dsh-netdoctor
DeepSeek Harness (dsh) 的网络诊断工具箱：DNS 查询（A/AAAA/CNAME/MX/TXT/NS/SOA/SRV/PTR/CAA）、ICMP Ping、TCP 端口检查、TLS 证书检查、路由跟踪、WHOIS 注册信息查询和公共 IP 信息——零运行时依赖
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:TYEclipse/dsh-netdoctor#2b940860f537551d8306da065581b39809c3e564Netdoctor 以 dsh-netdoctor 发布，当前版本为 0.2.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Network diagnostics toolbox for DeepSeek Harness (dsh) — seven read-only probes, zero runtime dependencies (Node.js built-ins only).
When your agent needs to answer "why can't I reach this server?", "is the port open?", "when does this certificate expire?", "what does the public DNS actually return?" or "who owns this domain and when does it expire?" — instead of guessing or fumbling through shell commands, it can call these tools directly and read structured results.
中文简介：dsh-netdoctor 是 DeepSeek Harness 的网络诊断工具箱插件，提供 7 个只读探针（DNS 查询、ICMP ping、TCP 端口探测、TLS 证书检查、traceroute 路由追踪、公网 IP 与归属地查询、WHOIS 域名注册信息查询），零运行时依赖、纯 Node 内置模块实现。适合让 Agent 直接排查"连不上服务器/端口不通/证书要过期/DNS 解析异常/域名注册与到期"等常见网络问题。
| Tool | What it does | Backend |
|---|---|---|
dns_lookup | Query A / AAAA / CNAME / MX / TXT / NS / SOA / SRV / PTR / CAA records, optionally against a custom nameserver (great for testing DNS propagation) | node:dns |
ping_host | ICMP ping with packet-loss and min/avg/max RTT summary | system ping |
check_port | TCP connect probe: open / closed / filtered / unreachable with connect time | node:net |
check_tls | Real TLS handshake; reports protocol, cipher, cert subject/issuer, validity window, days to expiry, SANs, SHA-256 fingerprint. Certificates are inspected but never trusted, so expired/self-signed certs can be diagnosed | node:tls |
trace_route | Hop-by-hop path trace with per-hop RTTs | system traceroute / tracert |
my_ip | This machine's public IP, optionally with geo info (country/region/city/ISP/AS/timezone/coordinates) via ip-api.com's free keyless endpoint, with plain-IP fallback | HTTPS/HTTP GET |
whois | WHOIS registry lookup over the classic TCP port 43 protocol: automatic registry discovery via the whois.iana.org referral chain (with a best-effort TLD→registry fallback map and ARIN for IP literals), raw WHOIS text plus a structured summary (registrar, statuses, created/updated/expiry dates, nameservers) | node:net raw socket |
ping, traceroute, tracert) are invoked with fixed argument arrays, never through a shell, and every target is validated against a strict hostname/IP pattern before use.whois only opens outbound TCP port 43 connections to registry servers and sends a single query line — no credentials, no third-party API keys.my_ip geo lookup can be disabled per call (includeGeo: false) or in config — privacy by choice.Add the plugin to your dsh configuration:
dsh plugin --profile web add github:TYEclipse/dsh-netdoctor
# or a pinned release:
dsh plugin --profile web add github:TYEclipse/dsh-netdoctor#v0.1.0
The build output (dist/) is committed to this repository, so git-hosted
installs work with a single command — no build step, no approval prompts.
Or install it through the DSH web GUI plugin browser / any dsh plugin marketplace by searching dsh-netdoctor (topic dsh-plugin).
Just ask your agent — the tools appear automatically:
Each tool returns a structured result plus a compact text summary in the conversation.
All settings are optional; defaults are shown:
plugins:
dsh-netdoctor:
timeoutMs: 3000 # default timeout for TCP/TLS probes (100–60000)
pingCount: 4 # default ICMP echo count (1–20)
pingTimeoutSec: 2 # default per-reply wait for ping, seconds (1–60)
maxHops: 20 # default traceroute max hops (1–64)
traceTimeoutSec: 2 # per-hop wait for traceroute, seconds (1–30)
includeGeo: true # attach geo info to my_ip results
httpTimeoutMs: 5000 # timeout for my_ip HTTP lookups (1000–60000)
whoisTimeoutMs: 5000 # timeout for WHOIS queries over TCP port 43 (1000–60000)
ping and tracert ship with the OS — both probes work out of the box.ping works out of the box; traceroute is not installed by default — brew install traceroute (the tool reports a clear hint if it's missing).iputils / traceroute); on minimal containers ping may require iputils-ping and traceroute may require the traceroute package.pnpm install
pnpm build # tsc → dist/
pnpm test # vitest — 67 tests, fully offline (mock DNS, local TCP/TLS servers, parser fixtures)
pnpm lint # oxlint src test
MIT © TYEclipse