netscli-core 0.2.2

Core networking library: discovery, scanning, DNS, ARP, PCAP, and OUI resolution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

# netscli-core

The library behind [netscli](https://github.com/fstubner/netscli). If
you want the CLI, the TUI, the desktop app, or the MCP server, use the
[`netscli`](https://crates.io/crates/netscli) binary crate. This crate
is for building your own tools on top of the same primitives.

## What's in here

- **Host discovery** (`DiscoverEngine`) over a subnet via ARP cache and
  active probes.
- **Port scanning** (`PortScanner`) with configurable concurrency and
  per-connect timeouts.
- **DNS resolution** (`resolve_a`, `resolve_aaaa`, full record-type
  lookups) via `hickory-resolver`.
- **Ping** (`PingScanner`) with structured RTT summaries.
- **Network sweep** (`SweepEngine`) combining discovery and scanning.
- **Interface listing** (`NetworkManager`) with ARP neighbour tables
  and **MAC vendor lookup** (`lookup_vendor`) against a bundled
  gzipped IEEE OUI dataset.
- **Host inspection** (`InspectEngine`) combining ping + scan + DNS.
- **Live traffic stats** (`NetworkMonitor`) via `sysinfo`.
- **Optional packet capture** (`PcapEngine`) behind the `pcap` feature
  flag.
- **SQLite persistence** (`Database`) for scan history and host
  labelling.

## Quick example

```rust
use netscli_core::{PortScanner, parse_ports};

#[tokio::main]
async fn main() -> anyhow::Result<()> {
    let ports = parse_ports("22,80,443")?;
    let scanner = PortScanner::new(100, 500); // concurrency, timeout_ms
    let results = scanner.scan("192.168.1.1", &ports).await;
    for result in results {
        println!("{}:{} open={}", result.host, result.port, result.open);
    }
    Ok(())
}
```

## Features

| Feature | Default | Purpose |
|---------|---------|---------|
| `db`    | off     | Enables the `Database` type and SQLite persistence via sqlx + chrono. Pulls ~90 extra transitive crates, so library consumers who don't need scan history should leave this off. |
| `pcap`  | off     | Enables `PcapEngine` packet capture. Needs libpcap/Npcap at runtime. |

The `netscli` binary crate enables `db` by default (it uses `Database`
for scan history). Library consumers who only want the scan / DNS /
ARP primitives should add the dep with `default-features = false`.

## OUI vendor data

The IEEE OUI vendor database ships embedded in the crate (~400 KB
gzipped). Vendor lookups work with zero runtime setup. If you want to
ship a newer or filtered dataset:

- Set `NETSCLI_OUI_PATH` to a path pointing at `.json` or `.json.gz`.
- Or place `oui.min.json.gz` next to the executable.

On-disk paths take precedence over the embedded copy.

## License

MIT