# mDNSShark: Network Scanner — WiFi & LAN Packet Capture

> Network scanner for WiFi/LAN, device discovery, port scanning, and packet capture. (iPhone/iPad app by ShapeHaven Innovations LLC.)

- Source: https://appshunter.io/ios/app/mdnsshark-network-scanner/id6741874026 (this page in markdown: same URL + `.md`)
- Developer: [ShapeHaven Innovations LLC](https://appshunter.io/developer/1747127977)
- Category: Utilities, Developer Tools
- Price: Free with in-app purchases
- Rating: 5.00/5 from 2 App Store ratings · 1 written reviews indexed
- Age rating: 4+
- Requires: iOS 18.2 · 7 MB
- Languages: American English
- Released: 2025-02-13
- Data updated: 2026-11-12
- Monetization: free with in-app purchases
- User reviews in markdown: https://appshunter.io/ios/app/mdnsshark-network-scanner/id6741874026/reviews.md

## What is mDNSShark?

mDNSShark is a network scanner for your WiFi and LAN. It finds every device with Bonjour, mDNS, SSDP, ARP and a port scan, names cameras, speakers, smart home gear and NAS boxes, and flags risky open ports. Capture your phone's packets, export a PCAP, and optionally inspect HTTPS. Open source, no account, no tracking: every scan runs on your iPhone.

FOR CURIOUS MINDS
Ever wondered what your TV, thermostat or camera is saying on your network? mDNSShark shows you: what a device announces about itself, which ports answer, and what your phone talks to. Built by engineers for the curious minded and explorers, with literal values and nothing hidden.

WHAT YOU GET
- Device discovery: Bonjour/mDNS, SSDP/UPnP, an ARP table read and a light sweep of your own subnet, with MAC vendor lookup. A long list of Bonjour service types is browsed, including cameras, Matter, Thread, appliances and 3D printers.
- See what a device says about itself: TXT records are listed exactly as received, and vendors come from the device's own claim or its MAC.
- Topology: a map of how devices connect, centered on your gateway, with devices on other networks shown apart. A Networks sheet lists this phone's networks, gateways and off-network devices.
- Security assessment: flags risky exposed services such as Telnet, FTP, SMB and RTSP, and checks device manufacturers against CISA's Known Exploited Vulnerabilities catalog and the NVD. Only ports confirmed by a real connection are listed as open.
- Probe this device: on request, and behind a confirmation, send the standard probes to a single address on another network. Devices that were never probed say Not probed.
- Home Screen and Lock Screen widgets: Devices Online, Scan Now and Security at a Glance. On iOS 26 and later, Scan Now starts a scan right from the widget.
- Packet capture: see which servers your phone talks to (DNS lookups, IP addresses, ports), capture mDNS traffic, and export to pcap for Wireshark.
- TLS Inspection (optional subscription): decrypt and read your own device's HTTPS traffic using a certificate you install and trust, with a bypass list for apps you want left alone.

PRIVACY
Scans and analysis run on your phone. Your device list and scan results are never uploaded; only vendor names are sent to the NVD when you tap Refresh CISA Data. Widgets read a snapshot stored on your device. There is no telemetry, no analytics, and no trackers. Two things leave your device, and both are visible to you: while Packet Capture is on, DNS lookups go to the resolver you choose (Google Public DNS by default), and the Refresh CISA Data button you tap yourself downloads CISA's public catalog and asks the NVD about device vendors seen on your network. Discovery needs only local network access; Packet Capture also asks you to allow a VPN configuration.

SUPPORT ACTIVE DEVELOPMENT
The optional TLS Inspection subscription helps fund active development of mDNSShark: new features, fixes and upkeep.

SUBSCRIPTION
TLS Inspection Monthly is an auto-renewing monthly subscription. The price and any free trial are shown in the app before you subscribe. Payment is charged to your Apple Account at confirmation of purchase, or when a free trial ends. The subscription renews automatically unless you cancel at least 24 hours before the end of the current period. Manage or cancel any time in Settings > Apple Account > Subscriptions. Discovery, scans, and the Security tab are free.

OPEN SOURCE AND YOUR VOICE
mDNSShark is built in the open and your ideas shape it. Found a bug or want a feature? Open an issue and tell us. Contributions are welcome too.
Bugs and feature requests: https://github.com/Shapehaven-Innovations/mDNSShark/issues
Source code: https://github.com/Shapehaven-Innovations/mDNSShark

Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Privacy Policy: https://shapehaveninnovations.com/privacy.html

## Key features

- Device discovery (Bonjour, mDNS, SSDP, ARP)
- Port scanning and security assessment
- MAC vendor lookup
- Network topology mapping
- Packet capture and export (PCAP)
- Optional TLS inspection for HTTPS traffic
- Home and Lock Screen widgets

## Pricing and in-app purchases

Base price: Free.

**Subscriptions**

| Subscription | Price | Period |
| --- | --- | --- |
| TLS Inspection Monthly | $1.99 | per month |


## Is mDNSShark safe?

Not enough ratings yet to assess mDNSShark.

## Is mDNSShark legit?

mDNSShark: Network Scanner appears legitimate, with a few gaps. The AppsHunter Legitimacy Score for mDNSShark is 78 out of 100 points across 7 verification signals from App Store and developer data.

## Recent user reviews (1 of 1)

All indexed reviews: https://appshunter.io/ios/app/mdnsshark-network-scanner/id6741874026/reviews.md

### 5/5 — Superb tool

*2026-10-26*

A gem of a network scanner tool.

**Developer response:** Thank you for your feedback! Happy to hear the tool is useful to you.

## Frequently asked questions about mDNSShark

### What devices can mDNSShark discover on my network?

mDNSShark can discover devices using Bonjour/mDNS, SSDP/UPnP, and ARP. It identifies cameras, speakers, smart home gear, NAS boxes, and more, including those supporting Matter and Thread.

### Does mDNSShark have ads?

No, mDNSShark is ad-free. The app is developed by engineers for curious minds and does not include advertisements.

### How does mDNSShark assess network security?

It flags risky open ports like Telnet and FTP, and checks device manufacturers against known vulnerability catalogs. Only ports confirmed by a real connection are listed as open.

### Can mDNSShark capture and export network traffic?

Yes, mDNSShark allows you to capture your phone's network packets, see server connections, and export traffic to PCAP format for analysis with tools like Wireshark.

### What is the optional TLS Inspection subscription?

The TLS Inspection subscription allows you to decrypt and inspect your own device's HTTPS traffic. This feature helps fund active development and offers a bypass list for specific apps.

### Is mDNSShark available on multiple platforms?

Based on the provided data, mDNSShark is currently supported on iPhones. Information about other platforms is not available.

### How often is mDNSShark updated?

The latest version of mDNSShark is 1.11, and it was last updated on November 12, 2026. This indicates a recent update, suggesting ongoing development and maintenance.

### What is the pricing for mDNSShark?

mDNSShark is free to download and use. The optional TLS Inspection subscription is priced at $1.99 per month, with a 3-day free trial.

## Version history (last 5 releases)

### 1.11 — 2026-11-12

What's New

- Bluetooth detection: scan nearby Bluetooth devices from the Devices tab, with a floating scan button and a Bluetooth filter.
- Unnamed Bluetooth devices now get a name and type from their advertisements and a bundled device list. A device that advertises two ways shows up once.
- Apple Find My beacons and trackers are labeled clearly, and the app never connects to them.
- Swipe right on a Bluetooth row to add it, swipe left to remove it. Rows are more compact.
- New Devices Online, Scan Now and Security at a Glance widgets for the Home Screen and Lock Screen.
- Better router detection: the app asks the system for your default gateway instead of guessing.
- Devices on a different network than your phone are flagged with an Other network badge.
- Many more Bonjour types, including cameras, Matter and Thread, with better names and types for speakers, smart home gear and NAS devices.
- New teal app icon with dark and tinted variants.

### 1.10 — 2026-11-03

Whats new in 1.10:

WIDGETS
• Devices Online and Scan Now widgets in small and medium sizes, with the number of devices, a bar chart by type and how old the scan is. On iOS 26, Scan Now runs a scan right from the widget.
• Security at a Glance widget in small, medium and large, plus lock screen versions.

DISCOVERY
• Bonjour now finds sixty more service types, including cameras, Matter, Thread, appliances and 3D printers.
• Better device names and types: speakers, smart home gear and NAS get their own chips, and a Mac stays a computer.
• The default gateway now comes from the system, and the header shows your real subnet.
• Devices on other networks get an Other network badge and a note explaining it.
• UPnP device names are read from the device itself.

TOPOLOGY
• The gateway or an on-network device is the hub, with off-network devices shown apart.
• New Networks sheet lists this phone's networks, gateways and off-network devices.

PACKET CAPTURE
• mDNS traffic is now captured and exported in the pcap.
• New Decrypted only filter.

BUG FIXES
• A port 80 that only redirects to HTTPS is now described as a redirect, not as unencrypted HTTP.
• Ports advertised over Bonjour or SSDP are no longer shown as open. Only ports confirmed by a connection count, and port 53 is now checked.
• Device names and types now match between scans and tabs.
• Denying Local Network permission now shows a banner with an Open Settings button instead of failing silently.
• TLS captures: the packet count now matches the pcap, and decrypted requests are numbered separately so Wireshark frame numbers stay in step.
• TLS bypass list matches now pass through to the real server untouched instead of being closed.
• Devices stay on screen during a rescan, and Bonjour services on a second address no longer appear as separate devices.
• Devices badges say findings, matching the Security tab.

A note from the Developers:
Widgets are still in development, so layouts, sizes and refresh behavior will keep changing. iOS limits how often a widget can redraw, so values can lag by a few minutes, and a widget says "Out of date" or "Last update" when it is behind. Tapping Scan on a widget runs a scan without opening the app on iOS 26 and later, and opens the app on earlier versions. We are also exploring a Live Activity on the Lock Screen and in the Dynamic Island to show packet capture in near real time. New Devices, Device Mix and Mini Topology widgets are planned for a later update.

### 1.9 — 2026-10-26

What's New in 1.9

Devices
- Device rows now update when a MAC address, manufacturer, or inferred OS arrives later in a scan.
- New OS hints for Espressif IoT devices, LG webOS TVs, and Amcrest cameras.
- Devices that advertise Apple Continuity services are now identified as Apple devices, with a generic Apple icon unless the model identifies an iPhone or iPad.
- Added discovery for three more Apple services.

Security
- The Findings count is now labelled "Findings" and shown in blue, so it is no longer confused with the number of vulnerable devices.
- Analysis recommendations count distinct devices, using the same rule as the "vulnerable" count in the header. Vendor advisories no longer inflate it.
- Exposed VNC and RDP are now rated Warning instead of Critical, and services advertised over Bonjour are now Informational.
- Fixed TLS bypass matching: listed domains are now recognized from DNS lookups, and look-alike domains no longer match.
- The Security tab footer is now a single Refresh button with one status line showing when threat data was last updated. Privacy and data source notes moved to Settings.
- TLS error banners now use plain language.

Certificates and capture
- Remove Certificate now asks for confirmation. Afterward, an alert explains that the iOS profile stays installed and has an Open Settings button. To finish, go to Settings > General > VPN & Device Management and remove the mDNSShark profile.
- New Delete Capture option.
- Exported pcap and metadata files now share a matching name.
- DNS queries and responses are labelled in the packet list.

Appearance
- The in-app theme switch is removed. The app now always follows your system Light or Dark setting.

### 1.8 — 2026-10-06

What's new in 1.8

• Better device discovery: devices that advertise more than once, such as Macs using AirPlay, now appear as a single entry instead of duplicates.
• Apple devices are now recognized and labeled as Apple, and Macs show a laptop icon.
• Apple is now included in the known-vulnerability data.
• Vendor advisories now appear as a small info badge on a device in the Topology view instead of changing its color, so a device's color reflects only issues found on that device.
• The "vulnerable" count in the header now counts only devices with warning or critical findings, not informational notes.
• Added more complete network discovery on supported networks.
• TLS Inspection now skips iCloud's gateway by default, so iCloud sync is not interrupted during a capture.
• Fixed a Bonjour browse error and improved scan reliability.

### 1.7 — 2026-10-05

What's New in 1.7

- Vulnerability checks now use live CISA and NVD data, covering 27 vendors including AT&T/Spectrum gateway hardware and GL.iNet routers
- Fixed devices being wrongly flagged critical just for running FTP, Telnet, or VNC
- Security refresh is now much faster
- CVE details are now tappable tags linking to official info, not a wall of text
- Fixed a bug hiding open ports on some routers/IoT devices

## Apps similar to mDNSShark

| App | Rating | Price | Category |
| --- | --- | --- | --- |
| [Network Scanner & IP,PORT,WİFİ](https://appshunter.io/ios/app/network-scanner-and-ipportwifi/id6761184510) | — | Free | Utilities |
| [Network Intrusion Detection](https://appshunter.io/ios/app/network-intrusion-detection/id6758225763) | — | Free | Utilities |
| [PocketAdmin – IT Toolkit](https://appshunter.io/ios/app/pocketadmin-it-toolkit/id6791697694) | 5.0 (2) | Free | Utilities |
| [KozBon](https://appshunter.io/ios/app/kozbon/id1193790136) | 5.0 (5) | Free | Utilities |
| [Network Tools/Toolkit](https://appshunter.io/ios/app/network-toolstoolkit/id6743007628) | — | Free | Utilities |
| [Next Dash Dns - NextDNS remote](https://appshunter.io/ios/app/next-dash-dns-nextdns-remote/id6738365453) | 3.0 (2) | Free | Utilities |

## More apps by ShapeHaven Innovations LLC

- [Joke Assembly: Daily Dad Jokes](https://appshunter.io/ios/app/joke-assembly-daily-dad-jokes/id6502868916)
- [WordFlora: Word Garden Game](https://appshunter.io/ios/app/wordflora-word-garden-game/id6677005015)
- [Simple-Task](https://appshunter.io/ios/app/simple-task/id6714447993)
- [Interval(x)](https://appshunter.io/ios/app/intervalx/id6739734149)
- [RhythmX: Period Tracker](https://appshunter.io/ios/app/rhythmx-period-tracker/id6740507389)

All apps by ShapeHaven Innovations LLC: https://appshunter.io/developer/1747127977

## Related topics

[mdnsshark](https://appshunter.io/ios/topics/mdnsshark) · [mdns discovery](https://appshunter.io/ios/topics/mdns-discovery) · [wireshark](https://appshunter.io/ios/topics/wireshark) · [learn wireshark](https://appshunter.io/ios/topics/learn-wireshark)

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-11-12.*