Backup, networking, monitoring and directory services, written from real consulting work rather than vendor brochures.https://pingeverything.com/enhttps://pingeverything.com/topics/active-directory/active-directory-dnshttps://pingeverything.com/topics/active-directory/active-directory-dnsConfigure Active Directory DNS on Windows Server: forwarders, reverse lookup zones, conditional forwarders, and the split-brain setup that broke our own site.Sat, 19 Sep 2026 00:00:00 GMTactive directory dnsdns forwarder windows serverreverse lookup zoneconditional forwardersplit-brain dnsptr recordhttps://pingeverything.com/topics/monitoring-alerts/install-cacti-ubuntuhttps://pingeverything.com/topics/monitoring-alerts/install-cacti-ubuntuInstall Cacti on Ubuntu 24.04 with apt, add a switch over SNMP, and draw your first traffic graph, plus why there's no setup wizard and how to verify the graph.Sat, 19 Sep 2026 00:00:00 GMTinstall cacti ubuntucacti snmp monitoringcacti traffic graphcacti apt installcacti vs zabbixsnmp bandwidth graphhttps://pingeverything.com/topics/active-directory/join-a-computer-to-a-domainhttps://pingeverything.com/topics/active-directory/join-a-computer-to-a-domainJoin Windows PCs and servers to Active Directory: DNS, time, and hostname prerequisites, Add-Computer, OU placement with redircmp, and the most common errors.Sat, 19 Sep 2026 00:00:00 GMTjoin computer to domainadd-computer powershelldomain join errorredircmpoffline domain joinnetbios domain namehttps://pingeverything.com/topics/monitoring-alerts/syslog-server-ubuntuhttps://pingeverything.com/topics/monitoring-alerts/syslog-server-ubuntuBuild a central syslog server on Ubuntu 24.04 with rsyslog: open UDP 514, split logs per sender, connect a switch, plan disk and rotation, and add TLS on 6514.Sat, 19 Sep 2026 00:00:00 GMTsyslog server ubuntursyslog remote loggingrsyslog imudpcentral log serverrsyslog tls 6514logrotate rsysloghttps://pingeverything.com/topics/active-directory/install-active-directory-certificate-serviceshttps://pingeverything.com/topics/active-directory/install-active-directory-certificate-servicesInstall Active Directory Certificate Services step by step: Enterprise Root CA setup, the four irreversible decisions, AIA/CDP, backup and end-to-end verification.Sat, 19 Sep 2026 00:00:00 GMTactive directory certificate servicesad cs installenterprise root cacertreq san certificateaia cdp configurationhttps://pingeverything.com/topics/network-segmentation/what-is-a-porthttps://pingeverything.com/topics/network-segmentation/what-is-a-portWhat a port number does, how TCP and UDP differ, how to check open ports, and, when a connection won't form, which side the fault is on and how to prove it.Sat, 19 Sep 2026 00:00:00 GMTwhat is a porttcp vs udpopen port checkconnection timeoutthree-way handshakepacket capture diagnosishttps://pingeverything.com/topics/network-segmentation/what-is-a-vlanhttps://pingeverything.com/topics/network-segmentation/what-is-a-vlanA VLAN splits one switch into separate networks using a 4-byte tag. How 802.1Q works, access vs. trunk ports, and native VLAN risk, with real packet captures.Sat, 19 Sep 2026 00:00:00 GMTwhat is a vlan802.1qaccess port vs trunk portnative vlanvlan tagginginter vlan routinghttps://pingeverything.com/topics/network-segmentation/what-is-arphttps://pingeverything.com/topics/network-segmentation/what-is-arpARP maps an IP address to a MAC address on the local network. Cache states, where the broadcast domain ends, and ARP spoofing, shown with real packet captures.Sat, 19 Sep 2026 00:00:00 GMTwhat is arparp tablearp cache statesbroadcast domaingratuitous arparp spoofinghttps://pingeverything.com/topics/network-segmentation/what-is-dnshttps://pingeverything.com/topics/network-segmentation/what-is-dnsWhat DNS is and how it works: the root, TLD and authoritative chain; A, CNAME, MX, TXT records; nameserver delegation, TTL and caching, and diagnosing faults with nslookup.Sat, 19 Sep 2026 00:00:00 GMTwhat is dnshow dns worksdns record typesttl explainednameserver delegationnslookup dighttps://pingeverything.com/topics/active-directory/what-is-kerberoshttps://pingeverything.com/topics/active-directory/what-is-kerberosHow Kerberos authenticates without sending passwords: the KDC, TGTs and service tickets, a real packet capture, klist, SPNs, and a diagnosis order for failures.Sat, 19 Sep 2026 00:00:00 GMTwhat is kerberoskerberos authenticationkdc tgt service ticketspn setspnkrb_ap_err_skewkerberos vs ntlmhttps://pingeverything.com/topics/active-directory/what-is-ldaphttps://pingeverything.com/topics/active-directory/what-is-ldapWhat LDAP is, how a query is built from base DN, scope and filter, the three bind types, and why 389 vs 636 isn't a preference, shown with captured packets.Sat, 19 Sep 2026 00:00:00 GMTwhat is ldapwhat is ldapsldap port 389 636ldap bind typesstarttlsdistinguished namebase dn scope filteractive directory ldaphttps://pingeverything.com/topics/network-segmentation/what-is-nathttps://pingeverything.com/topics/network-segmentation/what-is-natWhat NAT really does, how SNAT and DNAT differ, how PAT reuses one address, why double NAT and CGNAT break port forwarding, and a measured look at hairpin NAT.Sat, 19 Sep 2026 00:00:00 GMTwhat is natnetwork address translationsnat vs dnatwhat is patport forwarding not workingdouble natcgnathairpin nathttps://pingeverything.com/topics/monitoring-alerts/what-is-ntphttps://pingeverything.com/topics/monitoring-alerts/what-is-ntpWhat NTP is, why clocks drift, how the stratum hierarchy decides who gets time from whom, what breaks when clocks disagree, and the common sync traps, with a captured exchange.Sat, 19 Sep 2026 00:00:00 GMTwhat is ntpclock synchronizationntp stratumnetwork time protocolw32tmkerberos time skewntp port 123https://pingeverything.com/topics/monitoring-alerts/what-is-snmphttps://pingeverything.com/topics/monitoring-alerts/what-is-snmpHow SNMP polls devices and receives traps, what MIBs and OIDs are, why a v2c community string is not a password, and how SNMPv3 fixes it, shown byte by byte.Sat, 19 Sep 2026 00:00:00 GMTwhat is snmpsnmp trapmib and oidsnmp community stringsnmpv3snmp port 161 162https://pingeverything.com/topics/monitoring-alerts/what-is-sysloghttps://pingeverything.com/topics/monitoring-alerts/what-is-syslogWhat a syslog line looks like, how facility and severity share one number, and why port 514 is UDP, explained with real output captured from a lab switch.Sat, 19 Sep 2026 00:00:00 GMTwhat is syslogsyslog port 514syslog facility and severitysyslog severity levelsrfc 5424syslog udp vs tcphttps://pingeverything.com/topics/backup-and-recovery/restore-testinghttps://pingeverything.com/topics/backup-and-recovery/restore-testingA backup job that reports success proves the job ran. A restore test proves the data comes back. Here is how to run one that gives an auditor real evidence.Fri, 07 Aug 2026 00:00:00 GMTrestore testbackup verificationrecovery time objectivehttps://pingeverything.com/topics/backup-and-recovery/3-2-1-backup-rulehttps://pingeverything.com/topics/backup-and-recovery/3-2-1-backup-ruleThree copies, two media types, one offsite. What each number is actually protecting you from, and why ransomware forced most teams to add a fourth condition.Fri, 07 Aug 2026 00:00:00 GMT3-2-1 backup ruleoffsite backupimmutable backup