$ whois carlotomasini.dev

Carlo Tomasini

Network security architect. 25 years. I build the tools I wish existed.

ANNOTATED DECODE — SYN, initial exchange0x0000

0000  45 00 00 3c 1c 46 40 00  40 06 b1 e6 c0 a8 00 68
0010  c0 a8 00 01 d4 31 01 bb  9c 1e 2f 0a 00 00 00 00
0020  a0 02 fa f0 91 7c 00 00  02 04 05 b4 04 02 08 0a

d431 → 01bb
ephemeral 54321 to 443

9c1e2f0a
ISN; ack field still zero — no data acknowledged yet

faf0
advertised window, 64240 bytes, pre-scale

Figure 0.1 The house style: bytes on the left, meaning in the margin.

FEATURED WORK

all case studies →

CASE 01 · FLAGSHIP

Stevens Knowledge Hub

A protocol education and analysis platform in the W. Richard Stevens tradition: annotated PCAP decode, guided reading, interactive learning paths, a protocol playground, and multiplayer analysis sessions.

Next.js / TSNode APIScapy / pysharkPostgreSQL + S3LLM assist

  client              server
    |                    |
    |—— SYN  seq=0 ——————>|   t=0.000
    |<— SYN,ACK ack=1 ————|   t=0.031  RTT 31ms
    |—— ACK  ack=1 ——————>|
    |—— PSH  len=517 ————>|   ClientHello
    |<— ACK  win=0 ———————|   zero window ⚠

Figure 0.2 Placeholder — session trace view.

CASE 02

PAN-OS fleet automation platform

Pre/post upgrade behavioral validation, CVE exposure, config drift, real-time upgrade telemetry.

DuckDB · Python · Node · D3

CASE 03

PingVault

Network intelligence and BGP cascade forensics — reconstructing how a routing event propagated.

BGP · Python · DuckDB

CASE 04

Multi-tenant Strata Cloud Manager + Azure cross-tenant Cloud NGFW hub

Strata Cloud Manager with an Azure cross-tenant Cloud NGFW hub for a large healthcare enterprise.

Strata Cloud Manager · Azure · Cloud NGFW