Mastering Linux Networking: An Introduction to Linux Administration Essentials

### Overview In this session, speaker Gautam Varma provides an introduction to fundamental networking concepts and essential Linux administration tools used to configure, manage, and troubleshoot networking. Starting with core networking fundamentals such as IP addressing, subnetting, and network interfaces, the presentation walks through critical services including DHCP and DNS. It then transitions into practical command-line utilities for inspecting network interfaces, configuring routes, and diagnosing connectivity problems on Linux systems.

### Key Topics - **Networking Fundamentals**: Core concepts including IPv4 (32-bit dot-decimal notation, roughly 3.5 billion addresses) and IPv6 (128-bit hexadecimal notation), the process of subnetting to partition networks for efficiency and security, and network interfaces spanning physical hardware (NICs, wireless adapters) and virtual implementations (hypervisor-managed virtual machines, Docker interfaces). - **Critical Network Services**: The purpose and operational workflow of Dynamic Host Configuration Protocol (DHCP) for automated network parameter assignment, along with Domain Name System (DNS) for resolving human-readable domain names into IP addresses using local and upstream hierarchical caching. - **Network Interface & Route Management**: Using standard Linux utilities such as `nmcli`, `ifconfig`, `ethtool`, and `route` to view interface states, assign addresses, modify link properties, and manipulate kernel routing tables. - **Troubleshooting & Packet Analysis**: Diagnostic command-line utilities including `ping`, `dig`, `traceroute`, and packet-sniffing tools such as `tcpdump` and Wireshark.

### Technical Details - **Subnetting & Interfaces**: Subnetting divides large IP networks into smaller subnets by manipulating the subnet mask (e.g., segmenting a `/24` private home network `192.168.0.0/255.255.255.0` into sub-ranges like 1–62, 65–126). Interfaces can be viewed using `nmcli device status` to display device type, connection state, and management status. - **DHCP Workflow & Inspection**: Demonstrates the four-step DHCP exchange (DHCP Discover broadcast from client, DHCP Offer from server, DHCP Request from client, and DHCP Acknowledge from server). Live inspection can be performed via Wireshark or via `tcpdump` filtered on the relevant interface (`-i eth0`) and ports (`port 67 and 68`). - **Interface Management**: `ifconfig -a` displays all active and inactive interfaces with associated IPv4 (`inet`), IPv6, and broadcast parameters. `ifconfig` can also assign static addresses and netmasks, or toggle links with `up` and `down`. The `ethtool` command queries and sets physical interface attributes, such as link speed (e.g., 1000 Mbps) and duplex mode (half or full). - **Routing Management**: The `route` command reveals kernel routing tables containing destination networks, gateways, genmasks, flags, metrics, and interfaces. Administrators can manually define or delete routes (`route add` / `route del`). The speaker notes this can help identify entry and exit paths of an attacker and allow administrators to sever malicious routes. - **Troubleshooting Utilities**: - `ping`: Tests ICMP connectivity and domain resolution between endpoints, confirming whether packet loss or DNS failure is occurring. - `dig`: Performs DNS lookups using queries against name servers (e.g., testing queries against `8.8.8.8`) to inspect DNS responses. - `traceroute`: Displays the specific network path and intermediate hops to a destination IP/hostname, reporting hop count, intermediate gateway IP addresses, and three round-trip millisecond probe timings. - `tcpdump`: Captures live packets across designated interfaces (e.g., `enp0s3`) to monitor traffic, verify delivery, and verify whether traffic is arriving on expected ports.

### Takeaways Mastering foundational Linux networking requires a solid understanding of lower-level primitives—such as IP addressing, subnet masking, and packet encapsulation—combined with hands-on familiarity with command-line tools. By leveraging utilities like `nmcli`, `ifconfig`, `ethtool`, `route`, `ping`, `traceroute`, `dig`, and `tcpdump`, administrators can quickly evaluate interface states, adjust routing behaviors, verify DNS and DHCP operations, and identify connectivity or configuration failures.