Documentation
Every tool, explained plainly.
The same guides that ship inside the app. Each tool explains what it does, whether it can cause harm, and how to read its results — plus real-world playbooks engineers actually run. New to networking? Start with the walkthrough below.
Getting started
Read the full walkthrough →Start here
SubnetSlinger is a network engineer's toolkit that runs on your machine.
Most tools are passive and safe to run anywhere: Ping, Trace, Path ping, DNS, Subnet, SSL, HTTP, WHOIS, IP info, ARP, MAC lookup, Monitor, Discovery, and SNM…
Color and icon mean the same thing everywhere (and never rely on color alone — there's always a label):
Self-contained by default: the core tools — ping, trace, DNS, ports, SNMP, speed test, subnet calc, HTTP/TLS/WHOIS, discovery, the local servers, the SSH cli…
The toolkit itself is light — the one thing that drives a bigger machine is running the AI LOCALLY (Ollama).
SubnetSlinger keeps three separate records, all on THIS machine (nothing is sent anywhere):
What it is: a switch that swaps your real data for a realistic sample network, so you can show the app to someone without showing them your actual network.
Two separate things that people reasonably assume are one:
SubnetSlinger keeps your work on THIS machine and nowhere else (see "Your account, your license, and your data").
Tools
shows your machine's network at a glance — hostname, local IPs, gateway, DNS servers, and a live check of your own gateway.
groups related work — hosts, sites, and notes — under one project, so a site visit or a customer engagement stays together instead of scattered across tools.
sends ICMP echo requests and times the replies — the fastest "is it up and how far away?" check.
shows the step-by-step path your traffic takes to reach a destination — every router ("hop") in between, in order.
like Traceroute, but it then sends a burst of pings to EACH hop and measures how much gets lost and how slow each one is.
the same per-hop data Path ping already collects (address, loss %, average latency), drawn as a left-to-right hop chain from you to the destination instead o…
checks which "doors" (ports) are open on a device — each open port is a service it's offering (web, SSH, mail, …).
watches several hosts at once, pinging each on a repeating interval and showing it as a live tile (up/down, response time, packet loss).
shows THIS machine's IP routing table — the rules the OS uses to decide where each packet goes.
shows how THIS machine got its IP address.
the Local servers tool stands up test servers on THIS machine (Syslog, SNMP-trap, TFTP, HTTP, FTP, DNS, DHCP, RADIUS, TACACS+) so your gear can point at your…
connects over SSH (encrypted), Telnet (plaintext), or a local serial/COM port straight into a device's console — the pre-network way in for factory-fresh gea…
a named sequence of steps you run with one click — a repeatable checklist that actually gathers data instead of just telling you what to go do.
sends a POSSE of specialist agents to sweep your whole local network as a team.
a simple live packet analyzer — like a lightweight Wireshark built into the toolkit.
captures a baseline of who's on your network (a sweep + the ARP cache, recording each host's IP, DNS name, MAC, and vendor), then on a later "Check drift" co…
The Deputy is SubnetSlinger's own AI assistant, powered by the Anthropic Claude API with your own key — it is NOT Microsoft Copilot or GitHub Copilot, and ha…
three security checks in one place.
pushes a file to a device or pulls one back.
your saved SSH / Telnet / Serial connections for one-click login — like the host list in any SSH client, so you never retype an address.
a local, encrypted store for the secrets you don't want sitting in plain text — passwords, keys, notes.
finds the devices on your local network.
sweeps the subnet and draws a node map around the local network, with a per-device icon guessed from MAC vendor (OUI) + hostname — switches, routers, APs, pr…
shows the IP-address ↔ hardware-address (MAC) pairs your computer has recently talked to on the local network, and labels each MAC with the hardware maker (i…
turns a MAC (hardware) address into the company that made the device.
lists nearby wireless networks with signal, channel, and security, using the operating system's own scanner (Windows netsh, Linux nmcli) — plus two analyses …
reads a switch's LLDP-MIB over SNMP and lists its neighbors — for each of the switch's ports, the connected device's system name, port, and chassis ID.
finds the largest packet that reaches a target WITHOUT being fragmented — the real end-to-end MTU.
asks an NTP server for the time (SNTP over UDP/123) and reports how far off this machine's clock is, plus the server's stratum.
lists what THIS machine is listening on and the connections it currently has open — the same data the Deputy's local_sockets tool uses, as a first-class table.
sends a Wake-on-LAN 'magic packet' (broadcast UDP) to power on a machine by its MAC.
measures your internet connection's download speed, upload speed, and latency by moving test data to and from Cloudflare's servers.
builds a device configuration for you from a template — you fill in a short form (hostname, IP, VLANs, and so on) and it writes out the full config text for …
applies the same change — a set of commands, or a password rotation — across MANY devices at once over SSH, instead of logging into each by hand.
three lab-shakeout tools in one — a throughput test (iperf3) to measure real bandwidth between two machines, a chaos/latency monitor that watches a link over…
What it does (Linux only): puts a friendly form over command-line network tools you already have installed — nmap, curl, openssl, dig, mtr, tcpdump, and more.
a bundle of quick, on-the-spot checks for when you walk up to a problem — Wi-Fi/AP health from where you're standing, an interface comparison, a plain-langua…
a lighthearted arcade break — subnets rain from the sky and you sling the right answer before they hit the dirt.
a persistent list of devices, filled automatically by Discovery or added by hand.
a work log of incidents with timestamped notes, severity, and export to Markdown OR a print-friendly page (Print / PDF) — your record of what you did and found.
an automatic audit trail — what ran, when, by whom, and the result.
a shortcut to the folder where SubnetSlinger writes the things you export or capture — packet captures (.pcap), CSV exports, saved topology PNGs, and reports.
customize how the app looks — colors and accent — so it's comfortable for your eyes and your setup.
SNMP is the standard way to ASK network gear (switches, routers, printers, APs) about themselves — this tool sends those read-only questions and shows the an…
looks up the records behind a domain name — the "phone book" of the internet.
does the math of a subnet for you — given a network, it tells you the address range it covers, the first and last usable addresses, the broadcast address, th…
fetches the live TLS certificate and audits the connection — subject/issuer, validity dates and days remaining, the negotiated TLS protocol and cipher suite,…
asks a web address for its response and shows the status code, the response headers, and how long it took — without downloading the whole page.
looks up WHO is behind a domain, IP address, or network — the registration record.
tells you where an IP address is and who runs it — rough geographic location, the ISP/organization, and its ASN (the network's ID number).
a built-in client for talking to network gear and controllers through their APIs — REST/RESTCONF, NETCONF, and gNMI — instead of scraping the CLI.
Use cases
When code didn't change but a run started failing, work in this order — authentication first, then connectivity:
Goal: a device showed up that shouldn't be there (placed on purpose or by accident).
Symptom: a setting keeps changing back.
Data-center and edge handoffs have their own failure modes:
"The internet is slow" is often a local or wireless problem wearing a bandwidth costume.
API & MCP reference
New to MCP?
The Deputy and the Posse call your chosen AI provider with YOUR key — you pay that provider directly, no SubnetSlinger subscription and no markup.
The Deputy and Posse are provider-agnostic — the SAME features run wherever you point them.
The Deputy and Posse can run on a LOCAL model via Ollama instead of the Anthropic cloud — pick the provider in the Deputy's "AI" dropdown (Anthropic, OpenAI-…
official Juniper MCP server — connects to Junos over NETCONF/PyEZ to fetch config, run show/operational commands, and get device facts.
wraps Cisco's pyATS/Genie testing framework — runs show commands over SSH, parses them into structured data, and can 'learn' and diff device state.
MCP servers over Catalyst Center (DNA Center) for inventory/health/assurance, and over Catalyst SD-WAN (vManage) for policies, device health, and templates.
the official netboxlabs server queries NetBox — sites, devices, IPs, prefixes, VLANs, cables — READ-ONLY by default (deliberately hard to misuse; a write for…
an open-source agent that orchestrates dozens of MCP servers (pyATS, Junos, F5, Catalyst Center, ISE, NetBox, ServiceNow, GitHub) behind ONE agent with an au…
community MCP servers wrapping F5 iControl REST (BIG-IP LTM/GTM) and Arista CloudVision (CVP).
model-driven device APIs.
gRPC Network Management Interface — Get for on-demand snapshots, Subscribe for streaming telemetry (push updates as values change).
poll device OIDs.
the CLI data that laptop-side ping/trace can't see.
REST and MCP-backed APIs authenticate with tokens — Bearer, X-API-Key, or OAuth.
Running on Linux
SubnetSlinger on Linux is the same app as on Windows — the same tools, the same layout, the same free tier that needs no account and sends no telemetry.
SubnetSlinger ships on Linux through the standard free app stores, plus a direct download for people who'd rather not use a store.
Everything SubnetSlinger saves — your inventory, incidents, logs, runbooks, saved hosts, and the Vault — stays on your machine.
On Linux, sending a real ICMP echo (a ping) traditionally needs elevated privileges, because it uses a raw socket.
On Linux, SubnetSlinger can read a lot about your own machine straight from the kernel — no extra tools, no root.
SubnetSlinger is one app across platforms, but a handful of things are handled the way each operating system does them best.