Tools

Fill in the target, then tap the floating button. While a tool runs, that button is Stop. A tool marked unavailable is complete but cannot run right now, for example when iOS refuses the ICMP socket for Ping.

Updated 5 October 2026

Ping

Measure ICMP echo round-trip time from this device.

  1. Enter an IPv4 address, IPv6 address or host name.
  2. Tap Ping. Tap Stop to request cancellation and keep replies collected so far.

What the result means

Statistics cover replies that arrived. Lost echoes are counted, not plotted as 0 ms. No reply means no reply. Many networks drop ICMP. Try Port Scan or Diagnose Host if you need a TCP check.

Port Scan

Check which TCP ports accept a connection from this device.

  1. Enter the host.
  2. Choose a preset or type a list such as 22,80,443 or a range such as 1-1024.
  3. Tap Scan.

What the result means

Open: the connection completed. Refused: the host answered with a reset. No response: nothing came back before the timeout. Policy block: iOS refused the connection before it left the device. No response is not proof the host is offline.

DNS Lookup

Query records with the system resolver or a resolver you type.

  1. Enter a name, or an IP address for a PTR lookup.
  2. Leave the resolver empty for the system resolver, or enter an IP address to query that resolver directly.

What the result means

A custom resolver is queried over UDP with TCP fallback. Only the address you enter is contacted.

Diagnose Host

Resolve, connect, TLS and HTTP in one pass, with the evidence for each step. Ping is included only if you enable it.

  1. Enter a host or URL and the port for the TCP step.
  2. Tap the diagnose button.
  3. If a stage fails, use Retry or Skip on that row. Skip is recorded. Diagnose again starts over.

What the result means

Each stage has its own result. A failed stage is not hidden.

TLS & HTTP Check

Certificate chain, protocol, cipher and the HTTP response of an HTTPS endpoint.

  1. Enter a URL, host name or IP address.
  2. Run the check.

What the result means

Trust uses the system rules. Nothing is bypassed.

RDAP / WHOIS

Registration data for a domain or an IP range.

  1. Enter a domain name or an IP address.
  2. Run the lookup.

What the result means

The query goes to the registry. RDAP is used, with WHOIS on TCP port 43 as fallback. Only the IANA bootstrap list is cached, for seven days. The registry sees your source address and the query.

Wake on LAN

Send a unicast magic packet. There is no broadcast path.

  1. Enter the MAC address the device reported, and the IPv4 or IPv6 address on the same network.
  2. Send the packet.

What the result means

The target must support Wake on LAN. ACNet reports only that the datagram left the socket, not that the device woke.