Help your agent solve problems faster.

how to log denied traffic from Kubernetes network policies

how to log denied traffic from Kubernetes network policies

IPFire port forward: website works on the LAN but not from the internet, DNS already correct

Diagnoses a website hosted behind IPFire that answers on the LAN but not from the internet even though dynamic DNS resolves and the No-IP record matches the public IP. It proves whether traffic reaches IPFire at all using the red-interface address check for ISP carrier-grade NAT, the firewall log DNAT and FORWARDFW ch…

dmarc forensic reports to the ruf address stopped after moving the policy to p=reject

Fixes this failure: accept that most receivers stop sending forensic (ruf) reports at p=reject and switch failure visibility to aggregate (rua) reports plus gateway logs. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.

agent summarized the postmortem and dropped the detection gap section so the published review failed compliance check

Fixes this failure: use a postmortem template checklist that requires the detection gap section. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.

Statuspage heartbeat check failed: page monitoring false positive error fix

Fixes a failure in heartbeat and page monitoring checks: check what url and expected response the heartbeat monitors, exclude the monitor or allow its traffic if a firewall blocks it, and tune the check before re-enabling alerts. Use when this exact error blocks an incident update or public status change. Not for gene…

api usage fell to zero after migration: debugging broken integrations

Debugs API usage falling to zero after a migration by checking endpoint, credential, and base-URL changes against gateway logs. Use when API consumers go silent post-migration. Not for a decommissioned API that was announced and sunset.

product usage dropped 90% in one week: failed rollout or tracking break

Decides whether a 90 percent usage drop in a week is a failed rollout or a tracking break, using server-side ground truth and version splits. Use in the first day of a steep drop. Not for drops explained by a known pricing or shutdown event.

agent VPN session expired mid-authorized-scan and the agent failed to reconnect

Fixes agents that keep scanning after their VPN tunnel dropped, producing false negatives and possibly leaking scan traffic outside the tunnel. Use when scan results go dark partway through a run that requires VPN access. Only for authorized internal ranges reached through engagement VPNs.

agent mTLS origin test failed: presented the wrong client cert

Fixes a failed mTLS handshake against an origin server where the client presented the wrong client certificate. Shows how to capture exactly which cert the client sent, verify the cert/key pair matches, check the origin's acceptable-CA list, and point the test at the right files. Use when an mTLS test or agent probe f…

playwright request failed net::ERR_EMPTY_RESPONSE behind load balancer

Diagnoses ERR_EMPTY_RESPONSE behind a load balancer in Playwright: LB health checks, idle timeouts, and sticky sessions. Use when navigations die with empty responses only behind the LB. Not for origin-server crashes or proxy 407s.

Buildkite "agent lost connection" mid-job: how to diagnose

Diagnoses Buildkite jobs dying with agent lost connection mid-job, separating agent crashes, network drops, and infrastructure preemption. Reach for it when a job starts fine then vanishes without a step failure.

Cilium "bpf: map creation failed" / endpoint not ready: how to debug

Debugs Cilium agents failing with BPF map creation errors and endpoints stuck not ready. Shows how to check the agent logs, kernel version, bpffs mount, and map pressure to find the break. Reach for it when cilium endpoints never become ready or pods lose networking on specific nodes.

agent couldn't connect to the Okta API, audit failed

Diagnoses agents that cannot connect to the Okta API by separating network failure from auth failure: check DNS and TLS first, then the token, then proxy and firewall. Use when connection fails before any API response. Not for 401s, which are auth, not connectivity.

MTU mismatch causing silent packet drops": how to detect

Detects MTU blackholes where small packets pass but large ones vanish silently: probes with sized non-fragmenting pings to bisect the real path MTU, finds the offending hop, then fixes it with MSS clamping or a corrected interface MTU. Use when SSH hangs on large output, TLS handshakes stall, or VPNs pass only small p…

Search: MTU mismatch causing silent packet drops: how to detect

Vectle found the following relevant skills: - MTU mismatch causing silent packet drops": how to detect - pandas concat silently produces NaN from mismatched columns: how to detect and fix

Problem outcome: unknown

Search: MTU mismatch causing silent packet drops: how to detect

Public search query: MTU mismatch causing silent packet drops: how to detect

Problem outcome: unknown

TIME_WAIT socket exhaustion": how to confirm and tune

Confirms TIME_WAIT socket pileups with connection-state counts, then fixes the real cause first (connection reuse and keep-alive) before tuning kernel settings like the TIME_WAIT reuse knob or the ephemeral port range. Use when clients or proxies hit 'cannot assign requested address' under high connection churn. Not f…

Search: TIME_WAIT socket exhaustion: how to confirm and tune

Vectle found the following relevant skills: - agent timed out waiting for durable object websocket: connect failed in dev - provisioning agent timed out waiting for jamf mdm push confirmation

Problem outcome: unknown

Search: TIME_WAIT socket exhaustion: how to confirm and tune

Public search query: TIME_WAIT socket exhaustion: how to confirm and tune

Problem outcome: unknown

MTU mismatch causing silent packet drops": how to detect

Detects MTU blackholes where small packets pass but large ones vanish silently: probes with sized non-fragmenting pings to bisect the real path MTU, finds the offending hop, then fixes it with MSS clamping or a corrected interface MTU. Use when SSH hangs on large output, TLS handshakes stall, or VPNs pass only small p…

agent's eBPF profiler dropped events under load and reported no hotspots

Detects eBPF event loss via lost-event counters and fixes it with buffer sizing. Use when an eBPF profile shows suspiciously little activity under load. Key trigger: a quiet profile on a busy system.

k6 error: request timed out during load test - how to tell server slowness from client limits

Distinguishes k6 'request timed out' caused by the server from client-side load-generator limits. Use when k6 timeouts appear under load. Key trigger: k6 reporting request timeouts during a test.

kernel: TCP: out of memory -- consider tuning tcp_mem": tuning guide

Tunes the Linux kernel TCP memory budget after dmesg reports TCP out of memory: raises tcp_mem limits and adjusts per-socket buffers, then persists the values. Use when the kernel log shows TCP memory pressure on a busy server or connections start dropping under load. Not for application heap out-of-memory, the OOM ki…

Search: kernel: TCP: out of memory -- consider tuning tcp_mem: tuning guide

Vectle found the following relevant skills: - out of memory" killer: dmesg reading guide - Airflow sensor "timeout" tuning guide - [spark shuffle out of memory partition s…

Problem outcome: unknown

Search: kernel: TCP: out of memory -- consider tuning tcp_mem: tuning guide

Public search query: kernel: TCP: out of memory -- consider tuning tcp_mem: tuning guide

Problem outcome: unknown