topology-scanner 1.0.0__tar.gz

topology_scanner-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Daniel Serrano Marín
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

topology_scanner-1.0.0/PKG-INFO

@@ -0,0 +1,246 @@
+Metadata-Version: 2.4
+Name: topology-scanner
+Version: 1.0.0
+Summary: Network topology scanner (nmap + SNMP) with device classification and an interactive HTML map
+Author: danielsm107
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/danielsm107/network-topology-scanner
+Project-URL: Issues, https://github.com/danielsm107/network-topology-scanner/issues
+Project-URL: Changelog, https://github.com/danielsm107/network-topology-scanner/blob/main/CHANGELOG.md
+Keywords: nmap,snmp,lldp,network,topology,scanner,inventory
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Environment :: Web Environment
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: System :: Networking :: Monitoring
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: python-nmap>=0.7.1
+Requires-Dist: networkx>=3.0
+Requires-Dist: pyvis>=0.3.2
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: pytest-cov>=5.0; extra == "dev"
+Requires-Dist: ruff>=0.6; extra == "dev"
+Provides-Extra: web
+Requires-Dist: streamlit>=1.33; extra == "web"
+Provides-Extra: snmp
+Requires-Dist: pysnmp>=7.1; extra == "snmp"
+Requires-Dist: cryptography>=43; extra == "snmp"
+Dynamic: license-file
+
+# Network Topology Scanner
+
+[![CI](https://github.com/danielsm107/network-topology-scanner/actions/workflows/ci.yml/badge.svg)](https://github.com/danielsm107/network-topology-scanner/actions/workflows/ci.yml)
+
+Scans a network range, discovers active hosts, their open ports/services,
+vendor (via MAC) and device type, and generates an interactive HTML topology
+graph with icons per category (router, PC, NAS, printer, etc). Flags hosts
+with sensitive open ports in red (Telnet, SMB, RDP, FTP, VNC), stores every
+scan in SQLite to diff against the previous one (new/dropped hosts, ports
+that changed), and can export the inventory to CSV. Optionally queries your
+routers/switches over SNMP to draw the **real topology** (which host hangs
+from which switch port or access point) instead of an approximate star.
+Available as a CLI or as a local web interface (Streamlit, optional).
+
+![Command Center dashboard](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/dashboard.png)
+![Inventory and changes](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/inventario.png)
+
+*Screenshots use fictional demo data — no real network is exposed here.*
+
+## ⚠️ Legal notice
+Only use this tool **on networks you own or have explicit authorization to
+scan** (your homelab, or your workplace's network if you have permission).
+Scanning networks without consent is illegal in most countries.
+
+## Project structure
+
+```
+network-topology-scanner/
+├── src/topology_scanner/
+│   ├── scanner.py        # nmap scanning (discovery + ports)
+│   ├── classifier.py      # Device classification by MAC/vendor
+│   ├── graph.py            # Graph construction (networkx)
+│   ├── export.py           # HTML export (pyvis), text and CSV
+│   ├── history.py          # Scan history in SQLite (diff vs. the previous scan)
+│   ├── snmp.py             # Real topology via SNMP (ARP, routes, MAC table, neighbors)
+│   ├── cli.py               # Command-line interface
+│   └── webapp.py            # Web interface (Streamlit, optional)
+├── scripts/demo_arbol.py    # Fictional SNMP tree for the README screenshot
+├── tests/                   # pytest, with nmap mocks (no real network needed)
+└── pyproject.toml           # single source of dependencies (pip install -e ".[dev,web,snmp]")
+```
+
+## Installation
+
+Requires Python 3.10+.
+
+```bash
+# System dependency
+sudo apt install nmap        # Linux
+# On Windows: download the installer from nmap.org
+
+# Virtual environment
+python3 -m venv venv
+source venv/bin/activate      # Linux/Mac
+# venv\Scripts\Activate.ps1   # Windows PowerShell
+
+# From PyPI
+pip install topology-scanner
+pip install "topology-scanner[web,snmp]"   # optional: web interface and real topology via SNMP
+```
+
+For development, from a clone of the repo:
+
+```bash
+pip install -e ".[dev,web,snmp]"
+```
+
+## Usage
+
+```bash
+sudo topology-scanner 192.168.1.0/24
+sudo topology-scanner 192.168.1.0/24 --rapido
+sudo topology-scanner 192.168.1.0/24 --con-so --output my_network.html
+
+# Several ranges at once (e.g. your LAN and a homelab subnet behind another router)
+sudo topology-scanner 192.168.1.0/24 10.0.10.0/24
+
+# Real topology: query the router(s) over SNMP (see below)
+export TOPOLOGY_SNMP_COMMUNITY='your-read-only-community'
+sudo -E topology-scanner 192.168.1.0/24 --snmp 192.168.1.1
+
+# Alternative without the installed entry point:
+sudo python3 -m topology_scanner 192.168.1.0/24
+```
+
+| Flag              | Description                                                     | Default              |
+|-------------------|-------------------------------------------------------------------|-----------------------|
+| `range`           | CIDR range(s) to scan, space-separated; history is kept per range  | (required)            |
+| `--ports`         | Ports to scan (nmap format)                                        | common ports           |
+| `--nmap-args`     | Extra arguments passed to nmap                                     | `-sV -T4`             |
+| `--output`        | Output HTML file name                                              | `topologia_red.html`  |
+| `--con-so`        | Enables OS detection (-O), the slowest option                      | disabled               |
+| `--sin-2-fases`   | Disables the preliminary ping scan, scans the full range directly  | disabled               |
+| `--rapido`        | Max-speed preset, ports only (incompatible with `--con-so`/`--nmap-args`) | disabled         |
+| `--csv`           | Also exports a CSV inventory to the given path                     | disabled               |
+| `--history-db`    | SQLite file where scan history is stored                           | `historial.db`         |
+| `--sin-historial` | Skips saving the scan to history / diffing against the previous one | disabled              |
+| `--snmp`          | Routers/switches to query over SNMP v2c (comma-separated IPs)      | disabled (star layout) |
+
+## Web interface
+
+Requires the `[web]` extra (see Installation). Form with automatic detection
+of your local network, real cancellable scanning (kills the actual nmap
+process, not just the UI), results table, CSV download and the embedded
+graph. Several ranges can be scanned at once by separating them with
+spaces in the range field. The "Real topology via SNMP" switch in the sidebar draws the tree
+described below, over SNMP v2c or v3 (community and keys are password
+inputs; leave them empty to use the `TOPOLOGY_SNMP_*` environment variables).
+
+```bash
+topology-scanner-web
+# or, without the installed entry point:
+streamlit run src/topology_scanner/webapp.py
+```
+
+## Real topology via SNMP
+
+By default the graph is an approximate star: nmap knows *which* hosts are
+alive, not *how* they are connected. With `--snmp`, the scanner reads a few
+standard tables from your routers/switches and builds a tree instead:
+
+| SNMP table | What it tells | Used for |
+|---|---|---|
+| Routes (`ipCidrRouteTable`) | "10.0.10.0/24 is behind 192.168.1.44" | Upstream gateway, downstream routers and their subnets |
+| Neighbors (MikroTik `mtxrNeighborTable`, MNDP/LLDP/CDP) | "Access point X is on my ether2" | Links between network devices |
+| Neighbors (standard `LLDP-MIB`, any vendor) | "Switch Y sees me on its port3" | Links, with the port on **both** ends (`ether2 ↔ port3`) |
+| MAC table (`BRIDGE-MIB`) | "MAC aa:bb:… is on port wlan1" | Which port each host is on |
+| ARP (`ipNetToMediaTable`) | "192.168.1.20 is aa:bb:…" | Matching MACs to the IPs nmap found |
+
+Hosts seen on a port that leads to another network device hang from that
+device; hosts that only SNMP sees (not detected by nmap) are shown too —
+an unknown device on a switch port is exactly what you want to notice. If no
+device answers, the scan still finishes with the star layout.
+
+![Real topology via SNMP](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/arbol-snmp.png)
+
+*Fictional demo data, generated with `python scripts/demo_arbol.py` (no scan involved).*
+
+**Setup** (MikroTik RouterOS example — read-only, restricted to the
+scanning machine):
+
+```
+/snmp community add name=<long-random-string> addresses=<scanner-ip>/32 read-access=yes write-access=no
+/snmp community set [find name=public] disabled=yes
+/snmp set enabled=yes
+```
+
+The community is read from the `TOPOLOGY_SNMP_COMMUNITY` environment
+variable, never from a command-line argument (arguments show up in `ps` and
+in your shell history). On Windows PowerShell:
+`$env:TOPOLOGY_SNMP_COMMUNITY = "..."`.
+
+**SNMPv3** (recommended: v2c sends the community in clear text). In RouterOS
+v6 the community name is the v3 user, and `security=private` means
+authentication + encryption:
+
+```
+/snmp community add name=<user> addresses=<scanner-ip>/32 security=private \
+    authentication-protocol=SHA1 authentication-password=<8+ chars> \
+    encryption-protocol=AES encryption-password=<8+ chars> read-access=yes write-access=no
+```
+
+| Variable | Meaning | Default |
+|---|---|---|
+| `TOPOLOGY_SNMP_USER` | v3 user (if set, v3 is used and the community is ignored) | — |
+| `TOPOLOGY_SNMP_AUTH_KEY` | Authentication key (8+ characters) | required |
+| `TOPOLOGY_SNMP_PRIV_KEY` | Encryption key (8+ characters); empty = authenticate without encryption | — |
+| `TOPOLOGY_SNMP_AUTH_PROTO` | `MD5`, `SHA`, `SHA224`, `SHA256`, `SHA384`, `SHA512` | `SHA` |
+| `TOPOLOGY_SNMP_PRIV_PROTO` | `DES`, `AES`, `AES192`, `AES256` | `AES` |
+
+**Current limitations**: links between network devices come
+from MikroTik's neighbor table and from the standard LLDP-MIB, so devices
+that don't run LLDP (or don't expose it over SNMP) are only placed by
+routes, ARP and the MAC table.
+
+## Device classification
+
+Each host's MAC address is used to look up its vendor (via nmap's built-in
+database), which is then heuristically mapped to a category with its own
+icon: router, firewall, VM, NAS, printer, camera, IoT, mobile, Apple, PC.
+
+**Limitation**: MAC resolution only works if the scanning machine is on the
+**same L2 segment** as the target host (ARP doesn't cross routers/VLANs).
+Hosts on other subnets will show up as category "unknown".
+
+## Tests
+
+```bash
+pytest tests/ -v
+pytest tests/ --cov=topology_scanner   # with coverage
+```
+
+`scanner.py` tests use `unittest.mock` to simulate nmap's responses, so they
+run without a real network or the nmap binary installed.
+
+## Roadmap
+
+- [x] Visual alerts for sensitive open ports (RDP, Telnet, SMB, FTP, VNC)
+- [x] Scan history in SQLite (new/dropped hosts, ports that change)
+- [x] CSV export for audits/inventory
+- [x] Visual icon/color legend in the HTML
+- [x] Web interface with Streamlit
+- [x] CI: run tests + ruff on every push
+- [x] Real topology via SNMP against routers/switches, CLI (instead of the approximate star layout)
+- [x] SNMP in the web interface
+- [x] Standard LLDP-MIB (links between devices from any vendor, with the port on both ends)
+- [x] SNMPv3 (authentication and encryption)
+- [x] v1.0 on PyPI, published by GitHub Actions from a tag (trusted publishing, no tokens)
+
+See [CHANGELOG.md](https://github.com/danielsm107/network-topology-scanner/blob/main/CHANGELOG.md) for release notes.

topology_scanner-1.0.0/README.md

@@ -0,0 +1,210 @@
+# Network Topology Scanner
+
+[![CI](https://github.com/danielsm107/network-topology-scanner/actions/workflows/ci.yml/badge.svg)](https://github.com/danielsm107/network-topology-scanner/actions/workflows/ci.yml)
+
+Scans a network range, discovers active hosts, their open ports/services,
+vendor (via MAC) and device type, and generates an interactive HTML topology
+graph with icons per category (router, PC, NAS, printer, etc). Flags hosts
+with sensitive open ports in red (Telnet, SMB, RDP, FTP, VNC), stores every
+scan in SQLite to diff against the previous one (new/dropped hosts, ports
+that changed), and can export the inventory to CSV. Optionally queries your
+routers/switches over SNMP to draw the **real topology** (which host hangs
+from which switch port or access point) instead of an approximate star.
+Available as a CLI or as a local web interface (Streamlit, optional).
+
+![Command Center dashboard](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/dashboard.png)
+![Inventory and changes](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/inventario.png)
+
+*Screenshots use fictional demo data — no real network is exposed here.*
+
+## ⚠️ Legal notice
+Only use this tool **on networks you own or have explicit authorization to
+scan** (your homelab, or your workplace's network if you have permission).
+Scanning networks without consent is illegal in most countries.
+
+## Project structure
+
+```
+network-topology-scanner/
+├── src/topology_scanner/
+│   ├── scanner.py        # nmap scanning (discovery + ports)
+│   ├── classifier.py      # Device classification by MAC/vendor
+│   ├── graph.py            # Graph construction (networkx)
+│   ├── export.py           # HTML export (pyvis), text and CSV
+│   ├── history.py          # Scan history in SQLite (diff vs. the previous scan)
+│   ├── snmp.py             # Real topology via SNMP (ARP, routes, MAC table, neighbors)
+│   ├── cli.py               # Command-line interface
+│   └── webapp.py            # Web interface (Streamlit, optional)
+├── scripts/demo_arbol.py    # Fictional SNMP tree for the README screenshot
+├── tests/                   # pytest, with nmap mocks (no real network needed)
+└── pyproject.toml           # single source of dependencies (pip install -e ".[dev,web,snmp]")
+```
+
+## Installation
+
+Requires Python 3.10+.
+
+```bash
+# System dependency
+sudo apt install nmap        # Linux
+# On Windows: download the installer from nmap.org
+
+# Virtual environment
+python3 -m venv venv
+source venv/bin/activate      # Linux/Mac
+# venv\Scripts\Activate.ps1   # Windows PowerShell
+
+# From PyPI
+pip install topology-scanner
+pip install "topology-scanner[web,snmp]"   # optional: web interface and real topology via SNMP
+```
+
+For development, from a clone of the repo:
+
+```bash
+pip install -e ".[dev,web,snmp]"
+```
+
+## Usage
+
+```bash
+sudo topology-scanner 192.168.1.0/24
+sudo topology-scanner 192.168.1.0/24 --rapido
+sudo topology-scanner 192.168.1.0/24 --con-so --output my_network.html
+
+# Several ranges at once (e.g. your LAN and a homelab subnet behind another router)
+sudo topology-scanner 192.168.1.0/24 10.0.10.0/24
+
+# Real topology: query the router(s) over SNMP (see below)
+export TOPOLOGY_SNMP_COMMUNITY='your-read-only-community'
+sudo -E topology-scanner 192.168.1.0/24 --snmp 192.168.1.1
+
+# Alternative without the installed entry point:
+sudo python3 -m topology_scanner 192.168.1.0/24
+```
+
+| Flag              | Description                                                     | Default              |
+|-------------------|-------------------------------------------------------------------|-----------------------|
+| `range`           | CIDR range(s) to scan, space-separated; history is kept per range  | (required)            |
+| `--ports`         | Ports to scan (nmap format)                                        | common ports           |
+| `--nmap-args`     | Extra arguments passed to nmap                                     | `-sV -T4`             |
+| `--output`        | Output HTML file name                                              | `topologia_red.html`  |
+| `--con-so`        | Enables OS detection (-O), the slowest option                      | disabled               |
+| `--sin-2-fases`   | Disables the preliminary ping scan, scans the full range directly  | disabled               |
+| `--rapido`        | Max-speed preset, ports only (incompatible with `--con-so`/`--nmap-args`) | disabled         |
+| `--csv`           | Also exports a CSV inventory to the given path                     | disabled               |
+| `--history-db`    | SQLite file where scan history is stored                           | `historial.db`         |
+| `--sin-historial` | Skips saving the scan to history / diffing against the previous one | disabled              |
+| `--snmp`          | Routers/switches to query over SNMP v2c (comma-separated IPs)      | disabled (star layout) |
+
+## Web interface
+
+Requires the `[web]` extra (see Installation). Form with automatic detection
+of your local network, real cancellable scanning (kills the actual nmap
+process, not just the UI), results table, CSV download and the embedded
+graph. Several ranges can be scanned at once by separating them with
+spaces in the range field. The "Real topology via SNMP" switch in the sidebar draws the tree
+described below, over SNMP v2c or v3 (community and keys are password
+inputs; leave them empty to use the `TOPOLOGY_SNMP_*` environment variables).
+
+```bash
+topology-scanner-web
+# or, without the installed entry point:
+streamlit run src/topology_scanner/webapp.py
+```
+
+## Real topology via SNMP
+
+By default the graph is an approximate star: nmap knows *which* hosts are
+alive, not *how* they are connected. With `--snmp`, the scanner reads a few
+standard tables from your routers/switches and builds a tree instead:
+
+| SNMP table | What it tells | Used for |
+|---|---|---|
+| Routes (`ipCidrRouteTable`) | "10.0.10.0/24 is behind 192.168.1.44" | Upstream gateway, downstream routers and their subnets |
+| Neighbors (MikroTik `mtxrNeighborTable`, MNDP/LLDP/CDP) | "Access point X is on my ether2" | Links between network devices |
+| Neighbors (standard `LLDP-MIB`, any vendor) | "Switch Y sees me on its port3" | Links, with the port on **both** ends (`ether2 ↔ port3`) |
+| MAC table (`BRIDGE-MIB`) | "MAC aa:bb:… is on port wlan1" | Which port each host is on |
+| ARP (`ipNetToMediaTable`) | "192.168.1.20 is aa:bb:…" | Matching MACs to the IPs nmap found |
+
+Hosts seen on a port that leads to another network device hang from that
+device; hosts that only SNMP sees (not detected by nmap) are shown too —
+an unknown device on a switch port is exactly what you want to notice. If no
+device answers, the scan still finishes with the star layout.
+
+![Real topology via SNMP](https://raw.githubusercontent.com/danielsm107/network-topology-scanner/main/docs/screenshots/arbol-snmp.png)
+
+*Fictional demo data, generated with `python scripts/demo_arbol.py` (no scan involved).*
+
+**Setup** (MikroTik RouterOS example — read-only, restricted to the
+scanning machine):
+
+```
+/snmp community add name=<long-random-string> addresses=<scanner-ip>/32 read-access=yes write-access=no
+/snmp community set [find name=public] disabled=yes
+/snmp set enabled=yes
+```
+
+The community is read from the `TOPOLOGY_SNMP_COMMUNITY` environment
+variable, never from a command-line argument (arguments show up in `ps` and
+in your shell history). On Windows PowerShell:
+`$env:TOPOLOGY_SNMP_COMMUNITY = "..."`.
+
+**SNMPv3** (recommended: v2c sends the community in clear text). In RouterOS
+v6 the community name is the v3 user, and `security=private` means
+authentication + encryption:
+
+```
+/snmp community add name=<user> addresses=<scanner-ip>/32 security=private \
+    authentication-protocol=SHA1 authentication-password=<8+ chars> \
+    encryption-protocol=AES encryption-password=<8+ chars> read-access=yes write-access=no
+```
+
+| Variable | Meaning | Default |
+|---|---|---|
+| `TOPOLOGY_SNMP_USER` | v3 user (if set, v3 is used and the community is ignored) | — |
+| `TOPOLOGY_SNMP_AUTH_KEY` | Authentication key (8+ characters) | required |
+| `TOPOLOGY_SNMP_PRIV_KEY` | Encryption key (8+ characters); empty = authenticate without encryption | — |
+| `TOPOLOGY_SNMP_AUTH_PROTO` | `MD5`, `SHA`, `SHA224`, `SHA256`, `SHA384`, `SHA512` | `SHA` |
+| `TOPOLOGY_SNMP_PRIV_PROTO` | `DES`, `AES`, `AES192`, `AES256` | `AES` |
+
+**Current limitations**: links between network devices come
+from MikroTik's neighbor table and from the standard LLDP-MIB, so devices
+that don't run LLDP (or don't expose it over SNMP) are only placed by
+routes, ARP and the MAC table.
+
+## Device classification
+
+Each host's MAC address is used to look up its vendor (via nmap's built-in
+database), which is then heuristically mapped to a category with its own
+icon: router, firewall, VM, NAS, printer, camera, IoT, mobile, Apple, PC.
+
+**Limitation**: MAC resolution only works if the scanning machine is on the
+**same L2 segment** as the target host (ARP doesn't cross routers/VLANs).
+Hosts on other subnets will show up as category "unknown".
+
+## Tests
+
+```bash
+pytest tests/ -v
+pytest tests/ --cov=topology_scanner   # with coverage
+```
+
+`scanner.py` tests use `unittest.mock` to simulate nmap's responses, so they
+run without a real network or the nmap binary installed.
+
+## Roadmap
+
+- [x] Visual alerts for sensitive open ports (RDP, Telnet, SMB, FTP, VNC)
+- [x] Scan history in SQLite (new/dropped hosts, ports that change)
+- [x] CSV export for audits/inventory
+- [x] Visual icon/color legend in the HTML
+- [x] Web interface with Streamlit
+- [x] CI: run tests + ruff on every push
+- [x] Real topology via SNMP against routers/switches, CLI (instead of the approximate star layout)
+- [x] SNMP in the web interface
+- [x] Standard LLDP-MIB (links between devices from any vendor, with the port on both ends)
+- [x] SNMPv3 (authentication and encryption)
+- [x] v1.0 on PyPI, published by GitHub Actions from a tag (trusted publishing, no tokens)
+
+See [CHANGELOG.md](https://github.com/danielsm107/network-topology-scanner/blob/main/CHANGELOG.md) for release notes.

topology_scanner-1.0.0/pyproject.toml

@@ -0,0 +1,79 @@
+[build-system]
+requires = ["setuptools>=68.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "topology-scanner"
+version = "1.0.0"
+description = "Network topology scanner (nmap + SNMP) with device classification and an interactive HTML map"
+readme = "README.md"
+license = "MIT"
+requires-python = ">=3.10"
+authors = [{ name = "danielsm107" }]
+keywords = ["nmap", "snmp", "lldp", "network", "topology", "scanner", "inventory"]
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Environment :: Console",
+    "Environment :: Web Environment",
+    "Intended Audience :: System Administrators",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: System :: Networking :: Monitoring",
+]
+dependencies = [
+    "python-nmap>=0.7.1",
+    "networkx>=3.0",
+    "pyvis>=0.3.2",
+]
+
+[project.optional-dependencies]
+dev = [
+    "pytest>=8.0",
+    "pytest-cov>=5.0",
+    "ruff>=0.6",
+]
+web = [
+    # >=1.33 por st.fragment(run_every=...), que usa _fragmento_progreso()
+    # para refrescar el estado del escaneo sin recargar toda la página.
+    "streamlit>=1.33",
+]
+snmp = [
+    # >=7.1: API asyncio con nombres snake_case (walk_cmd,
+    # UdpTransportTarget.create) que usa snmp.py. Exige Python >=3.10.
+    "pysnmp>=7.1",
+    # pysnmp la usa para cifrar en SNMPv3 (AES/DES) pero no la declara como
+    # dependencia; >=43 por cryptography.hazmat.decrepit, que es lo que importa.
+    "cryptography>=43",
+]
+
+[project.urls]
+Homepage = "https://github.com/danielsm107/network-topology-scanner"
+Issues = "https://github.com/danielsm107/network-topology-scanner/issues"
+Changelog = "https://github.com/danielsm107/network-topology-scanner/blob/main/CHANGELOG.md"
+
+[project.scripts]
+topology-scanner = "topology_scanner.cli:main"
+topology-scanner-web = "topology_scanner.webapp:lanzar"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+testpaths = ["tests"]
+
+[tool.ruff]
+target-version = "py310"
+# El código ya usa líneas más largas que las 88 por defecto (diccionarios de
+# datos, f-strings en español) sin que aporte legibilidad partirlas todas.
+line-length = 120
+
+[tool.ruff.lint]
+# Sin esto, ruff sin [tool.ruff.lint] activa ~800 reglas (prácticamente
+# "ALL", incluidas categorías irrelevantes aquí como async/trio o
+# compatibilidad py2/3) - demasiado ruido para CI. Selección explícita:
+# pyflakes + pycodestyle, imports (I, ya usado para ordenar), pyupgrade,
+# bugbear, simplify y las reglas propias de ruff.
+select = ["E", "F", "I", "UP", "B", "SIM", "RUF"]

topology_scanner-1.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

topology_scanner-1.0.0/src/topology_scanner/__init__.py

@@ -0,0 +1,11 @@
+"""topology_scanner — escáner de topología de red con nmap + networkx + pyvis."""
+
+from importlib.metadata import PackageNotFoundError, version
+
+try:
+    # pyproject.toml es la única fuente de verdad para la versión - antes
+    # había una copia a mano aquí que podía desincronizarse.
+    __version__ = version("topology-scanner")
+except PackageNotFoundError:
+    # Código fuente sin instalar (ni siquiera "pip install -e .")
+    __version__ = "0+unknown"

topology_scanner-1.0.0/src/topology_scanner/__main__.py

@@ -0,0 +1,4 @@
+from .cli import main
+
+if __name__ == "__main__":
+    main()