mDNSShark

What's New in 1.9 Devices - Device rows now update when a MAC address, manufacturer, or inferred OS arrives later in a scan. - New OS hints for Espressif IoT devices, LG webOS TVs, and Amcrest cameras. - Devices that advertise Apple Continuity services are now identified as Apple devices, with a generic Apple icon unless the model identifies an iPhone or iPad. - Added discovery for three more Apple services. Security - The Findings count is now labelled "Findings" and shown in blue, so it is no longer confused with the number of vulnerable devices. - Analysis recommendations count distinct devices, using the same rule as the "vulnerable" count in the header. Vendor advisories no longer inflate it. - Exposed VNC and RDP are now rated Warning instead of Critical, and services advertised over Bonjour are now Informational. - Fixed TLS bypass matching: listed domains are now recognized from DNS lookups, and look-alike domains no longer match. - The Security tab footer is now a single Refresh button with one status line showing when threat data was last updated. Privacy and data source notes moved to Settings. - TLS error banners now use plain language. Certificates and capture - Remove Certificate now asks for confirmation. Afterward, an alert explains that the iOS profile stays installed and has an Open Settings button. To finish, go to Settings > General > VPN & Device Management and remove the mDNSShark profile. - New Delete Capture option. - Exported pcap and metadata files now share a matching name. - DNS queries and responses are labelled in the packet list. Appearance - The in-app theme switch is removed. The app now always follows your system Light or Dark setting.