dsh-netdoctor

Whenever your dsh agent needs to answer questions about connectivity, port status, or certificate expiry, the old way means stitching together shell commands and squinting at raw output. dsh-netdoctor wraps the seven most common network diagnostics into structured tools, so the agent gets clean JSON results and a human-readable summary in a single call. No guesswork, no log-digging.

The seven probes cover full-record DNS lookups with optional custom nameservers, ICMP ping with packet-loss and RTT stats, TCP port state detection, a real TLS handshake reporting subject issuer validity window and SANs, hop-by-hop traceroute, public IP with optional geo data, and WHOIS registry lookup over TCP port 43 with automatic registry discovery. Every probe is read-only and runs on Node.js built-ins plus the system ping and traceroute, with zero extra npm dependencies.

On the safety side, every probe has a hard timeout, external binaries are invoked with fixed argument arrays and never through a shell, and every target is validated against a strict hostname or IP pattern. WHOIS sends a single query line to the registry with no credentials. A good fit for DevOps engineers and SREs who need quick checks mid-conversation, and for any dsh user who wants their agent to triage network issues independently.