Everything you need to operate a modern IP network

Interactive graph with real-time push updates. Five layout algorithms (force-directed, clustered by area, geometric, octilinear, circle), saveable layouts, snap-to-grid, minimap, and area boundary overlays. Large multi-area networks collapse into an area-cloud overview you expand in place. Changes flash on the canvas the moment they happen.

OSPFv2, OSPFv3 (IPv4 + IPv6 address families), and IS-IS (L1/L2, CLNS + IPv4 + IPv6) with full LSDB/LSP visibility. Three ways in per protocol: GRE tunnels for real-time adjacencies (IPv4 or IPv6 underlay, OSPF and IS-IS authentication), SNMP polling — one seed device can crawl an entire multi-area domain — or BGP-LS (RFC 9552), where the routers export their own link-state database over a BMP session or a receive-only peering, for scopes where no adjacency is possible. Multi-protocol devices are auto-correlated across OSPF and IS-IS.

EIGRP has no link-state database to join, so Osprey reads it entirely passively over SNMP on Cisco platforms: neighbours and interface state, IPv4 and IPv6, classic and named mode, per VRF and AS. Adjacencies are stitched into the topology alongside your OSPF and IS-IS areas, and paths follow each router's installed successor with its real composite metric — the routers' own decision, read back, never a borrowed cost or a guess.

Passive BMP server (RFC 7854) receives peer state and RIB updates from your routers — no polling. Full RIB per prefix across every target: all paths, ADD-PATH, and engine-computed best-path selection, like show ip bgp network-wide. Search with exact, longest-match, or covered prefix modes; ECMP and AS-path analysis. Sessions on routers that can't export BMP are discovered via SNMP. Received paths are validated against an RPKI/ROA set you import (RFC 6811) and badged valid, invalid or unknown — with no authorizations loaded there is no badge at all. Three deterministic checks run over what your sessions were offered: several origins for one prefix, a more-specific under another origin's covering prefix, and a path already carrying your own AS.

MPLS-TE tunnels (RFC 3812), L3VPNs (RFC 4364) with VRFs rolled up by route-target and classified full-mesh or hub-and-spoke, and L2VPN pseudowires rolled up into VPWS wires and VPLS instances — discovered via SNMP inside the normal poll cycle. Overlays draw service membership on the canvas, honestly labelled as control plane, never a guessed data path.

EVPN instances (RFC 7432) discovered straight from the BGP control plane via the same BMP feed — zero extra configuration. E-LAN and EVPN-VPWS services, VXLAN or MPLS encapsulation, per-PE MAC/IP counts, and Ethernet Segments. MAC mobility and PE loss surface as correlated incident symptoms, storm-guarded.

Simulate link or node failures, change metrics, add hypothetical routers and links, and model SRLG failure groups. Server-side multi-area Dijkstra (OSPF) and multi-level Dijkstra (IS-IS). Batch-assess every link or node to find your weakest points. Save scenarios. Combine with time travel to test past outages.

Auto-discovery of Layer 2 adjacencies via SNMP walks of LLDP-MIB and CDP-MIB. Switch crawling with BFS, platform-based filtering (excludes APs and phones), and a toggleable L2 overlay on the canvas. Per-network credential overrides.

Interface counters drive utilization heatmaps, per-interface sparklines, and congestion alerts. Automatic 10-second boost polling while detail panels are open. MRTG-style historical charts over 24h, 7d, 30d, or 1y. Credential profiles for reuse across targets.

Scrub back through topology history with a timeline slider and transport controls (0.5×–10×). Node panels, link panels, SPF trees, and path simulation all adapt to the historical state — including real as-of-that-moment BGP best-paths and peer sessions, never live data mislabelled as historical. Hash-deduplicated snapshots keep storage efficient.

An animated inter-AS graph: autonomous systems are sized bubbles, AS-path adjacencies are animated flows. Scrub the timeline, play the reflow, diff two instants with a movers view, and drill into any AS for share, churn, sole-path dependency, exit routers, and session health. Replay any single prefix's best-path history step by step — full-table safe.

Every hop is that router's own routing-table decision — the chain a packet actually walks, not a source-rooted shortest path — with per-hop metric, route type (O, O IA, E1/E2, I L1, I L2), and the full installed equal-cost set. Forward and reverse costs, asymmetric routing detection, CLNS traceroute, and SR-MPLS label stacks — administrative-distance-correct across protocols. Endpoints in different ASes or tenants? The path is stitched from IGP segments along the BGP AS chain, each with its own cost and confidence, with eBGP transitions drawn on the canvas — down to provable physical port pairs and shared switch fabrics. Failed-path diagnostics explain why a path can't be computed.

Rule engine with templates for congestion, interface errors, and SNMP failures. Event correlation groups related failures into incidents with inferred root causes — including OSPF area partitions, detected and classified even though the protocol never signals them. Alerts auto-resolve on recovery. Deliver via Slack, Teams, email, webhook, or in-app. Maintenance windows suppress alerts during planned work.

Right-click any device on the canvas to open a browser-based SSH session. Host key verification, AES-256 encrypted session recording, and full audit logging. Telnet fallback available but disabled by default.

Topology health, IP conflicts, single points of failure (articulation points and bridge links), routing stability, congestion trend, OSPF + IS-IS timer consistency (pairwise mismatches and consistent-but-nondefault timers), MTU mismatch, OSPF best practices, and dependency impact analysis (Peer AS, critical pairs, SRLG). All with CSV export.

Native Visio (.vsdx) export with A4 landscape layout, title block, and legend. Import custom icon packs from Visio stencils (.vssx) — Cisco, Juniper, Arista, Fortinet. Per-device icon overrides carry into exports. Selection-only export for extracting a site from a larger topology.