Automated packetless network reachability analysis

A computer-implemented method performed by one or more computing devices, comprising:

• performing an analysis of network configuration data for a network comprising a computing device;
• determining one or more ports at the computing device that are reachable from another computing device, wherein the one or more ports are determined based at least in part on the analysis of the network configuration data, without sending packets to the one or more ports as part of a port scan;
• determining one or more routes to the one or more ports at the computing device, wherein the one or more routes are determined based at least in part on the analysis of the network configuration data, without sending packets to the one or more ports as part of a port scan;
• and
• generating a report descriptive of the one or more ports and the one or more routes to the one or more ports at the computing device.

A non-transitory computer-readable storage medium storing program instructions computer-executable to perform:

• performing an analysis of network configuration data for a network comprising a host computer;
• determining one or more ports at the host computer that are open and reachable from another computer, wherein the one or more ports are determined based at least in part on results of the analysis of the network configuration data, without sending packets to the one or more ports as part of a port scan;
• determining one or more processes that are listening on the one or more ports, wherein the one or more processes are determined using an agent installed on the host computer;
• and
• generating a report descriptive of the one or more ports and the one or more processes.