Individual skill
debugging-network-issues
Investigates network, streaming and protocol failures with falsification-first layered experiments, the general fallback for unknown root causes. Use for ECONNRESET / RST_STREAM / SSE stalls, CDN/CGNAT timeouts or certificate errors, throughput collapse where everything returns 200 but transfers crawl, or LAN identity/topology mysteries. Not for known Tailscale/TUN/DNS/proxy-path conflicts (use tunnel-doctor).
debugging-network-issues/SKILL.md
Source commit 7c4d326ddd94d504e00e241ba49498e95160afbe
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,522
- Repository last updated
- Nov 6, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- testing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesSKILL.mdcore · 58,803 bytesevals/evals.jsonasset · 5,735 bytesreferences/case-cloudflare-524-upload.mddoc · 6,029 bytesreferences/case-iot-router-migration-wpa3.mddoc · 8,061 bytesreferences/case-proxy-tun-cname-override.mddoc · 6,924 bytesreferences/case-sse-rst-130s.mddoc · 13,446 bytesreferences/case-throughput-collapse-no-errors.mddoc · 7,570 bytesreferences/cognitive-traps.mddoc · 14,215 bytesreferences/counter-review-pattern.mddoc · 13,255 bytesreferences/device-throughput-fieldwork.mddoc · 8,426 bytesreferences/http-response-completeness.mddoc · 3,583 bytesreferences/instrumentation-patterns.mddoc · 11,444 bytesreferences/layered-isolation-experiment.mddoc · 15,130 bytesreferences/packet-capture-recipes.mddoc · 13,007 bytesscripts/layered-isolation-probe.shruns · 4,761 bytesscripts/mock-idle-upstream.pyruns · 5,338 bytes
Read excerpt
# Debugging Network Issues
Evidence-driven investigation methodology for incidents where the obvious cause is probably wrong. Built from a real 5-hour production case (see [references/case-sse-rst-130s.md](references/case-sse-rst-130s.md)) where assumption-stacking wasted hours that a 10-minute layered experiment would have resolved.
Apply this skill when the user reports a network/streaming/protocol symptom and the investigator feels tempted to diagnose from one log line or one circumstantial data point. The skill's job is to slow that reflex down.
## Triage first — is this a known domain?
Before applying the general methodology below, check whether the symptom points at a stack that already has a dedicated skill in this repo. Those carry the domain-specific symptom→cause→fix tables this skill deliberately stays general about — start there, and come back here for methodology if the root cause turns out to be elsewhere.
| If the symptom is… | Start with |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------- |
| macOS Tailscale ⨯ proxy/VPN conflict (Shadowrocket / Clash / Surge): `tailscale ping` works but SSH/curl/git fails, `Connection closed by 198.18.x.x`, TUN DNS hijack, ~60s `getaddrinfo` resolver stall | **tunnel-doctor** |
| Cloudflare config: `ERR_TOO_MANY_REDIRECTS`, SSL-mode mismatch, DNS / proxy-status issues behind the orange cloud | **cloudflare-troubleshooting** |