Six primitives.
One unified surface.
Every capability is built around the same data model: devices, endpoints, paths, policies, changes, and snapshots, queryable through one API.
Trace any traffic path. Across any vendor. With ACL evaluation.
Enter a 5-tuple (source, destination, protocol, ports) and SAMURAI traces the packet hop by hop across routers, switches, and firewalls. Every ACL along the path is evaluated. Forward and reverse paths are traced automatically.
- Forward + reverse path tracing
- ACL evaluation with wildcard masks and port ranges
- Works across IOS, NX-OS, IOS-XR, PAN-OS, and FTD
- Visual diff between any two snapshots
Catch every meaningful change. Ignore the noise.
Every sync compares real device data against the previous snapshot, not audit logs. Volatile fields are filtered automatically. Only when something meaningful changes is a new snapshot stored.
- Smart deduplication, no duplicate snapshots
- Configurable snapshot history (default 168 per collection)
- Side-by-side diff viewer for any two snapshots
- Telegram alerts on configuration drift
And dozens more tools for day-to-day ops
Endpoint discovery & correlation
Correlate MAC, ARP, DHCP, CDP/LLDP, 802.1X, and APIC hosts into a unified endpoint inventory with OUI vendor lookup.
Hop-by-hop traffic simulation
Trace any 5-tuple packet path across routers, switches, and firewalls, with ACL evaluation at each hop.
Real-time change monitoring
Detects changes from real device data, not audit logs. Compares live snapshots to catch what audit trails miss.
Telegram, email & in-app alerts
Instant notifications on config drift, sync failures, and state changes via Telegram, email, and the built-in alert dashboard.
Interactive network map
Drag-arrange topology with auto-discovered connections, device grouping, and color-coded health status.
Automated compliance auditing
Run fleet-wide compliance checks with remediation tracking, waivers, and exportable reports per framework.
Multi-format data export
Export any dataset as CSV, XLSX, HTML, or PDF with search filters applied. One click from any panel.
RBAC with LDAP integration
Granular permission-based roles with LDAP group mapping, custom roles, and per-user scoping.
How it works
Register devices
Add your APIC controllers, FMC, NDO, Palo Alto firewalls, routers, and switches. SAMURAI auto-detects the platform and applies the right command profile.
Background sync
Background workers fetch configs, routes, MAC/ARP tables, neighbors, and policies from every device. Endpoints are correlated automatically.
Query, trace, monitor
Search the entire endpoint table. Trace traffic paths. Browse configs. View topology maps. Compare snapshots side by side.
Alert on drift
Real-data change detection captures meaningful diffs. Telegram and email alerts notify you of configuration drift. Export data for compliance audits.
One docker run command. That's the entire install.
Self-hosted. No cloud dependency. No agents to deploy. Fits on a single VM. Five minutes from zero to full visibility.