Network + TLS diagnostics

v0.1.9

DNS lookups, reachability probes, TLS certificate inspection, and HTTP timing tests. All read-only. Use for "is X reachable?" and "what's the cert expiry on Y?" questions.

13 allowed by default

Pack ID

network-tls

Vendor

emisar

linux

Actions

Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.


              curl

dig

mtr


              openssl


              ping


              whois

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host

sudo emisar pack install network-tls --hash sha256:308749f5ec0cdd80da06ecb1aa6495365d9220faf5f5c927db92bfd0ac493dc5

Actions 13 total

View on GitHub

net.dig_dnssec exec low

dig +dnssec (DNSSEC validation)

Issues a DNSSEC-validating query. Returns RRSIG records and the AD (authenticated-data) flag if validation succeeded.
View source on GitHub
net.dig_record exec low

dig (DNS lookup)

`dig +short <type> <name> @<resolver>` — look up one DNS record. Type defaults to A; specify AAAA, MX, NS, TXT, CNAME, SRV. Resolver defaults to system default.
View source on GitHub
net.dig_reverse exec low

dig -x (reverse DNS)

`dig -x <ip>` — reverse PTR lookup for an IPv4 or IPv6 address.
View source on GitHub
net.dig_trace exec low

dig +trace (full delegation chain)

`dig +trace` — follow the DNS delegation chain from the root to the authoritative server. Use to debug "the wrong nameservers are answering."
View source on GitHub
net.http_headers exec low

HTTP response headers (curl -I)

Dumps response headers from a URL, following redirects. Use to confirm cache-control / hsts / set-cookie / cors setup. Set insecure=true to skip TLS verification for an internal or self-signed certificate.
View source on GitHub
net.http_probe exec low

HTTP probe with timing

Probes a URL with curl, returning HTTP status, DNS / TCP / TLS / total timings, and bytes transferred. Use as a synthetic check. Set insecure=true to skip TLS verification when the endpoint serves an internal or self-signed certificate (otherwise such a probe reports http_code=000).
View source on GitHub
net.ipinfo_lookup exec low

ipinfo (geo + ASN for an IP)

Looks up an IP at ipinfo.io. Returns city/region/country/org/asn. Outbound HTTP to ipinfo.io required.
View source on GitHub
net.ping_extended exec low

ping (with count + timeout)

Sends N ICMP echo requests with explicit per-probe timeout.
View source on GitHub
net.tls_cert_expiry exec low

TLS cert expiry probe

Connects to host:port with SNI and dumps cert subject, issuer, notBefore, notAfter. Use for "when does this cert expire?" alerts.
View source on GitHub
net.tls_chain_dump exec low

TLS chain dump

Dumps the full certificate chain a server returns. Use to debug "browsers see incomplete chain" errors.
View source on GitHub
net.tls_protocol_check exec low

TLS protocol support check

Probes TLS 1.0/1.1/1.2/1.3 support on host:port one at a time, reporting which versions the server accepts. Use for compliance audits ("is TLS 1.0 still on?"). Runs with OPENSSL_CONF=/dev/null so the host's system MinProtocol floor (TLSv1.2 on Debian) doesn't pre-fail the 1.0/1.1 probes — each result reflects the server, not the client.
View source on GitHub
net.traceroute_mtr exec low

mtr report (route + loss statistics)

`mtr --report` — 5 cycles of traceroute with per-hop packet loss and latency. The combined traceroute + ping report.
View source on GitHub
net.whois_summary exec low

whois (registrar + expiry)

Show filtered whois output — registrar, dates, name servers. Use to check "is this domain about to expire?"
View source on GitHub

← Back to registry

Pack reference Publish your own →