tracepath and Path MTU Discovery on Linux
Small things work and big things hang. One unprivileged command finds the narrow link, and one iptables rule shows what a black hole looks like.
The Linux side of a network engineer's job. Articles tagged Linux cover interfaces, routing tables, neighbor states, NIC drivers, name resolution and the CLI tools used for testing from a real host.
Small things work and big things hang. One unprivileged command finds the narrow link, and one iptables rule shows what a black hole looks like.
Loss and latency per hop against a link with 12 percent loss injected on purpose, and the one rule that separates real loss from cosmetic loss.
Three probe types down one four hop path, the packets on the wire for each, and the ICMP rate limit that makes a perfect path look broken.
Devices against connection profiles, the activation step everybody forgets, and how to make a configuration survive a reboot.
The driver layer below the kernel: link settings, offloads that make packet captures disagree with the wire, rings, and where host-side drops show up.
The full command map, and the same host through both toolsets so you can see exactly what the legacy tools hide from you.
The six-state neighbor machine walked live on a real lab, the tunables behind it, and why arp -n cannot show you any of it.
Every field in a route line, get against show, blackhole routes, the replace gotcha, and policy routing with multiple tables.
The grammar, the four objects you use every day, the output modifiers that make it readable, and how to create interfaces out of nothing.
Interface selection, BPF filters, reading the output line, writing and re-filtering pcap files, and safe long captures - all from a live run of tcpdump 4.99.5 against IOS-XE routers. Includes the privilege drop that kills rotating captures, and a telnet password readable on the wire.
Half of network-down tickets end at the client. Verify IP address, mask, gateway, and DNS on Windows, macOS, and Linux with the exact commands for each, including live output from a real Debian host.
The iputils ping flags engineers actually use: -c/-i/-q for jitter, -s/-M for MTU, -D for timestamps, and the -I flag that fixes confusing IPv6 failures.