Field notes

Writing from the workbench.

Practical writeups on multi-vendor networks, fabric design, change detection, and the engineering behind running thousands of endpoints through one pipeline.

GuideJun 12, 202610 min read

FireMon alternatives in 2026: AlgoSec, Tufin, and life after Skybox

An honest map of the firewall policy management market: AlgoSec, Tufin, FireMon, the Skybox shutdown, and where a self-hosted visibility platform fits.

Read the piece
GuideJun 11, 20269 min read

Choosing the best network monitoring tools for multi-vendor networks

An honest guide to SolarWinds, PRTG, Zabbix, LibreNMS, and Nagios, and where a self-hosted multi-vendor platform fits.

SHA-256
EngineeringMay 20, 20268 min read

How we detect changes without relying on audit logs

How stripping volatile fields and hashing the rest eliminates false-positive diffs, and why timestamp-based comparisons fail at scale.

Deep DiveMay 6, 202612 min read

Multi-vendor path tracing: the hard parts

Tracing a packet across IOS, NX-OS, and PAN-OS means reconciling three different ACL syntaxes, two route table formats, and zero shared conventions.

ArchitectureApr 22, 202610 min read

Correlating 13,000 endpoints without a CMDB

MAC tables, ARP, DHCP snooping, CDP/LLDP, 802.1X, and APIC hosts: stitched together in the right order, they replace a stale spreadsheet.

SP1SP2LF1LF2LF3LF4
OperationsApr 8, 20267 min read

APIC clustering: failover without the flapping

Configurable thresholds, cooldown windows, and atomic database operations keep your ACI fabric monitored even when controllers go down.

ProductMar 25, 20266 min read

From six browser tabs to one dashboard

The operational pain that started SAMURAI, and the design decisions that let a single pane of glass replace Cisco Prime, Panorama, FMC, and SSH terminals.

#
OperationsMar 11, 20269 min read

Deploying SAMURAI in air-gapped environments

Docker image pull, offline IEEE OUI database, and TLS certificate pinning: everything you need to run SAMURAI without internet access.

Rather see it run than read about it?

Spin up SAMURAI against your own fabric and watch it correlate in minutes.