Skip to content

NetSentinel v2.2.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 08:30
· 3 commits to main since this release
v2.2.6
a062787

Security & Verification

Every release is signed and checksummed. Verify before running.

Check Result
VirusTotal scan aHR0cHM6Ly9n…
SHA256 checksums SHA256SUMS.txt

Verify the SHA256 checksum (Windows):

$expected = (Get-Content SHA256SUMS.txt | Select-String 'NetSentinel-Setup').ToString().Split(' ')[0]
$actual   = (Get-FileHash 'NetSentinel-Setup-2.2.6.exe' -Algorithm SHA256).Hash.ToLower()
if ($expected -eq $actual) { '✅ OK' } else { '❌ MISMATCH' }

Verify the cosign signature (Windows installer):

cosign verify-blob \
  --bundle NetSentinel-Setup-2.2.6.exe.bundle \
  --certificate-identity-regexp "https://github.com/ossianericson/netsentinel/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  NetSentinel-Setup-2.2.6.exe

Verify the cosign signature (MSIX):

cosign verify-blob \
  --bundle NetSentinel-2.2.6.msix.bundle \
  --certificate-identity-regexp "https://github.com/ossianericson/netsentinel/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  NetSentinel-2.2.6.msix

NetSentinel v2.2.6

v2.2.6 (current)

  • Fixed device alerts being identified by IP address instead of MAC — on an address shared by two devices (routine after a DHCP lease is reused), acknowledging one device's alert silently muted a different one
  • Fixed passive device identification attributing observations to the wrong device, which could relabel a powered-off TV as a router and then a smart speaker
  • Fixed jitter never being measured for your router, leaving the Jitter High rule with no local data
  • The RTT Anomaly rule is now on by default — it learns each host's own normal latency rather than using a fixed threshold, measured at 0.15 alerts/day. Your own saved notification choices are untouched
  • An address claimed by several devices now shows as the plain address rather than guessing one of their names

About

NetSentinel — Network Security Scanner & Connectivity Monitor

NetSentinel will always remain free and open source.

If you find this tool valuable, please consider supporting:

Built by Ossian Ericson · GitHub

Disclaimer: For use on networks you own or have explicit authorization to test.

License

MIT — see LICENSE.

Recommended install

winget install NetSentinel.NetSentinel

Or download manually:

Platform File Notes
Windows NetSentinel-Setup-*.exe Installer — adds to Start Menu + PATH. Use winget (above) instead if possible.
Windows NetSentinel-svc.exe Background Windows service (not in winget).
macOS NetSentinel-macOS.zip GUI — unzip, right-click → Open.
macOS NetSentinel-cli-macOS Headless CLI.
Linux NetSentinel GUI — chmod +x NetSentinel && sudo ./NetSentinel
Linux NetSentinel-cli-linux Headless CLI.

What it does

One tool that replaces a drawer full of network utilities:

  • Rogue device fingerprinting with curated OUI registry (Google, TP-Link, Apple, Amazon, Samsung, LG, PlayStation, Nintendo, Xbox, Roku, Netgear, Asus)
  • STP/BPDU rogue Root Bridge detection
  • Broadcast & multicast storm analysis
  • IoT Behavioral Baseline — learns normal device traffic, alerts on deviations
  • Root Cause Correlator — distinguishes ISP fault from local network fault
  • Network Grade (A–F) across 8 dimensions — uptime, latency, jitter, DNS, speed, safety, STP, storm
  • ISP Accountability Report — HTML export with MTR hop table and outage log for support tickets
  • How-to-Fix context menus on every scan result
  • Hidden SSID and co-channel WiFi interference detection
  • Live ping + DNS latency correlation
  • On-demand diagnostics: speed test, DNS leak, traceroute, public IP
  • Long-term background connectivity logger with stability scoring
  • TCP port scanner, OS fingerprinter, CVE lookup, MTR, and more
  • HTML, JSON, CSV, Nmap XML report export
Assets 12
Loading