT,NO_OF_CHANGES,CHANGE_TIMESTAMP,TBD,IP,INV_HOSTNAME,SERIAL_NUMBER,MODEL,LOCATION,SYSLOCATION,TYPE,INV_COMMENT,SOURCE
 ```
 
 `INV_HOSTNAME` … `INV_COMMENT`: the inventory values of a host added from an inventory CSV (see
-*Inventory CSV import*), empty for all other hosts. Logs without these columns (older
+*Inventory CSV import*), empty for all other hosts. `SOURCE`: `local` or the ssh jump host that produced the row. Logs without these columns (older
 versions) stay readable by epinga.py.
 
 `TBD`: suppressed DOWN observations (`-cf`). `IP`: address actually pinged (empty for
@@ -479,6 +487,29 @@ these rows automatically.
 - Logging off: same dialog, no clear option - `START LOGGING` starts a fresh file
   right away, same optional custom name.
 
+## SSH source (JUMPHOST)
+
+Run fping on a jump host instead of locally (system `ssh` only). Any Linux host with a working `fping`
+(e.g. a caretaker) will do; it resolves the names itself. Start: `-ssh [USER@]HOST[:PORT]` (+ `-sshkey FILE`, `-sshhk MODE`);
+the password or key passphrase is asked on the terminal at startup. At runtime: `J` in the CLI,
+JUMPHOST button in the web GUI (after ADV OPTIONS).
+
+![JUMPHOST window](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/jumphost.png)
+
+- Window: HOST, PORT, USER, PASSWORD (key passphrase), HOST KEY, KEY FILE. TEST checks ssh, login and
+  fping on the jump host, CONNECT switches the scan source, USE LOCAL switches back. A missing local
+  `ssh` is shown in the window.
+- HOST KEY: `accept-new` (default) - hosts seen for the first time are trusted automatically, a changed
+  key is still refused; `ask` - an unknown key is shown with its fingerprint and must be accepted with
+  TRUST KEY; `off` - no check at all (insecure).
+- The switch is applied at the start of the next round; hosts, states and counters are kept.
+- Connection loss: results of the round are discarded, hosts keep their state, a banner is shown and
+  eping reconnects. Logged as `#COMMENT#` rows (`JUMPHOST ... OFFLINE: <reason>`, `JUMPHOST ... ONLINE
+  again`, `SOURCE SWITCH <old> -> <new>`), shown in the report's comment timeline.
+- Log column `SOURCE`: `local` or the jump host of each row.
+- Limits: GET NAMES and the CSV-IP fallback are not available over ssh; at most 4 ssh processes
+  (2 on Windows); the web password transfer is plain HTTP - use `-bind 127.0.0.1` or a trusted network.
+
 ## Web GUI header
 
 Header: `eping.py vX.XX · © Ewald Jeitler · supervised by Nelly · tools.jeitler.cc ·
@@ -520,11 +551,17 @@ logging is off or the logfile is empty/missing.
 ## GENERATE REPORT (web gui) / ANALYSE NOW (CLI `N`)
 
 Runs epinga.py against one or more logfiles in the background while eping.py keeps
-running - not just at exit. Web: GENERATE REPORT dropdown, two entries - `ACTIVE
+running - not just at exit. Web: GENERATE REPORT dropdown, three entries - `ACTIVE
 LOGFILE` analyses the active CSV log (needs logging on, non-empty logfile, else the tab
 closes and a footer error is shown), `CHOOSE LOGFILE` picks one or more `.csv` files in
 the working dir - table (name/size/date), "select all" checkbox, nothing preselected;
-up to 25 files per report, checking a 26th is refused.
+up to 25 files per report, checking a 26th is refused. `SELECT JUMPHOST` lists the
+sources (`local` and jump hosts, log column `SOURCE`) found in the active logfile - all checked,
+ENTER = GENERATE; only the periods of the checked sources are calculated (see *Source filter* in the
+epinga.py section). Shown only if the log holds more than one source.
+
+![SELECT JUMPHOST](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/select-jumphost.png)
+
 More than one selected file is merged chronologically (by mtime) into one temporary
 CSV, analysed as a single logfile, then the temp file is removed. Result opens in a new
 tab; if a selected file was invalid or has meanwhile been removed (e.g. by log rotation
@@ -635,7 +672,7 @@ phases: eping's own work (~0.12s on 4109 hosts).
 - `-p` > 1 and `-i 0` reduce accuracy (false DOWN) — defaults avoid both.
 - `-dr 0` produces flapping hosts in practice — keep the default of 1.
 
-# epinga.py 2.35
+# epinga.py 2.37
 
 Analyses an eping.py CSV log: terminal summary + self-contained HTML report (no
 server, no external assets) with per-host detail, state-change timelines, and
@@ -660,6 +697,7 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-s`, `--start YYYY-MM-DD HH:MM:SS` | rows from this timestamp on |
 | `-e`, `--end YYYY-MM-DD HH:MM:SS` | rows up to this timestamp |
 | `-S`, `--sort {name,flapping,uptime,rtt}` | summary sort order (default `name`) |
+| `--source SOURCE` | only rows of this source - `local` or the jump host label from the log column `SOURCE` (repeatable; see *Source filter*) |
 | `--no-detail` | summary only |
 | `--no-changes` | omit state-change list |
 | `--html FILE` | custom HTML filename |
@@ -667,6 +705,17 @@ Output: `<base>_report.txt` and `<base>_report.html` (`--html FILE` overrides).
 | `-q`, `--quiet` | suppress progress bar |
 | `--no-version-check` | skip online update check |
 
+## Source filter
+
+Logs written while eping.py ran on a jump host carry a `SOURCE` column. With `--source` (or the
+selection shown on a terminal when the log holds several sources; numbers like `1,3`, ENTER = all)
+only the periods of the selected sources are calculated: uptime, up/down time, RTT, changes and the
+timeline. Periods of other sources are excluded and shown as a gap in the timeline; a state change that
+happened during such a gap is not counted. Without `--source` everything is combined (as before).
+Logs without a `SOURCE` column are treated as `local`.
+
+![epinga report, source local](https://raw.githubusercontent.com/ewaldj/eping/main/docs/img/report-source.png)
+
 ## Called from eping.py
 
 `GENERATE REPORT` (web gui) and `N`/ANALYSE NOW (CLI) both run epinga.py in a

{eping-3.91 → eping-4.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "eping"
-version = "3.91"
+version = "4.01"
 description = "Continuous ICMP reachability monitor built on fping, with a CSV logfile analyser (epinga)"
 readme = "README.md"
 license = { text = "GPL-3.0-or-later" }