Six primitives.
One unified surface.
Every capability is built around the same data model: devices, endpoints, paths, policies, changes, and snapshots — queryable through one API.
Trace any traffic path. Across any vendor. With ACL evaluation.
Enter a 5-tuple — source, destination, protocol, ports — and SAMURAI traces the packet hop by hop across routers, switches, and firewalls. Every ACL along the path is evaluated. Forward and reverse paths are traced automatically.
- Forward + reverse path tracing
- ACL evaluation with wildcard masks and port ranges
- Works across IOS, NX-OS, IOS-XR, PAN-OS, and FTD
- Visual diff between any two snapshots
Catch every meaningful change. Ignore the noise.
Every sync compares real device data against the previous snapshot — not audit logs. Volatile fields are filtered automatically. Only when something meaningful changes is a new snapshot stored.
- Smart deduplication — no duplicate snapshots
- Configurable snapshot history (default 168 per collection)
- Side-by-side diff viewer for any two snapshots
- Telegram alerts on configuration drift
And dozens more tools for day-to-day ops
Endpoint discovery & correlation
Correlate MAC, ARP, DHCP, CDP/LLDP, 802.1X, and APIC hosts into a unified endpoint inventory with OUI vendor lookup.
Hop-by-hop traffic simulation
Trace any 5-tuple packet path across routers, switches, and firewalls — with ACL evaluation at each hop.
Real-time change monitoring
Detects changes from real device data — not audit logs. Compares live snapshots to catch what audit trails miss.
Telegram, email & in-app alerts
Instant notifications on config drift, sync failures, and state changes via Telegram, email, and the built-in alert dashboard.
Interactive network map
Drag-arrange topology with auto-discovered connections, device grouping, and color-coded health status.
Automated compliance auditing
Run fleet-wide compliance checks with remediation tracking, waivers, and exportable reports per framework.
Multi-format data export
Export any dataset as CSV, XLSX, HTML, or PDF with search filters applied — one click from any panel.
RBAC with LDAP integration
Granular permission-based roles with LDAP group mapping, custom roles, and per-user scoping.
How it works
Register devices
Add your APIC controllers, FMC, NDO, Palo Alto firewalls, routers, and switches. SAMURAI auto-detects the platform and applies the right command profile.
Background sync
Background workers fetch configs, routes, MAC/ARP tables, neighbors, and policies from every device. Endpoints are correlated automatically.
Query, trace, monitor
Search 13k+ endpoints. Trace traffic paths. Browse configs. View topology maps. Compare snapshots side by side.
Alert on drift
Real-data change detection captures meaningful diffs. Telegram and email alerts notify you of configuration drift. Export data for compliance audits.
One docker compose command. That's the entire install.
Self-hosted. No cloud dependency. No agents to deploy. Fits on a single VM. Five minutes from zero to full visibility.