mDNSShark vs NetDebug Toolkit

mDNSShark is a network scanner for your WiFi and LAN. It finds every device with Bonjour, mDNS, SSDP, ARP and a port scan, names cameras, speakers, smart home gear and NAS boxes, and flags risky open ports. Capture your phone's packets, export a PCAP, and optionally inspect HTTPS. Open source, no account, no tracking: every scan runs on your iPhone. FOR CURIOUS MINDS Ever wondered what your TV, thermostat or camera is saying on your network? mDNSShark shows you: what a device announces about itself, which ports answer, and what your phone talks to. Built by engineers for the curious minded and explorers, with literal values and nothing hidden. WHAT YOU GET - Device discovery: Bonjour/mDNS, SSDP/UPnP, an ARP table read and a light sweep of your own subnet, with MAC vendor lookup. A long list of Bonjour service types is browsed, including cameras, Matter, Thread, appliances and 3D printers. - See what a device says about itself: TXT records are listed exactly as received, and vendors come from the device's own claim or its MAC. - Topology: a map of how devices connect, centered on your gateway, with devices on other networks shown apart. A Networks sheet lists this phone's networks, gateways and off-network devices. - Security assessment: flags risky exposed services such as Telnet, FTP, SMB and RTSP, and checks device manufacturers against CISA's Known Exploited Vulnerabilities catalog and the NVD. Only ports confirmed by a real connection are listed as open. - Probe this device: on request, and behind a confirmation, send the standard probes to a single address on another network. Devices that were never probed say Not probed. - Home Screen and Lock Screen widgets: Devices Online, Scan Now and Security at a Glance. On iOS 26 and later, Scan Now starts a scan right from the widget. - Packet capture: see which servers your phone talks to (DNS lookups, IP addresses, ports), capture mDNS traffic, and export to pcap for Wireshark. - TLS Inspection (optional subscription): decrypt and read your own device's HTTPS traffic using a certificate you install and trust, with a bypass list for apps you want left alone. PRIVACY Scans and analysis run on your phone. Your device list and scan results are never uploaded; only vendor names are sent to the NVD when you tap Refresh CISA Data. Widgets read a snapshot stored on your device. There is no telemetry, no analytics, and no trackers. Two things leave your device, and both are visible to you: while Packet Capture is on, DNS lookups go to the resolver you choose (Google Public DNS by default), and the Refresh CISA Data button you tap yourself downloads CISA's public catalog and asks the NVD about device vendors seen on your network. Discovery needs only local network access; Packet Capture also asks you to allow a VPN configuration. SUPPORT ACTIVE DEVELOPMENT The optional TLS Inspection subscription helps fund active development of mDNSShark: new features, fixes and upkeep. SUBSCRIPTION TLS Inspection Monthly is an auto-renewing monthly subscription. The price and any free trial are shown in the app before you subscribe. Payment is charged to your Apple Account at confirmation of purchase, or when a free trial ends. The subscription renews automatically unless you cancel at least 24 hours before the end of the current period. Manage or cancel any time in Settings > Apple Account > Subscriptions. Discovery, scans, and the Security tab are free. OPEN SOURCE AND YOUR VOICE mDNSShark is built in the open and your ideas shape it. Found a bug or want a feature? Open an issue and tell us. Contributions are welcome too. Bugs and feature requests: https://github.com/Shapehaven-Innovations/mDNSShark/issues Source code: https://github.com/Shapehaven-Innovations/mDNSShark Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://shapehaveninnovations.com/privacy.html

NetDebug Toolkit is the all-in-one network diagnostics suite for developers, sysadmins, IT teams, and power users. 20 pro-grade tools on iPhone, iPad, and Apple TV. Fast. Focused. No account. No tracking. Diagnose connectivity, DNS, routing, ports, certificates, throughput, and local-network services from one clean interface: NETWORK CORE • Ping : ICMP or HTTP HEAD reachability with timing and packet-loss stats • Traceroute : hop-by-hop route inspection • HTTP(S) Check : status, redirect chain, headers, TLS summary • Speed/Latency Baseline : download/upload presets from 1 MB to 64 MB • iperf3 Client : TCP throughput against an external iperf3 server (upload or download) • Public IP + Geo / ASN / ISP : current WAN IP with carrier and location detail • Path MTU Discovery : largest packet a route carries, black-hole detection, the constricting hop, and safe inner MTU for VPN DNS & DOMAIN • DNS Lookup : forward (host to A/AAAA) and Reverse DNS (IP to PTR), auto-detected from input • DNS Record Explorer : A, AAAA, CNAME, MX, TXT, NS, SRV via DNS-over-HTTPS (custom resolver supported) • Whois : RDAP or IANA WHOIS mode, with chained referrals SECURITY & TLS • TLS Certificate Inspector : full chain, validity, SANs, signature algorithm, weak-cert signals • Subnet Calculator : IPv4 and IPv6, usable host range, broadcast, gateway hints PORTS & CONNECTIVITY • Port Scan : custom ports or ranges • TCP/UDP Connect : per-port reachability with built-in UDP profiles (DNS, NTP, SNMP, SIP, RADIUS, TFTP, memcached) • NTP Time Check : clock offset vs. any NTP server with delay, stratum, and leap details • External Port Check : "can the internet reach me?" TCP port-forwarding test from an outside server (open/closed/filtered) • Run History & Trends : every run is saved on-device with charts of latency, speed, and more over time (free; longer retention with a purchase) LOCAL NETWORK • LAN Scan : fast or deep subnet host discovery • mDNS / Bonjour Browser : AirPlay, HomeKit, Matter, printers, SMB, SSH, and more • UPnP / NAT-PMP Discovery : router gateway port-mapping introspection • Wake-on-LAN Sender : send magic packets to wake compatible devices POWER-USER WORKFLOW • Saved Hosts : store frequently used IPs, hostnames, and MAC addresses with per-host tool defaults • My Automation : chain multiple tools into one-tap workflows with a combined PDF, PNG, or text run report • Export & Import : portable JSON files for automations and saved hosts (iOS share sheet, tvOS QR-code download) • Universal Links & Deeplinks : open any tool from a URL with pre-filled inputs, auto-run, and auto-export, e.g. https://netdebug.developerinsider.co/open/ping?target=1.1.1.1&export=pdf • Copy Deeplink : every tool and saved automation can copy its own shareable Universal Link • Built-in tool docs : quick-reference markdown for every tool APPLE TV / tvOS • Full feature parity : every tool, Saved Hosts, My Automation, and all three in-app purchases ship on Apple TV • LAN-only QR-code export : Apple TV serves run reports and JSON exports over a one-shot HTTP server; scan the QR with your phone to download LOCALIZED IN 21 LANGUAGES English, Arabic, Bengali, Chinese (Simplified), Dutch, French, German, Hindi, Hinglish, Indonesian, Italian, Japanese, Korean, Polish, Portuguese (Brazil), Russian, Spanish, Thai, Turkish, Ukrainian, Vietnamese. OPTIONAL IN-APP PURCHASES One-time, non-consumable, with Family-Sharing support and a single Restore Purchases action: • Remove Ads : disable all banner and interstitial ads • Unlimited Automations : lift the free-tier limit • Remove Ads + Unlimited Automations bundle : discounted starter pack Important: Use only on systems and networks you are authorized to test. Results are best-effort and may vary by network conditions, target configuration, and third-party service availability. Questions or bug reports? https://netdebug.app/support.html