Q: The system is experiencing unexplained network latency. `ping` times internally jump from 1ms to 200ms periodically. How do you isolate the problem?

Intermittent high latency is tricky. My workflow would be:

• Scope: Is it affecting all instances? One AZ? One specific app? I'd ping the default gateway and another instance in the same subnet to isolate whether it's the host network stack or the physical network/hypervisor.
• Host metrics: Check dmesg or journalctl for NIC errors, ring buffer drops, or nf_conntrack table full messages.
• Traffic Analysis: Use mtr to track packet loss at hops. To capture the issue, I'd run tcpdump -i eth0 -w capture.pcap during the latency spikes.

Based on the finding, I might tune ring buffers (ethtool -G), adjust sysctl buffers, or escalate to the cloud provider if the host metrics check out perfectly.

• Kernel Drops: Use netstat -su to see if UDP/TCP packets are being dropped by the kernel due to full receive buffers. I'd verify top to check if a specific CPU core handling NIC interrupts (ksoftirqd) is pinned at 100%, causing a processing bottleneck.