Skip to content
Kitbay
Submit

network-log-analyzer

Apache-2.0Updated on Nov 11, 2026138GitHub stars

A skill for AWS DevOps Agent that diagnoses AWS network connectivity problems using two kinds of evidence, VPC Flow Logs and packet captures.

What the skill teaches

A skill for AWS DevOps Agent that diagnoses AWS network connectivity problems using two kinds of evidence, VPC Flow Logs and packet captures. It covers timeouts, refused or reset connections, one-way traffic, rejects that may come from a security group or a network ACL, failed TCP handshakes, slow transfers and retransmissions, large packets that hang and idle connections that drop, and can list the heaviest senders or work out which host is really behind a NAT gateway or EKS pod address. Flow logs can be queried in CloudWatch Logs or Athena; captures must first be turned into text with tshark or tcpdump. It never changes network settings.

Capabilities

  • Tell security group rejects from network ACL rejects
  • Diagnose timeouts, resets and failed TCP handshakes
  • Find the heaviest senders in VPC Flow Logs
  • Analyse packet captures converted to text