INIT means "I hear you, you do not hear me". One router shows a neighbor in INIT, the other shows an empty table, and that asymmetry is the entire diagnosis. Captured live on IOS XE 17.18.2 in CML with an inbound ACL eating OSPF in one direction.
Netmiko, NAPALM and pyATS answer "did my change do anything?" at three different layers. Same three IOS-XE 17.18.2 routers, same lab, real captured diffs.
Config diffs tell you your text landed. They do not tell you the interface came up. Here is how pyATS and Genie snapshot live operational state, diff it across a change, and prove a rollback was clean, captured against IOS-XE 17.18.2 in CML.
Nornir gives you the inventory and the concurrency netmiko never had. NAPALM asks the router for the diff instead of guessing in Python. Captured on three IOS-XE 17.18.2 nodes, including the dest_file_system fix nobody documents.
A netmiko walkthrough built from a live capture against IOS-XE 17.18.2: connect, read, parse with TextFSM, push with send_config_set, then prove whether anything actually changed. Includes the ntc-templates key names that fail silently.
IPsec over GRE and GRE over IPsec stack the same two protocols in opposite order, and the order decides what gets encrypted on the wire. This post explains both designs, contrasts them cleanly, and shows when each one belongs.
The 9800-CL in CML will never show a joined AP, and it is not your config. Real IOS XE 17.18.2 output shows exactly what a virtual wireless controller can and cannot do, so you spend study time on the parts that actually work.
dnswalk transfers a DNS zone and audits it for internal consistency: missing PTR records, mismatched addresses, and bad delegations. Real Kali output shows you how to read what it flags.
dnstracer follows the DNS delegation chain from the root servers down to the authoritative source instead of just dumping records. You see where a nameserver's answer actually comes from, with real output captured from Kali in the lab.
massdns is a high-performance stub resolver that pushes over 350,000 DNS queries per second by spreading load across public resolvers. See how internet-scale subdomain enumeration works, with real output from Kali in our lab.
When zone transfers are refused, brute force is how you enumerate a domain. dnsmap grinds a wordlist of common hostnames against a target and keeps every name that resolves. Real output captured from Kali against a BIND9 server in the lab.
Point dnsenum at a domain and get nameservers, MX records, zone transfer attempts, subdomain brute forcing, and reverse sweeps in one report. Every capture is real output from a Kali box against a BIND9 server in the lab.