NetSentinel v2.1.49
Security & Verification
Every release is signed and checksummed. Verify before running.
| Check | Result |
|---|---|
| VirusTotal scan | aHR0cHM6Ly9n… |
| SHA256 checksums | SHA256SUMS.txt |
Verify the SHA256 checksum (Windows):
$expected = (Get-Content SHA256SUMS.txt | Select-String 'NetSentinel-Setup').ToString().Split(' ')[0]
$actual = (Get-FileHash 'NetSentinel-Setup-2.1.49.exe' -Algorithm SHA256).Hash.ToLower()
if ($expected -eq $actual) { '✅ OK' } else { '❌ MISMATCH' }Verify the cosign signature (Windows installer):
cosign verify-blob \
--bundle NetSentinel-Setup-2.1.49.exe.bundle \
--certificate-identity-regexp "https://github.com/ossianericson/netsentinel/.*" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
NetSentinel-Setup-2.1.49.exeVerify the cosign signature (MSIX):
cosign verify-blob \
--bundle NetSentinel-2.1.49.msix.bundle \
--certificate-identity-regexp "https://github.com/ossianericson/netsentinel/.*" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
NetSentinel-2.1.49.msixNetSentinel v2.1.49
v2.1.49 (current)
- Fixed device names not showing on App Traffic, Live Bandwidth, and Timeline — devices with a known name previously showed as a bare MAC address on all three
- Fixed IoT Behaviour Baseline raising a "rate spike" alert on ordinary background traffic for devices baselined during a quiet stretch
- Regenerated the Microsoft Store screenshot set, which had gone 23 releases stale, and added automatic verification so a blank or wrong-page capture can no longer slip through silently
- Made the documentation site publishable — internal engineering notes are excluded from the public build, five previously-orphaned pages are now reachable from the site navigation, and several broken links are fixed
Recommended install
winget install NetSentinel.NetSentinelOr download manually:
| Platform | File | Notes |
|---|---|---|
| Windows | NetSentinel-Setup-*.exe |
Installer — adds to Start Menu + PATH. Use winget (above) instead if possible. |
| Windows | NetSentinel-svc.exe |
Background Windows service (not in winget). |
| macOS | NetSentinel-macOS.zip |
GUI — unzip, right-click → Open. |
| macOS | NetSentinel-cli-macOS |
Headless CLI. |
| Linux | NetSentinel |
GUI — chmod +x NetSentinel && sudo ./NetSentinel |
| Linux | NetSentinel-cli-linux |
Headless CLI. |
What it does
One tool that replaces a drawer full of network utilities:
- Rogue device fingerprinting with curated OUI registry (Google, TP-Link, Apple, Amazon, Samsung, LG, PlayStation, Nintendo, Xbox, Roku, Netgear, Asus)
- STP/BPDU rogue Root Bridge detection
- Broadcast & multicast storm analysis
- IoT Behavioral Baseline — learns normal device traffic, alerts on deviations
- Root Cause Correlator — distinguishes ISP fault from local network fault
- Network Grade (A–F) across 8 dimensions — uptime, latency, jitter, DNS, speed, safety, STP, storm
- ISP Accountability Report — HTML export with MTR hop table and outage log for support tickets
- How-to-Fix context menus on every scan result
- Hidden SSID and co-channel WiFi interference detection
- Live ping + DNS latency correlation
- On-demand diagnostics: speed test, DNS leak, traceroute, public IP
- Long-term background connectivity logger with stability scoring
- TCP port scanner, OS fingerprinter, CVE lookup, MTR, and more
- HTML, JSON, CSV, Nmap XML report export