Hmbali

tcpdump You’ll Actually Use: Filters for L2–L7

Master essential tcpdump filters for analyzing traffic across all layers of the OSI model, from Ethernet frames to HTTP requests.

Device API-First: Automating with RESTCONF/NETCONF

Model the network, not the CLI — practical patterns you can ship tomorrow.

Ansible vs Nornir vs Python Native: Choosing the Right Automation Stack for Small Teams

A Deep Dive into Automation Tools for Small Teams: Pros, Cons, and Best Use Cases

Spanning Tree (STP/RSTP): Avoiding Loops Without Panic

How STP and RSTP Keep Your Network Smooth and Loop-Free

What Is a Network?

A clear, beginner-friendly guide from “my Wi-Fi” to “the Internet” — with a tiny lab you can do today

From Runbooks to Autopilot: Designing Safe Automated Remediation (Guardrails Included)

A hands-on blueprint for turning human runbooks into safe, auditable remediation workflows with approvals, blast-radius limits, and…

Part 3 — Production-ish Mini IDS: Flow Logs, Enrichment, and Shipping Alerts to Splunk/ELK

Part 1 gave you detection. Part 2 gave you investigation context and a safe live loop.

Real-World Cisco ISE, Part 1: Architecture & MVP Policy

Python for Network Automation: Practical NAPALM/Netmiko/Paramiko

From first SSH to safe, repeatable changes — real-world patterns you can ship.

The Multi-ISP BGP Incident: Communities to the Rescue

How BGP communities turn a multi-ISP meltdown into a controlled recovery

Network AIOps in Practice: Cut Alert Noise Without Losing Visibility

A hands-on guide to deduplication, correlation, dynamic thresholds, and topology-aware incident grouping for network teams.

Chasing a Phantom Latency Spike: The Switch Queue Tale

A hands-on investigation of microbursts, buffer thresholds, and QoS misclassifications — from first symptom to verified fix.

Python-Powered Traffic Anomaly Detection: A Mini IDS for Network Engineers

Build a lightweight, practical anomaly detector from scratch — capture packets, extract signals, baseline “normal,” and alert on the weird…

Network Engineer 2026: From CLI Operator to AI-Powered Decision Maker

A practical, hands-on guide to using an AI copilot for troubleshooting, change reviews, and safer automation — without losing control of…

Part 2 — From “Anomaly Detected” to “Who Did What?” (Top Talkers + Context + Live Mode)

In Part 1, you built the core mini IDS: parse traffic → window it → extract features → baseline → flag anomalies.

HSRP/VRRP/GLBP: Rock-Solid Gateway Redundancy

High Availability and Load Balancing: HSRP, VRRP, and GLBP Explained

Part 4 — Per-Entity Baselines + Model Persistence (So Your Mini IDS Actually Learns)

Part 3 got you to a deployable pipeline: flow logs in, anomalies out, JSON events shipped.

Understanding Advanced Networking: Beyond the Basics

The Role of Routers in Modern Networks: Routing Protocols and Dynamic Network Adjustments

EtherChannel/LACP: Bundling Links for Throughput & Redundancy

Bundling Links for Redundancy and Throughput: A Guide to EtherChannel and LACP.

ZTNA vs VPN: Access Design for Hybrid Work That Won’t Torture Your NOC

Optimizing Security and Network Management in a Hybrid World

EIGRP in a Nutshell: Metrics, Feasible Successors, and Fast Convergence

EIGRP in Action: How Metrics and Feasible Successors Drive Fast Convergence

Network as Code: Git, Branching, and PRs for Network Engineers

How to Leverage Git, Branching, and Pull Requests to Modernize Network Engineering Practices

Golden Config & Drift Detection: How to Avoid Getting ‘Surprised’ During Audits

Master the Art of Configuration Management and Stay Ahead of Drift to Ensure Smooth, Stress-Free Audits.

Real-World Cisco ISE, Part 4: Wireless 802.1X that roams fast — SSID profiles, clean CWA guest..

You’ll deploy EAP-TLS on WLAN, enable fast roaming that actually works, keep guest (CWA) tidy with the right redirect ACL, avoid VLAN…

Site-to-Site VPN Ciphers and Lifetimes: Picking What You’ll Still Like in 3 Years

How to Choose the Right Encryption and Connection Lifetimes for Long-Term Security and Performance in Site-to-Site VPNs.