Networking

Generate NTP configs for chrony, ntpd, systemd-timesyncd, and Cisco devices with source parsing, client-access checks, and fallback warnings.

Find the IPv4 or IPv6 route that wins for a destination, with longest-prefix ranking, tie-break choices, and host-bit cleanup warnings.

Calculate IPv4 ACL wildcard masks from CIDR, subnet, host, or any entries, then review ACE lines, match size, overlaps, and broad matches.

Check a public web page for ad-network tags, ads.txt alignment, confidence scores, fetch warnings, and prioritized cleanup actions.

Look up an ASN or public IP address, then compare RIPEstat routes, prefixes, RDAP contacts, PeeringDB context, and routing caveats.

Check pasted BGP AS paths against origin, first-hop, blocked-ASN, regex, length, and prepend rules before changing routing policy.

Generate BGP prefix-list config from CIDR rows with Cisco, Arista, FRR, SONiC, and Junos syntax, normalization, and shadowing checks.

Estimate BGP route memory, peer fanout, and churn risk from prefix counts, retained paths, route bytes, update rates, and budgets.

Size TCP windows from bandwidth and RTT, compare current buffers and stream counts, and spot BDP, overhead, and scaling warnings.

Check a mail host or sender IP against DNSBL/RBL lists, separating real listings, policy signals, resolver warnings, and TXT evidence.

Review CIDR allowlists for broad source ranges, sensitive ports, stale dates, missing owners, overlaps, and scored cleanup evidence.

Check a TLS certificate fingerprint against public CT data, compare hostname and issuer evidence, and keep revocation or reporting clues in view.

Generate Cisco IPv4 ACL commands from flow rows, with wildcard conversion, sequence planning, expansion checks, and safety review tables.

Generate Cisco interface config for routed, access, or trunk ports, with VLAN validation, syntax profiles, command audit, and copy-ready CLI.

Build cloud-init version 2 network YAML for static VM NICs, with CIDR, routes, DNS, MAC matching, and validation warnings before boot.

Plan a DHCP scope from subnet, pool, exclusions, reservations, growth, lease time, and utilization headroom before clients run short.

Estimate DNS resolver cache memory from QPS, hit rate, distinct inserts, TTL, DNSSEC overhead, headroom, and upstream-load charts.

Audit a domain's public DNS records, compare resolver snapshots, and spot missing authority, mail, address, policy, TTL, or timing risks.

Trace a hostname through delegation, aliases, DNSSEC clues, resolver drift, and negative-cache timing before chasing web, mail, or certificate failures.

Build a DNS denial proof for NXDOMAIN or NODATA, separating resolver evidence, NSEC/NSEC3 checks, CD-bypass splits, and retry timing.

Audit DNS glue and delegation for a domain, compare public resolver views, and turn NS address, CNAME, or DS gaps into repair evidence.

Check DNS propagation across public resolvers, compare expected answers, and review TTL, DNSSEC, ECS, latency, and holdout clues.

Enumerate public DNS records for a domain, URL, email domain, or IP with resolver evidence, mail-auth checks, DNSSEC clues, and action flags.

Look up DNS records for a domain, host, or IP with Google or Cloudflare DoH, TTL charts, DNSSEC flags, raw responses, and JSON exports.

Plan a DNS TTL cutover window with drain timing, negative-cache checks, resolver-load warnings, and exportable runbook evidence.

Check DNS wildcard behavior with random public resolver probes, closest-encloser clues, branch boundaries, and cache-aware result tables.

Draft DNS zone files from SOA, nameserver, mail, DNSSEC, and host records with TTL checks, ledger rows, and lint-ready exports.

Validate a domain's DNSSEC chain with DNSKEY, DS, RRSIG, resolver AD comparison, signature timing checks, and a pass-rate report.

Convert data transfer rates between bits, bytes, SI, and IEC units, model overhead, and test payload ETAs against a time window.

Craft a DNS-over-HTTPS query packet, compare GET or POST replay data, inspect EDNS/DNSSEC flags, and decode live resolver replies.

Estimate ECMP usable capacity from healthy paths, link rate, demand, hash efficiency, headroom, failure runway, and largest-flow risk.

Check whether a DNS name changes under EDNS Client Subnet hints with no-hint controls, echoed scope, resolver signals, and exports.

Inspect a domain's EDNS OPT response across public DoH resolvers with DNSSEC, NSID, ECS, padding, packet sections, and replay evidence.

Estimate ephemeral port exhaustion from hot-destination connection churn, source address inventory, reuse hold time, reserves, and NAT caps.

Calculate Ethernet frame efficiency from payload size, VLAN tags, and wire-time overhead, with goodput, frame-rate, and target-fit checks.

Calculate a fiber link budget from optic power, route loss, connectors, splices, passives, reserve, and overload limits with margin ledgers.

Estimate file transfer time from size and sustained bandwidth, then test overhead, compression, RTT, TCP window, packet loss, and deadline fit.

Analyze firewall deny logs in your browser, group blocked source-service paths, and prioritize watched ports with CIDR direction checks.

Build a firewall rule matrix from flow rows, with risk scoring, audit findings, object-group planning, platform notes, and a scope heatmap.

Review firewall rules for stale use, broad sources, expired access, missing owners, and privileged services with a scored cleanup queue.

Find shadowed firewall rules in ordered ACL exports, compare full and partial overlaps, and turn risky rule conflicts into a cleanup queue.

Estimate free-space path loss and predicted RSSI, then compare reserve, Fresnel clearance, SNR, range, and band tradeoffs for RF links.

Check HA pair role rows for active/standby drift, stale sync, heartbeat failures, VIP mismatches, and priority conflicts before failover.

Build an HAProxy backend block from server rows with health checks, TLS options, persistence notes, review warnings, and copy-ready output.

Analyze NGINX, Apache, or ALB access logs in your browser, compare endpoint P95/P99 and 5xx signals, and export SLA findings.

Trace an HTTP redirect chain hop by hop, catch loops, TLS issues, status changes, host handoffs, latency spikes, and replayable cURL.

Convert IPv4 addresses between dotted, decimal, hex, binary, octal, and mapped IPv6 forms with range labels and byte-order checks.

Check IPv4 ranges for CIDR overlaps, host-bit corrections, duplicate address counts, and coverage blocks before routing or peering changes.

Size an IPsec tunnel by calculating inner MTU, TCP MSS clamp, ESP overhead, NAT-T bytes, and profile-specific padding before rollout.

Plan IPv4 subnet allocations from a parent CIDR, size each host request, and catch alignment gaps, fit issues, and headroom before rollout.

Plan IPv4 renumbering waves from host mappings, prefix boundaries, DNS TTL, and DHCP lease timing with readiness checks and rollback runbooks.

Plan IPv4 child subnets from a parent CIDR, size VLSM blocks from host demand, and check headroom, gaps, gateways, and overflow.

Summarize IPv4 CIDR lists into a single cover route or exact aggregate set, with gap exposure warnings, normalization, and exportable ledgers.

Normalize one IPv6 address into compressed and expanded forms, with prefix, zone, dotted IPv4 tail, hextet, binary, and reverse-DNS checks.

Calculate an IPv6 subnet from any address or CIDR, then review the canonical range, child-prefix capacity, reverse-DNS alignment, and EUI-64 samples.

Plan IPv6 site and LAN prefixes from a parent CIDR, then check capacity, /64 fit, nibble alignment, and copyable ledger rows.

Audit network interface descriptions from config, CSV, or show output for missing evidence, duplicates, length issues, and cleanup work.

Check a public IP, domain, or URL for approximate location, ASN, timezone, reverse DNS, map context, and follow-up network checks.

Calculate an IPv4 CIDR block from an address or mask, then check usable hosts, wildcard masks, split fit, and special-use warnings.

Split an IPv4 parent block into equal child CIDR ranges, compare usable hosts and gateway slots, and catch large-ledger or special-use warnings.

Estimate jumbo-frame packet-rate relief from traffic rate, MTU sizes, eligible share, frame overhead, path scope, and optional CPU cost.

Generate a Keepalived VRRP config with VIP rows, unicast or multicast peer settings, health tracking, directive audits, and failover timing.

Build Kubernetes NetworkPolicy YAML from pod labels and allow rows, with peer syntax checks, rollout commands, review warnings, and a flow map.

Calculate LACP bundle capacity after failed links, reserve, and hash efficiency, with headroom, failure tolerance, and single-flow risk.

Estimate load balancer failover time from probe intervals, thresholds, reroute delay, DNS TTL, drain windows, and RTO scenario pressure.

Estimate load balancer pool capacity from backend RPS, weights, health, utilization targets, growth, and N+ reserve with bottleneck cues.

Look up a MAC address, normalize EUI-48 or EUI-64 input, and compare vendor evidence with bit flags, privacy clues, and special-use checks.

Generate MAC address batches for VM labs, fixtures, and docs with prefix control, local/unicast flags, seeded replay, and duplicate checks.

Calculate TCP MSS from path MTU and tunnel overhead, then check effective MTU, DF ping payload, IPv4 or IPv6 floors, and clamp guidance.

Look up a domain's MX records, compare public resolver answers, and flag Null MX conflicts, unresolved hosts, CNAME targets, and mail-policy clues.

Size a NAT or SNAT pool from public IPs, sessions, reserve, growth, and hot-destination pressure with capacity warnings and charts.

Check NTP or chrony peer rows for offset, jitter/error, reach, stratum, and selected-source risks with a ledger and offset map.

Check a domain's nameserver health with resolver comparison, glue readiness, public-address checks, SOA timers, and repair cues.

Analyze NetFlow or IPFIX rows to rank top talkers, compare byte, packet, and flow shares, flag parser or egress clues, and export evidence.

Build netcat and ncat commands for authorized connect, listen, scan, TLS, proxy, and transfer tasks with shell quoting and warnings.

Build Netplan YAML for Ubuntu static interfaces with CIDR addresses, DNS, routes, MAC matching, MTU checks, and review warnings.

Turn network audit findings into a sorted remediation register with escalation status, owner queues, evidence gaps, charts, and report wording.

Plan a network change with readiness gates, rollback evidence, run order, residual risk, and a cutover profile reviewers can scan.

Estimate network throughput and transfer time from link speed, RTT, packet loss, TCP windows, streams, and packet-rate limits with bottleneck checks.

Calculate OSPF interface cost from reference and interface bandwidth, compare manual overrides, and spot fast-link cost collapse before routing changes.

Generate an OpenVPN client profile from endpoint, route, TLS, cipher, and certificate choices, then review import blockers and security warnings.

Estimate packet capture storage from link rate, duration, filters, snap length, pcap overhead, compression, and reserve before a capture run.

Analyze saved ping output for packet loss, RTT spikes, jitter, sequence gaps, and timing charts before writing a network handoff.

Plan a PoE switch budget from device rows, port count, reserve policy, cable loss, IEEE ceilings, surge checks, and priority shedding.

Summarize port exposure rows into a prioritized review list, flagging public high-risk services, missing owners, and host cleanup scope.

Normalize messy TCP and UDP port lists into compact scanner strings, IANA bands, service-risk cues, and warnings for ranges or bad tokens.

Check proxy and CDN header evidence from pasted logs or the current request, trace trusted hops, and flag spoofed client-IP risks.

Plan QoS class shares from a parent bandwidth rate, then see reserved Mbps, best-effort headroom, priority pressure, and burst ceilings.

Calculate queue buffer delay from buffer size and link rate, then compare full-queue latency, occupancy, BDP, and target limits.

Build FreeRADIUS client stanzas from NAS CSV rows, with secret checks, address-scope warnings, hardening choices, and review output.

Estimate RADIUS requests per second from access, accounting, retries, and failover assumptions, then compare active-pool headroom.

Estimate replication backlog catch-up time from write rate, outage duration, usable capacity, compression, target windows, and headroom warnings.

Compare DNS-over-HTTPS resolver answers across open, security, and family profiles to spot policy splits, zero-sinks, and DNSSEC drift.

Check reverse DNS for an IP or hostname, verify forward-confirmed PTR names, compare public resolver views, and flag stale or weak records.

Generate reverse DNS zone text for an IPv4 CIDR block with PTR rows, SOA checks, RFC2317 parent records, and review-ready JSON.

Estimate SNMP polling load from devices, OIDs, intervals, retries, packet sizing, SNMPv3 overhead, MTU risk, and poller headroom.

Trace SIP, SIPS, XMPP, or LDAP service discovery with public resolver comparison, fallback notes, and terminal host address checks.

Check a live host or pasted PEM chain for missing issuers, hostname mismatch, expiry risk, weak crypto, and install-ready certificate bundles.

Check a public hostname with SSL Labs evidence, spot weak TLS endpoints, chain gaps, legacy protocols, and renewal risk in a fix queue.

Check a live TLS host for certificate expiry, renewal timing, SAN coverage, issuer, serial, and fingerprints before outages reach users.

Check OCSP revocation evidence for a public TLS host or pasted certificate, with responder status, freshness timestamps, warnings, and replay text.

Generate static route add, replace, and delete commands for Linux, Windows, Cisco-like, Junos, and firewall CLIs with route-row checks.

Plan IPv4 child subnets from a parent CIDR, compare usable host capacity with reserve, pack VLSM demand rows, and export address ledgers.

Generate access or trunk switchport CLI for Cisco IOS, NX-OS, or Arista EOS with VLAN normalization, command notes, and paste-safety warnings.

Calculate a restaurant tip from subtotal, tax, service charges, and split rules, with receipt checks that flag rounding or rate mistakes.

Trace a hostname's public CNAME path across resolvers, verify the final A, AAAA, MX, TXT, or CAA answer, and catch cutover drift.

Analyze pasted traceroute, tracert, or MTR output into hop evidence, latency-step findings, loss checks, charts, and shareable exports.

Plan VLAN ID capacity from reserved and existing ranges, then check new segment demand, IPv4 subnet host fit, allocation order, and warnings.

Compare switch VLAN evidence with trunk policy, native VLAN rules, active database entries, and VLAN 1 exposure before a change.

Plan VLAN port moves from pasted rows, split work into timed waves, flag trunk and native VLAN risks, and build runbook-ready tables.

Plan VM migration windows from memory, disk payload, dirty-page churn, bandwidth, and cutover targets with downtime risk checks.

Estimate VPN tunnel user capacity from line rate, packet overhead, MTU, peak demand, and gateway caps with load warnings and JSON output.

Plan IPv4 subnets from a parent CIDR, split or rejoin leaf blocks, and verify usable ranges, broadcasts, size maps, and exports.

Estimate WAN round-trip latency from route distance, fiber index, hops, queues, jitter, packet size, app turns, and target headroom.

Check domain registration records with RDAP-first lookup, WHOIS fallback, expiry timing, status clues, nameservers, contacts, and exports.

Size WebSocket node pools from peak sockets, memory, egress, descriptor limits, and N+ reserve with bottleneck and scale-out checks.

Plan Wi-Fi channel assignments for 2.4, 5, or 6 GHz APs, with DFS filters, PSC-aware 6 GHz primaries, reuse pressure, and exports.

Estimate Wi-Fi AP count from floor area, concurrent clients, traffic demand, AP class, utilization, and growth reserve with driver warnings.

Generate WireGuard server and client configs with peer route checks, topology preview, placeholder-key warnings, and review exports.

Generate a dnsmasq DHCP scope config with pool checks, router and DNS options, static reservations, PXE/TFTP lines, and audit exports.

Build iptables or ip6tables commands with CIDR, port, chain, backend, persistence, and production-review checks before firewall changes.