Netmin

Examples and testing guide

Sample inputs for Netmin 26.10 and all 84 diagnostic tools.

Netmin runs checks you choose on your Mac. No Netmin account, login, or sample-file import is needed. This page and the sample text file have stable public addresses and are available without signing in.

Quick start · Results and controls · Local network · Trial and Pro · All tools

A five-minute walkthrough

  1. Open Netmin and accept the first-launch trial notice. The notice does not start a subscription or request payment.
  2. Press ⌘K, type a tool name from the table, and select it in the sidebar.
  3. Enter its sample input. Leave Use custom resolver off for the first DNS check.
  4. Press ⌘Return or click the run button. Output appears as the check runs, followed by its result.
  5. Press ⌘1 for Overview or ⌘2 for Raw Output. Use New Lookup or Escape after completion to try another tool.
ToolInputWhat to look for
DNS Amin.toolsOne or more published IPv4 addresses.
HTTP Headershttps://min.tools/netmin/examples/sample.txtA successful HTTP response with headers.
TLS Certificatemin.toolsCertificate identity, issuer, validity, and fingerprint.
Mail MXmin.toolsMail-server records and priorities.
CIDR Calculator192.0.2.0/28A 16-address subnet calculated locally.
MAC Formatter02-00-00-00-00-0102:00:00:00:00:01.

For a combined report, choose Network Lookup, enter min.tools, select Quick, and run it. Exact addresses, certificates, timings, and registry data can change. Optional sections may be empty or unavailable.

Results and controls

Use the result header to switch between Overview and Raw output. The Copy Result menu offers raw output, the command, and a structured summary. During the trial or with Pro, use Save Report to export a text file to a location you choose.

To check cancellation, start Network Lookup with Full selected, then click Stop or press Escape while it is running. Start a new lookup afterward. The sidebar search, recent targets, window resizing, and light/dark appearance remain available throughout normal use.

An empty DNS answer, a closed port, a refused connection, and an unsupported service are diagnostic results. They do not require an account or indicate that a feature is locked. A timeout can mean the network blocks that traffic or the destination does not respond. Raw output shows the details.

Local-network setup

Choose Interface Inventory, Gateway and Routes, or DNS Configuration for an immediate view of the reviewing Mac's own network. These tools need no target.

For Local Device Sweep, use an isolated test network you manage, select one of the detected ranges, then run the check. Allow macOS Local Network access when prompted. If permission was denied, enable Netmin under System Settings → Privacy & Security → Local Network.

For positive discovery results, connect a test device to the same network: a Bonjour-capable printer or Mac for Bonjour, a UPnP-enabled router or TV for SSDP, or a Windows/SMB device advertising NetBIOS for Windows Name Discovery. Enter that device's hostname for the last tool. Guest Wi-Fi isolation, VPNs, absent devices, and disabled services can prevent discovery. A public website cannot substitute for a device on the reviewing Mac's LAN.

Trial, purchases, and legal links

The free download includes 30 days of Pro access. During the trial, all tools, structured reports, export, summary copying, and unlimited diagnostic requests are available. No subscription starts automatically.

Open Netmin → Netmin Pro… to view the yearly subscription, lifetime purchase, and Restore Purchases. App Review can exercise purchases using Apple's sandbox purchase flow. After the trial, Free retains all tools and raw output with five new requests per day; a verified Pro purchase restores unrestricted access. Reinstalling should not be used as a way to reset access.

The purchase window's bottom row contains Terms of Use (EULA) and Privacy Policy. These links can be opened without buying anything.

Inputs for all 84 tools

Expand a group to find its tools. The quick-start examples are the easiest starting point. The reference also identifies optional records, expected negative examples, and tools that require a particular device or service.

Reports
ToolExample input or setupExpected behavior
Network Lookupmin.tools; Depth: QuickA combined DNS, address, and ownership report. Full adds reachability and service checks; those results depend on the target.
Site Reportmin.toolsDNS, HTTPS, and certificate sections. Unavailable SSH or mail services are reported separately; a website need not provide those services.
My Network ReportNo inputA report about the Mac's current connection. Addresses and interfaces depend on the review network.
My Public IPNo inputThe public address seen by an external IP lookup service.
Local Network
ToolExample input or setupExpected behavior
Local Device SweepSelect a detected test networkAllow Local Network access. Select only a test network you manage; devices and services must be present to appear. See local setup below.
ARP TableNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
IPv6 NeighborsNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
Bonjour ServicesNo inputAdvertised service types on the local test network. An empty result means no matching announcements were received.
SSDP/UPnP DiscoveryNo inputResponses from a UPnP-enabled router, TV, or other device on the same test network. See local setup below.
Windows Name DiscoveryYour test Windows/SMB device's hostnameIts advertised NetBIOS name and workgroup. Requires a device with that service enabled; a website cannot supply this result.
Gateway and RoutesNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
DNS ConfigurationNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
DHCP LeaseNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
Wi-Fi DiagnosticsNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
Interface InventoryNo inputInformation from this Mac. Empty neighbor caches, no IPv6, no DHCP lease, or an Ethernet-only connection can leave a section empty.
IP, Routing and Registration
ToolExample input or setupExpected behavior
IP Information1.1.1.1Public address information, registry data, or its reverse-DNS name. This performs a lookup, not a device scan.
RDAP IP1.1.1.1Public address information, registry data, or its reverse-DNS name. This performs a lookup, not a device scan.
RDAP Domainmin.toolsPublic registration data. Redacted registrant fields and registry referrals are normal.
WHOISmin.toolsPublic registration data. Redacted registrant fields and registry referrals are normal.
ASN and BGP LookupAS13335Public routing information for the example network.
RPKI ValidationTarget: AS13335; IP prefix: 1.1.1.0/24Route-origin authorization status from the public registry service.
Reverse DNS1.1.1.1Public address information, registry data, or its reverse-DNS name. This performs a lookup, not a device scan.
Ping127.0.0.1A reachability or route check of the reviewing Mac itself. An external destination can be used on a permitted test network; missing ICMP replies are possible.
Traceroute127.0.0.1A reachability or route check of the reviewing Mac itself. An external destination can be used on a permitted test network; missing ICMP replies are possible.
DNS
ToolExample input or setupExpected behavior
DNS Zone Discoverymin.tools; Depth: QuickA report assembled from published DNS records. A partial result is expected when optional records are absent; complete zone contents are not required.
DNS Zone Transferlocalhost (negative example)No usable authoritative public zone is available for this local name. A successful transfer requires a test zone whose administrator allows transfers; ordinary public domains usually refuse them.
DNS Amin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS AAAAmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS CNAMEwww.min.toolsAn alias record if one is published. A hostname that publishes A/AAAA directly can have no CNAME.
DNS NSmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS SOAmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS TXTmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS CAAmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS SRV_submission._tcp.min.toolsA mail-submission service record, if published. No matching answer is a valid result.
DNS NAPTRmin.toolsOptional service-rewrite or geographic records. No matching answer is a valid result.
DNS LOCmin.toolsOptional service-rewrite or geographic records. No matching answer is a valid result.
DNS HTTPSmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS SVCBmin.toolsPublished records of the selected type. A successful query with no answers means the domain does not publish that record type.
DNS TLSA_443._tcp.min.toolsCertificate-association records or their validation status. A site using ordinary HTTPS may publish no TLSA records.
DNS Propagationmin.toolsDNS answers from the selected public resolvers or encrypted DNS endpoint. Resolver access depends on the review network.
DNS over HTTPSmin.toolsDNS answers from the selected public resolvers or encrypted DNS endpoint. Resolver access depends on the review network.
DNSSEC DScloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNSSEC DNSKEYcloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNSSEC Checkcloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNSSEC Validationcloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNSSEC Chain Tracecloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNS NSEC Walk Checkcloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
DNS Tracecloudflare.comPublished DNSSEC data, validation, or delegation information. Some direct queries can be blocked by the review network; NSEC3 is a normal alternative to NSEC.
Mail
ToolExample input or setupExpected behavior
Mail MXmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail SPFmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail DMARCmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail DKIMreview._domainkey.min.tools (negative example)No answer is expected for this sample selector. A positive check requires the exact selector supplied by the administrator of a mail domain.
Mail BIMImin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail MTA-STSmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail TLS-RPTmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail Autodiscover SRVmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail Submission SRVmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail IMAPS SRVmin.toolsPublished mail routing or policy records. Optional policies and service records may be absent; Netmin reports that outcome.
Mail TLS Reportlocalhost (negative example)Connection results for mail services on the reviewing Mac. Closed ports are expected unless a local mail test service is running. For positive handshakes, use a mail test server you manage.
SMTP STARTTLSlocalhost:25 (negative example)A local connection refusal when no SMTP test service is running. A positive STARTTLS test requires a mail server offering it on the specified port.
DANE Validation_443._tcp.min.toolsCertificate-association records or their validation status. A site using ordinary HTTPS may publish no TLSA records.
TLS, Web and Ports
ToolExample input or setupExpected behavior
TLS Certificatemin.toolsThe website's certificate details or negotiated TLS connection.
TLS Handshakemin.toolsThe website's certificate details or negotiated TLS connection.
TLS Service Handshakemin.tools:443The certificate chain or selected TLS protocol. Protocol support depends on both the system TLS utility and the server.
TLS Certificate Chainmin.tools:443The certificate chain or selected TLS protocol. Protocol support depends on both the system TLS utility and the server.
TLS 1.2 Handshakemin.tools:443The certificate chain or selected TLS protocol. Protocol support depends on both the system TLS utility and the server.
TLS 1.3 Handshakemin.tools:443The certificate chain or selected TLS protocol. Protocol support depends on both the system TLS utility and the server.
DNS over TLS Endpointone.one.one.oneTLS connection details for a public DNS-over-TLS endpoint. The network must allow outbound TCP 853.
HTTP Headershttps://min.tools/netmin/examples/sample.txtResponse headers, any published security headers, or HTTP status and protocol. The sample text file returns a normal successful response.
HTTP Security Headershttps://min.tools/netmin/examples/sample.txtResponse headers, any published security headers, or HTTP status and protocol. The sample text file returns a normal successful response.
HTTP Protocolhttps://min.tools/netmin/examples/sample.txtResponse headers, any published security headers, or HTTP status and protocol. The sample text file returns a normal successful response.
Security.txtmin.toolsThe published policy file, or a clear missing-document result. Not every website publishes security.txt.
Robots.txtmin.toolsThe published policy file, or a clear missing-document result. Not every website publishes security.txt.
HSTS Preload Statusmin.toolsPublic preload status or certificate-log data. External service availability can affect the result.
Certificate Transparencymin.toolsPublic preload status or certificate-log data. External service availability can affect the result.
TCP Port Checkmin.tools:443A successful connection to the website's HTTPS port.
Common Port Scan127.0.0.1Open/closed results for common ports on the reviewing Mac only. All ports may be closed; use an isolated managed test host for positive service examples.
SSH Host Keyslocalhost (negative example)No keys if Remote Login is disabled. A positive result requires a managed SSH test host; do not enable remote access solely to follow this guide.
Utilities
ToolExample input or setupExpected behavior
CIDR Calculator192.0.2.0/28The subnet boundaries and size, calculated locally. This documentation address is not contacted.
IP Range Expander192.0.2.0/30Four documentation addresses, expanded locally without contacting them.
Punycode Converterxn--bcher-kva.exampleThe Unicode form bücher.example; no live website is required.
MAC Formatter02-00-00-00-00-0102:00:00:00:00:01, calculated locally.
NTP Offsettime.apple.comClock-offset information if the network permits NTP traffic.
Network QualityNo inputUpload, download, and responsiveness measurements for this connection. This test transfers data and takes longer than a DNS lookup.

Report a problem

If a step fails, include the tool name, sample input, Netmin and macOS versions, and the message shown in Raw output when contacting support. Remove private addresses and diagnostic data before posting publicly.