Skip to content
Clairos Learn

Networking · Lesson 22 of 26 · 8 minutes

Interface evidence capture

Capture interface and route evidence into lab notes.

Mastery 0/3Run itExplain itApply it
learner@clairosSimulated Linux lab
learner@clairos:~ $
↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Understand the pattern

Junior operators build confidence by gathering evidence before changing systems.

ip
Inspect simulated interface and route state.

An interface address, a route, and a reachable service are separate parts of connectivity.

tee
Copy a stream both to a file and standard output; -a appends.

tee can overwrite a file even though the output is also visible on screen.

cat
Read one or more files to standard output without editing their contents.

Reading a source file should precede changing it; avoid printing real secrets.

Worked example and expected result
$ ip addr | tee lab/interface.txt
1: lo: <LOOPBACK,UP> mtu 65536
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,UP> mtu 1500
    inet 10.20.30.40/24 scope global eth0

Exit status: 0. The command completed successfully in the training fixture.

$ ip route | tee lab/route.txt
default via 10.20.30.1 dev eth0 proto static
10.20.30.0/24 dev eth0 proto kernel scope link src 10.20.30.40

Exit status: 0. The command completed successfully in the training fixture.

$ cat lab/interface.txt
1: lo: <LOOPBACK,UP> mtu 65536
    inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,UP> mtu 1500
    inet 10.20.30.40/24 scope global eth0

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Repeat this workflow in the sandbox with a different scratch filename. Keep the system fixtures unchanged and compare the observed output with your expectation before moving on.

Explain it

In “Interface evidence capture”, which interpretation is safe?

Apply it elsewhere

Before adapting the ip workflow from “Interface evidence capture” to another server, what should you do?

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: Network incident logsTry an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

  1. 01SCP transfer planPlan a copy command without opening a network connection.Practice
  2. 02Network incident logsSearch kernel and access logs for network clues.Practice
  3. 03Local name resolutionCompare hostname, hosts-file, and resolver configuration evidence.Practice