NetCheck is a network health application for TerraMaster NAS running TOS 7. It diagnoses connectivity problems from the TOS web UI, explains what broke and where, and walks you through safe repairs — no SSH required.
Nine check groups cover the whole path from cable to cloud: Link layer · IPv4 · Routing · DNS · IPv6 · Internet · TOS services · Transport. Every item reports Pass / Warn / Fail with measured values and human-readable reasons — from cable errors to DNS hijacking, clock skew to SMB multichannel.
Fix broken settings through a four-step wizard: back up configuration → apply fix → verify connectivity → record history. Every repair is reversible with pre-fix snapshots.
All physical, OVS bridge, virtual, tunnel, and Docker interfaces in one table — state, speed, duplex, driver, MTU, error counters, and bearer relationships.
Gateway RTT and packet-loss trends (1/7/30 days), continuous background sampling, and an alert history that tells you when the network was bad, not just that it was.
Firewall status, listening-port exposure with risk levels, and remote-tunnel state — find that SSH port bound to 0.0.0.0 before someone else does.
Device discovery with IP-conflict detection · TCP/UDP port check · traceroute breakpoint hunting · local-vs-public DNS comparison.
Version your network configuration with notes, diff before/after, and restore in one click. Diagnosis and repair history keeps scores, actions, and downloadable reports.
23 languages including English, Chinese, German, French, Japanese, Korean, and Russian — with full right-to-left layout for Arabic and Hebrew. Light & dark themes included.
This repository is the application's source mirror: the Python backend
(lib/, shipped as plain .py inside the package), the web UI
(webui/), the Go/eBPF traffic collector
(bpfcollector/ — source of the single compiled ELF
bin/netcheck-bpf, including the embedded BPF program _bpf/traffic.bpf.c),
the maintainer scripts (DEBIAN/), systemd units
(init.d/), and the build/test suites (tools/,
tests/). Go dependencies are pinned by go.sum; run
go mod vendor before building (see bpfcollector/README.md). A full source
snapshot pinned to each version is attached to every Release as
netcheck_<version>_src.tar.gz with its SHA-256.
Requirements: TerraMaster NAS with TOS 7 · Intel/AMD (amd64) or ARM (arm64)
Download the package matching your NAS architecture from Releases or the table below, verify the checksum, and install with TOS package tools.
Which package do I need? Run dpkg --print-architecture over SSH — its output (amd64 or arm64) is exactly the file suffix you need. Alternatively, check the CPU in TOS Control Panel: Intel/AMD processors → amd64, ARM processors → arm64. The suffix always matches the package's internal Debian architecture, so dpkg -i will also refuse a mismatched one.
curl -LO https://github.com/Moechz/netcheck/releases/download/v1.2.61/netcheck_1.2.61_amd64.deb
curl -LO https://github.com/Moechz/netcheck/releases/download/v1.2.61/netcheck_1.2.61_amd64.deb.sha256
shasum -a 256 -c netcheck_1.2.61_amd64.deb.sha256 # optional integrity check
sudo dpkg -i netcheck_1.2.61_amd64.debAfter installation, open NetCheck from the TOS desktop and create the admin account on first launch.
| Architecture | For NAS with | Package | SHA-256 |
|---|---|---|---|
| amd64 (x86-64) | Intel / AMD 64-bit models | netcheck_1.2.61_amd64.deb | 215de9dad20f81ece2cce659afe85430311bfd74f8ab810b9b508fbb0ec91a1d |
| arm64 (aarch64) | ARM 64-bit models | netcheck_1.2.61_arm64.deb | 47b78f31f8ee450b40720ae9bdef274e3f74e21fd6f8da23acab0b29454d23b5 |
Not sure? dpkg --print-architecture over SSH tells you which one. 不确定机型时，SSH 执行 dpkg --print-architecture，输出什么后缀就下载哪个包。
shasum -a 256 -c netcheck_1.2.61_amd64.deb.sha256
shasum -a 256 -c netcheck_1.2.61_arm64.deb.sha256Privacy policy, third-party service and data-flow disclosure, open-source
licence notices, user data access/correction/deletion paths, the privileged
channel (R1) authorisation dossier and the software bill of materials ship with
every package under /usr/local/netcheck/compliance/, and are published in this
repository:
- Privacy policy
- Third-party services & data flows
- Data access, correction and deletion
- Licences & dependencies
- Privileged channel (root helper) authorisation & least privilege
- Supply chain & build provenance
- Software bill of materials
- Per-architecture package manifest (package SHA-256 and every packaged file hash)
- Go/eBPF realtime traffic collector with per-interface RX/TX rates
- TerraMaster-compliant 512×512 transparent SVG application icon
- L2 source protection: obfuscated frontend and bytecode-only backend
Source code is maintained in Moechz/TOS-netcheck.