UNFIMP does not populate devSSID for UniFi wireless clients
Maintainers usually reply within 1 day
A pull request for this has already been merged.
- #1836 by @itwormz — merged
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Stale
- Tech stack
- json, python
- Domain
- backend, networking
Research direction
Read server/plugins/unifi_import/script.py and server/plugins/unifi_import/config.json to trace how the plugin extracts and maps SSID data. Check the linked pull request first, since it is merged; done means wireless clients have their SSID in devSSID and wired clients remain empty.
Written by the indexing model from the issue text.
Description
What installation are you running?
Production (netalertx) 📦
Is there an existing issue for this?
- I have searched the existing open and closed issues and I checked the docs https://docs.netalertx.com/
The issue occurs in the following browsers. Select at least 2.
- Firefox
- Chrome
- Edge
- Safari (unsupported) - PRs welcome
- N/A - This is an issue with the backend
Current Behavior
Bug description
The UNFIMP plugin successfully imports UniFi clients, including hostname, IP, vendor, and parent AP/switch information, but WiFi SSIDs are not populated in devSSID.
Environment
- NetAlertX:
v26.10.0 - UniFi Network:
10.6.106 - UniFi OS:
5.1.33 - Controller type: UniFi Cloud Gateway
- UNFIMP version setting:
UDMP-unifiOS - Installation type: Production container
UNFIMP successfully connects to the UniFi controller and imports clients.
Current behavior
For a wireless client, the UniFi API data contains the actual WiFi SSID in essid.
Sanitized example:
{
"is_wired": false,
"hostname": "<REDACTED_HOSTNAME>",
"last_connection_network_name": "<REDACTED_NETWORK_NAME>",
"network": "<REDACTED_NETWORK_NAME>",
"essid": "<REDACTED_SSID>",
"last_uplink_name": "<REDACTED_AP_NAME>"
}
Another wireless client shows the same relevant fields:
{
"is_wired": false,
"hostname": "<REDACTED_HOSTNAME>",
"last_connection_network_name": "<REDACTED_NETWORK_NAME>",
"essid": "<REDACTED_SSID>"
}
The actual WiFi SSID is therefore available in the returned UniFi client data as:
essid
However, the current UNFIMP implementation in server/plugins/unifi_import/script.py uses:
extra=get_unifi_val(device, 'connection_network_name', ''),
In this environment, connection_network_name is not present in the returned wireless client objects, so extra remains empty.
There also appears to be a second issue in:
server/plugins/unifi_import/config.json
The UNFIMP extra column is defined without a mapped_to_column entry.
In particular, it does not contain:
"mapped_to_column": "scanSSID"
Other NetAlertX plugins that provide SSID information use this mapping. For example, the included WiFi Canary plugin defines its extra field using:
{
"column": "extra",
"mapped_to_column": "scanSSID"
}
At the same time, UNFIMP exposes devSSID in both its SET_ALWAYS and SET_EMPTY options, which suggests that the plugin is intended to populate devSSID.
Additional information
Parent topology import works correctly using the same UniFi client data.
Fields such as:
last_uplink_name
last_uplink_mac
last_uplink_remote_port
ap_mac
are available from UniFi and the corresponding parent AP/switch information is imported successfully by UNFIMP.
The issue therefore appears to be specific to SSID extraction and SSID-to-devSSID mapping.
No local patches have been applied. The behavior was observed with the unmodified NetAlertX v26.10.0 container.
Expected Behavior
Expected behavior
For wireless UniFi clients, UNFIMP should populate devSSID with the actual WiFi SSID reported by the UniFi controller.
For example:
devSSID = <REDACTED_SSID>
For wired clients, devSSID should remain empty.
Possible cause
There appear to be two related issues:
-
script.pyreadsconnection_network_name, while the UniFi client data returned in this environment provides the actual WiFi SSID inessid. -
The UNFIMP
extrafield is not mapped toscanSSIDinconfig.json.
For comparison, the UniFi data may also contain:
last_connection_network_name
but this represents the UniFi network name, not necessarily the actual wireless SSID, so it should not be used as a substitute for essid.
Possible fix
The SSID extraction could use essid for wireless clients, for example:
ssid = (
''
if device.get('is_wired') is True
else get_unifi_val(device, 'essid', '')
)
and then:
extra=ssid,
The corresponding extra column in config.json could also be mapped to scanSSID:
{
"column": "extra",
"mapped_to_column": "scanSSID"
}
This would ensure that the SSID extracted from UniFi is propagated into NetAlertX's devSSID field.
Steps To Reproduce
-
Run NetAlertX
v26.10.0with theUNFIMPplugin configured for a UniFi OS controller usingUDMP-unifiOS. -
Allow UNFIMP to import clients from the UniFi controller.
-
Verify that wireless clients are successfully imported and that other UniFi-derived information, such as hostname, vendor, and parent AP/switch data, is populated.
-
Inspect the UniFi client data for a wireless client and confirm that it contains an
essidvalue, for example:
{
"is_wired": false,
"essid": "<REDACTED_SSID>"
}
-
Open the corresponding device in NetAlertX.
-
Observe that
devSSIDis empty even though the UniFi client data contains the SSID inessid.
Relevant app.conf settings
docker-compose.yml
- Dominant language
- Python
- Stars
- 7.2k
- Forks
- 456
- Avg merge
- 16h 25m
- Merged PRs (30d)
- 30
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from netalertx/NetAlertX
-
Docker 🐋
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
bug 🐛 Contributors 🙏 help wanted 🆘
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
bug 🐛 next release/in dev image 🚀 Waiting for reply⏳
Difficulty 3/5 Half a day Newbie friendliness 57/100
netalertx/NetAlertX#1852 · 1 comment ·
Maintainers usually reply within 1 day
-
bug 🐛 next release/in dev image 🚀 Waiting for reply⏳
Difficulty 4/5 3-5 days Newbie friendliness 48/100
netalertx/NetAlertX#1831 · 2 comments ·
Maintainers usually reply within 1 day
-
Feature request ➕ please feedback 💬
Difficulty 5/5 Over a week Newbie friendliness 45/100
netalertx/NetAlertX#1827 · 1 comment ·
Maintainers usually reply within 1 day
All issues in netalertx/NetAlertX
Similar issues
-
The changelog workflow excludes otelbot but not dependabot, so every Dependabot pull request fails the changelog checkPossibly taken @ocelotl claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 82/100
open-telemetry/opentelemetry-python#5825 ·
Maintainers usually reply within 2 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
cuga-project/cuga-agent#1020 ·
Maintainers usually reply within 2 days
-
Difficulty 1/5 Under an hour Newbie friendliness 70/100
microsoft/playwright#43640 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
stac-utils/stac-fastapi-elasticsearch-opensearch#965 ·
Maintainers usually reply within 2 days
-
from-review-extraction library privacy python severity:suggested
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
LearningCircuit/local-deep-research#7951 ·
Maintainers usually reply within 2 days