man netbuddy
Network diagnostics for macOS, the field engineer's toolkit in one native app.
Built for IT people, MSP technicians and network engineers who troubleshoot networks on site. Instead of a drawer full of command-line tools, websites and separate utilities, NetBuddy puts them in one window, with a sidebar grouped into Generic, WAN, LAN and Wi-Fi tools.
macOS 14 Sonoma or later, Apple silicon or Intel.
Signed with a Developer ID and notarized by Apple.
Findings in plain language
Each tool explains what is wrong and what to do about it: a rogue DHCP server, double NAT, a missing IGMP querier, an SPF record over its lookup limit or a clock that's off far enough to break Kerberos.
Site Check and reports
One click checks link, Wi-Fi, DHCP, switch port, gateway, DNS, internet, NAT, IPv6, time, MTU and speed. Compare runs side by side and export a branded PDF or HTML report for your customer.
Native and out of your way
A SwiftUI app with a small helper you approve once, so you aren't asked for your password every time. In the menu bar, the icon turns green, yellow, amber or red while a ping runs.
Everyday diagnostics
- Site Check – one-click on-site test with pass/warn/fail per step, saved runs, before/after comparison and reports with your logo.
- Overview – interfaces, gateway and DNS, connectivity checks, public IP with provider, AS number and WHOIS, plus NAT and SIP ALG detection.
- Ping – several targets at once with live charts, jitter and loss from the last minute up to the last day.
- Traceroute and Hop Discovery – the path with AS numbers and names, and an mtr-style view of loss and latency per hop.
- Throughput – internet speed and bufferbloat, iperf3 client and server, and a VoIP call-quality (MOS) estimate.
DNS, mail and services
- DNS Lookup and DNS Health – dig-style lookups, resolver comparison and monitoring, DNSSEC, NXDOMAIN hijacking, DNS interception and DNS over TLS.
- Email Check – MX, SPF (including the 10-lookup limit), DMARC, DKIM, MTA-STS, TLS-RPT, BIMI, DNSSEC, blocklists and STARTTLS on port 25.
- TLS & HTTPS – certificate chain, expiry, TLS versions and ciphers, HSTS and HTTP timing.
- NTP Check – clock offset against several time servers, and whether NTP gets through at all.
- Port Scan – open, closed and filtered ports on hosts, ranges and subnets, including custom ports.
LAN and switching
- LAN Scanner and Device Finder – every device on the subnet with MAC, vendor and open ports, plus new and reset gear like UniFi, MikroTik, printers and ONVIF cameras.
- IP Profiles – one-click address profiles that are just as easy to undo.
- DHCP and IPv6 Inspector – every DHCP server with all options decoded, router advertisements, DHCPv6 and rogue RA detection.
- Multicast / IGMP – find the IGMP/MLD querier and test multicast between two devices.
- LLDP / CDP, Spanning Tree and VLAN Scan – your switch and port, the STP root and topology changes, and which VLANs carry DHCP on a trunk.
- Traffic Analyzer and 802.1X – broadcast storms, loops, rogue DHCP, flow control, and a detailed view of 802.1X logins.
WAN, Wi-Fi and devices
- PPPoE Test and MTU & Fragments – log in to a PPPoE line over a VLAN, and find the path MTU and black holes.
- Wi-Fi & Roaming – signal, SNR and channel, access point vendor, a roaming log and co-channel checks.
- SNMP Walk – v1, v2c and v3 (SHA-2, AES) with readable interface, MAC/ARP and LLDP neighbour tables.
- Serial Console – console for switches and firewalls over USB, with presets, Send Break and line-by-line config pasting.
mail rob@robcloud.nl
Questions about NetBuddy?
Want a demo, pricing or just to know if it fits your setup? Send a message and I'll get back to you.