Network discovery is not one protocol returning one perfect graph.
- SNMPv3 polling identifies devices, interfaces, and current values through authenticated requests.
- EIGRP data helps explain dynamic routing relationships.
- Traps and syslog describe events that should not wait for the next poll.
- NetFlow adds traffic behavior to the topology.
- Versioned configuration makes change visible over time.
The graph becomes useful when each edge can explain where it came from and when it was last confirmed. A visually convincing topology without provenance is difficult to trust during an incident.
Next addition: document the reconciliation rules for conflicting sources.