the idea is: collect and count arriving packages on L3 (ip level) via ebpf maps,
expose them to user-space code and serve via HTTP API as ip + mac + last_pkt_timestamp,
so timestamp minus now() will effectively produce the last_seen delta.
Run such a stuff on orange-pi on your local network.