Every device, identified
ARP and IPv6 neighbor sweeps, LLDP, CDP, mDNS, SSDP, SNMP, SMB, TLS and vendor protocols feed an evidence-based classifier with about 170 brand rules.
Where exactly does it break?
Layer 2 and Layer 3 network diagnostics for Windows: device discovery, MAC-level latency, Path Doctor fault localization, Storm Center and Wi-Fi ↔ LAN testing, drawn as a live spider web.

ARP and IPv6 neighbor sweeps, LLDP, CDP, mDNS, SSDP, SNMP, SMB, TLS and vendor protocols feed an evidence-based classifier with about 170 brand rules.
Real MAC-level round trips from high-precision capture timestamps next to ICMP and TCP, including device-to-device timing.
Probes every hop from your PC to the internet and turns failures into incidents with a root-cause sentence and a confidence score.
Broadcast, multicast and unknown-unicast levels against a learned baseline, with the top sources mapped to their switch port.
Separates the radio hop from the backhaul, and measures true one-way latency across switch and AP on dual-adapter PCs.
Export JSON, CSV, Nmap XML, HTML reports and pcapng. Send alerts to Discord, Slack, webhooks or syslog.
Every device, every link and its measured latency, animated in real time. Slow links glow amber, failures turn red, and suspected faults are marked on the path.
The hop chain from this PC to the internet with latency, added latency, loss, jitter and ARP-vs-ICMP per hop. The red link marks exactly where it breaks.
Correlates the first failing hop, devices that dropped together and switch-port evidence into a single incident with a confidence score.
Live broadcast and multicast levels against a learned baseline, top talkers mapped to their switch and port, a loop finder and pcapng recording.
Vendor, model, operating system and services, with the evidence behind every identification and launchers for SSH, RDP and web UIs.
RSSI, link rate, roams and disconnect reasons for this PC, nearby networks and channels, and per-AP health seen from the wired side.
DNS, MTU black holes, bufferbloat, cleartext management, expired certificates, SMBv1 and rogue DHCP or router advertisements.
Other networks found through the route table, DHCP option 121, traceroute, SNMP and tagged DHCP probes.
Free and open source. Pick your architecture, then the package that fits.
All files and checksums on GitHub →
NetSpider needs Npcap for packet capture. Its license does not allow bundling, so NetSpider guides you through installing it on first start.
Raw packet capture needs elevation, so NetSpider asks for it at launch. The per-user installer itself needs no admin rights.
Windows SmartScreen may say “Windows protected your PC”. Choose More info → Run anyway, and verify files against SHA256SUMS.txt.
Read live from GitHub Releases, so this page is always current.
First public release. Read the release notes on GitHub →