Network Tools

A network engineer's toolkit on your phone. Nineteen tools, no account, no ads, no analytics, and no backend operated by the developer.

THE TOOLS
• Ping — ICMP latency and packet loss, with a live chart
• Traceroute — the hop-by-hop path, each router named
• LAN scan — discover devices on your subnet, including those ignoring ping, with model and MAC where announced
• Port scan — scan up to 65535 ports, distinguish open, closed and filtered, and identify services by their replies; long scans run in the background
• DNS — record types, custom resolvers, DNS-over-HTTPS, reverse lookups, and comparison across five public resolvers
• HTTP check — status, redirect chain, the DNS/connect/TLS/TTFB split, security headers
• TLS — the full certificate chain, expiry, SANs, cipher suite, and whether the system trusts it
• WHOIS — follow referrals to the registrar holding the record
• Wi-Fi — signal, band, channel and link rate; a walking survey; nearby channels, router details, security and channel recommendations
• Speed test — download, upload, latency and jitter, against Cloudflare or a URL you name
• iperf3 — throughput against your own iperf3 server, up or down, multi-stream
• IP calculator — CIDR maths, masks, host ranges, binary, and subnet division including VLSM
• MAC lookup — 39,000 vendor prefixes, fully offline
• Wake on LAN — send a magic packet to wake a sleeping machine
• Network interfaces — addresses, subnets, flags and live throughput
• App traffic — per-app data usage, live connections and DNS lookups, and optional packet recording for Wireshark
• Cellular — the serving cell, its band and frequency, signal over time, neighbours, handovers, and whether you are behind carrier NAT
• Telnet — a raw TCP terminal for switches, PDUs and console servers
• SSH — see below

SSH CLIENT
• Jump hosts — connect through one bastion or a chain, confirming each host key
• Port forwarding — open a remote service through a local port in any browser
• scp — upload files or download them to your Download folder
• ssh-copy-id — install your public key on a server
• Keys — generate ed25519 or import ed25519, ECDSA and RSA in OpenSSH or PEM form. Private keys are encrypted with Android Keystore protection, excluded from backups, and exportable under a passphrase
• Snippets — saved commands above the keyboard
• VT/xterm terminal for vim and htop, with esc, ctrl, alt, arrows and F-keys

APP TRAFFIC AND VPN USE
Network Tools uses Android's VpnService for App traffic's live network diagnostics. A local VPN is needed to observe other apps' connections and DNS lookups, identify the originating app, and count sent and received bytes without root access. Everything mode monitors internet connections; Lookups only mode monitors DNS queries alone. Traffic is forwarded to its original destinations, with DNS queries sent to your network's DNS servers. There is no remote VPN server, and encrypted application content is not decrypted. This is a diagnostic tool, not a VPN for anonymity or changing your location.

Monitoring starts only when you tap Start watching and approve Android's VPN permission, and you can stop it at any time. Connection and DNS logs stay in memory on your device. If you enable Record packets, packets are saved in a private local pcapng file; encrypted content stays encrypted, while plain HTTP and DNS may be readable. Recordings leave the app only when you choose Save or Share. No monitored traffic or logs are uploaded to the developer. Android allows one active VPN, so monitoring replaces another VPN while running.

SIX THEMES
Four dark and two light, including true-black for sunlight and green phosphor for the terminal.

HONEST ABOUT ITS LIMITS
LAN discovery depends on device replies; inferred results show their evidence. Sessions, forwards and transfers keep running in the background, with a notification to end them.