netwalk-fullreport

netwalk-fullreport

Part of the netwalk read-only network survey toolkit. Toolkit lives at {{TOOLKIT}}.

This produces the thing that leaves the building. Treat it accordingly.

Run it

T={{TOOLKIT}}
R=~/.netwalk/sites/acme-hq/scan-2026-08-22.json

python3 $T/scripts/netwalk_report.py $R -o ~/.netwalk/sites/acme-hq/report.html
python3 $T/scripts/netwalk_report.py $R -o ~/.netwalk/sites/acme-hq/report-public.html --public

One self-contained HTML file: diagram, CSS and all. No external requests, so it works offline, over email, and from a USB stick. It follows the reader's light/dark setting and prints sensibly.

The diagram is embedded at full size, not scaled to the column. A 3000px site map squeezed into a 1000px page is legible only as a shape — the hostnames, IP addresses and port names, which are the whole reason to look at it, become unreadable. It scrolls sideways inside its own frame instead, and the report offers a Fit to width toggle for readers who want the overview.

Full vs public

Ask which one they want when it is ambiguous, and default to full — the person who ran the scan should see everything. Send --public when the recipient is a landlord, a tenant, a procurement department, or anyone who should see the shape of the network but not a list of ways into it.

--public is not redaction. It hides sections; it does not sanitise text you wrote. If a finding's title says "admin/admin still works on the core switch", --public will happily print it when public_safe is true. Set the flag correctly at the finding level in netwalk-diag.