netscli-core

The library behind netscli. If you want the CLI, the TUI, the desktop app, or the MCP server, use the netscli binary crate. This crate is for building your own tools on top of the same primitives.

What's in here

Host discovery (DiscoverEngine) over a subnet via ARP cache and active probes.
Port scanning (PortScanner) with configurable concurrency and per-connect timeouts.
DNS resolution (resolve_a, resolve_aaaa, full record-type lookups) via hickory-resolver.
Ping (PingScanner) with structured RTT summaries.
Network sweep (SweepEngine) combining discovery and scanning.
Interface listing (NetworkManager) with ARP neighbour tables and MAC vendor lookup (lookup_vendor) against a bundled gzipped IEEE OUI dataset.
Host inspection (InspectEngine) combining ping + scan + DNS.
Live traffic stats (NetworkMonitor) via sysinfo.
Optional packet capture (PcapEngine) behind the pcap feature flag.
SQLite persistence (Database) for scan history and host labelling.

Quick example

use netscli_core::{PortScanner, parse_ports};

#[tokio::main]
async fn main() -> anyhow::Result<()> {
    let ports = parse_ports("22,80,443")?;
    let scanner = PortScanner::new(100, 500); // concurrency, timeout_ms
    let results = scanner.scan("192.168.1.1", &ports).await;
    for result in results {
        println!("{}:{} open={}", result.host, result.port, result.open);
    }
    Ok(())
}

Features

Feature	Default	Purpose
`pcap`	off	Enables `PcapEngine` packet capture. Needs libpcap/Npcap at runtime.

OUI vendor data

The IEEE OUI vendor database ships embedded in the crate (~400 KB gzipped). Vendor lookups work with zero runtime setup. If you want to ship a newer or filtered dataset:

Set NETSCLI_OUI_PATH to a path pointing at .json or .json.gz.
Or place oui.min.json.gz next to the executable.

On-disk paths take precedence over the embedded copy.

License