netscli 0.3.4

What's new in 0.3.4

Port scans now name the software and version a service reports, can check common UDP services, and report closed ports as closed on Windows instead of filtered. The CLI writes CSV and Markdown tables, inspect gives an OS hint, and the desktop app can update itself. Discovery no longer lists the network broadcast address as a device.
Added
- The CLI can write CSV and Markdown tables. --csv and --md work on
every command that returns a list (discover, scan, sweep, dns,
ping, arp, interfaces, mdns and pcap). The columns are the same
field names --json uses, one row per host, port, record or packet, so a
result opens straight in a spreadsheet or pastes into an issue without
going through jq. Text a scanned host chose is made safe for each. A
banner that starts like a spreadsheet formula is defused, the same way the
desktop app's CSV export already does it, and one containing Markdown or
HTML is escaped.
- Port scans show the software and version where a service states them.
An SSH server's identification line, a web server's Server header, an
FTP or mail server's greeting and a MySQL or MariaDB server's connection
greeting usually name the software, often with its version:
OpenSSH 9.6p1, nginx 1.25.3, MariaDB 10.11.6. Redis, Valkey and
Memcached say nothing until asked, so each gets the one read-only question
that returns its version. Scans report this as product and version in
the JSON, and in a Version column in the CLI, the terminal UI and the
desktop app. It's far narrower than nmap's -sV: a service that doesn't
announce itself, and isn't one of those three, gets no version.
- UDP scanning. netscli scan <host> --udp checks the UDP services most
networks run (DNS, NTP, NetBIOS, SSDP and mDNS), each sent the request it
expects, or the ports you give with -p. A reply reads as open, with what
came back (NTP v4, stratum 2, a UPnP device's server string, a Windows
machine's NetBIOS name). A port-unreachable reads as closed, and silence
reads as open|filtered, because UDP can't tell a quiet service from a
firewall. It needs no administrator rights. The terminal UI takes
/scan <host> --udp, the MCP server's scan_ports takes udp: true, and
the desktop app's Port Scan has a TCP/UDP switch.
- Inspect gives an OS hint. netscli inspect now says what the host
probably runs, with the clues behind it, such as a Windows machine's exact
version and build from the start of an SMB connection (no login), the …

Full release notes »