Getting Hands-On with Networking Tools

Hey there!

Networking is one of those subjects that stays abstract until you actually break something and have to figure out why packets aren’t going where you expect. This year I moved from “I know the OSI model” to “I can actually troubleshoot a network.”

---

Services I’ve configured

• DHCP and DNS in lab environments — understanding lease assignment and resolution by configuring it myself, not just reading about it.
• SSH — not just using it, but hardening it: key-based auth, disabling password login where it matters, and understanding what’s actually happening in the handshake.

---

Tools I reach for when something’s wrong

• tcpdump — capturing traffic at the packet level when something’s misbehaving and the application logs aren’t telling the full story.
• nmap — mapping what’s actually open and reachable on a host, especially useful after hardening a server to confirm the firewall rules did what I intended.
• iftop — watching bandwidth usage in real time when a server feels slow and I need to know if it’s actually network-bound.

---

Why this matters for where I’m headed

My dissertation is about AI-assisted cyber defence for IoT-based smart networks — intrusion detection only makes sense if you understand what normal traffic looks like first. Every hour spent with tcpdump and nmap on my own lab setup has been directly useful for reasoning about what a detection system should actually be looking for.

Happy troubleshooting! 🚀