SpecterLAN: Find the Ghosts on Your Network

Description and use

SpecterLAN lets users locally track network device changes and receive AI explanations via a local Gemma 3 4B model, keeping data private.

Problem

Users lack a local, privacy‑preserving tool to track device changes on their network and understand unfamiliar devices without sending data to external services.

Outcome

SpecterLAN enables users to monitor network device changes locally, providing AI‑driven explanations without external data exposure, thereby enhancing privacy and usability.

Workflow

• 1. Run SpecterLAN on the user’s device.
• 2. Perform a baseline network scan using Nmap or a local fallback.
• 3. Store scan results and device metadata in SQLite.
• 4. On subsequent scans, compare new data to history to detect new, offline, returning devices and IP changes.
• 5. Generate structured evidence records for each change.
• 6. Pass evidence to the local Ollama model (Gemma 3 4B) via Ask the Ghost.
• 7. Display AI explanations alongside scan results, allowing the user to review and label devices.

Evidence

SpecterLAN is a local‑first network monitor that helps you understand which devices are connected to your network and what changed between scans.

Source

Everything runs locally on your device.

Source

For AI analysis, SpecterLAN sends structured evidence only to the locally running Ollama service.

Source

The default model is gemma3:4b.

Source