mDNSShark

Version 1.3 brings meaningful improvements to TLS inspection reliability and overall stability. The TLS inspection engine has been significantly hardened. The certificate cache now enforces a maximum size of 200 entries with automatic eviction, preventing memory and keychain growth during extended capture sessions. The bypass list logic has been corrected so that entries now match exact domain names or true subdomains rather than any suffix match, which eliminates false bypasses for domains that share a common ending. Drop count tracking is now thread-safe, resolving a race condition that could cause inaccurate counts when multiple TLS sessions closed simultaneously. Packet capture reliability has been improved. A bundle identifier mismatch between the VPN tunnel extension and the main app configuration has been fixed, which in some cases prevented the tunnel from starting entirely and caused the packet list and analysis screen to show no data. The PCAP export writer received a patch that corrected a file corruption issue affecting certain capture sessions. The app group settings bridge between the main app and the network extension now uses structured logging instead of a debug assertion when the shared container is unavailable, making diagnostic output more useful in production builds. Several deprecated API calls have been updated to their modern equivalents across the codebase. Cross-file type resolution issues involving the packet model have been resolved, improving build reliability. The launch screen has been refactored for cleaner presentation on all supported device sizes. Note: All information and features are provided for educational purposes.