Field Kit

What it does: seven quick, on-the-spot checks for when you walk up to a problem — AP diagnostic, Interfaces, Path analyzer, TLS profiler, Network Experience, Captive portal and Wall jack. It covers Wi-Fi/AP health from where you're standing (with the radio's band, channel, radio type and link rates — formerly the separate Radio info panel), an interface comparison (a VPN / tunnel interface — WireGuard, OpenVPN tun/tap, PPP, ZeroTier, Tailscale … — carries a badge; this replaced the old VPN impact panel), the Path analyzer's plain-language path-health verdict, the TLS profiler, captive-portal detection, a Network Experience timeline, and a wall-jack test. It's designed to answer "what's wrong here, right now?" fast.

Wall jack (last panel): plug the laptop into the jack, pick the wired port (or Auto) and Run. In order it checks link + speed/duplex (duplex is shown on Linux; Windows doesn't expose it), the DHCP lease (with the time it was obtained where the OS records it — otherwise "lease present"), address + gateway, the VLAN inferred from the subnet vs your Inventory, a gateway ping, a DNS lookup, internet reachability and a captive-portal probe — then gives one verdict: GOOD (naming only the checks that passed — a static address is "not confirmed: DHCP"), UNCONFIRMED when another interface (Wi-Fi, a second NIC, a VPN) also has a default route, or PROBLEM with the first failing step and the likely fix (e.g. link up but no DHCP = "wrong VLAN or no DHCP scope on this port"). It pings the gateway (up to 3 tries, stopping at the first reply), then — outside your network — sends a DNS lookup and an HTTP probe of connectivitycheck.gstatic.com (Google) and one ping to 1.1.1.1 (Cloudflare), over the OS's default route — turn Wi-Fi off for a clean result. Name the jack and Save to Incidents to keep the result.

What you need: just to be on (or next to) the network in question. Each sub-check says what it looks at; most need nothing but a click.

Safe to run: yes — nothing on the network is changed. Most panels read what your machine and radio already see; Path analyzer, TLS profiler, Captive portal, Network Experience and Wall jack send probes (pings, DNS, HTTP / TLS) and say where to.

Reading results: each check gives a short verdict (good / worth a look / problem) plus the evidence behind it — so you get a fast answer and can still see why. Use it as triage: it points you at which deeper tool (Ping, Path ping, SSL/TLS, Wi-Fi scan) to open next.