Network inspection and debugging in Docker - Cheat Sheet & Quick Revision

Recall & Review

beginner

What command shows all Docker networks on your system?

Use docker network ls to list all Docker networks available on your system.

beginner

How do you inspect detailed information about a specific Docker network?

Use docker network inspect <network_name_or_id> to see detailed info like connected containers and IP ranges.

intermediate

Which command helps you see the IP address of a running Docker container?

Run docker inspect -f '{{ .NetworkSettings.Networks.<network>.IPAddress }}' <container_name_or_id> to get the container's IP address.

intermediate

How can you test network connectivity between Docker containers?

You can use docker exec <container> ping <other_container_ip_or_name> to check if one container can reach another.

intermediate

What is the purpose of the docker network disconnect command?

It disconnects a container from a Docker network, useful for isolating containers during debugging.

Which command lists all Docker networks?

A docker network create

B docker network ls

C docker network connect

D docker network inspect

docker network ls lists all networks. The others create, inspect, or connect networks.

How do you find the IP address of a running container?

A docker inspect -f '{{ .NetworkSettings.IPAddress }}' <container>

B docker network ls

C docker ps

D docker logs <container>

Use docker inspect with a format option to get the container's IP address.

What command helps you check if one container can reach another?

A docker exec <container> ping <target_ip>

B docker network ls

C docker network disconnect

D docker stop <container>

Using ping inside a container tests network connectivity to another container.

Which command disconnects a container from a network?

A docker network connect

B docker network inspect

C docker network disconnect

D docker network ls

docker network disconnect removes a container from a network.

What does docker network inspect show?

A Logs of network activity

B List of all networks

C Create a new network

D Detailed info about a network including connected containers

This command shows detailed network info like connected containers and IP ranges.

Explain how to inspect and find the IP address of a Docker container.

Think about how to get detailed info about a container's network settings.

Describe steps to test network connectivity between two Docker containers.

Imagine you want to check if one friend can call another using their phone number.

Practice

1. What does the Docker command docker network ls do?

easy

A. Creates a new Docker network

B. Shows running containers

C. Deletes a Docker network

D. Lists all Docker networks on the host

Solution

1. Step 1: Understand the command purpose

   The command docker network ls is used to list networks, not containers or create/delete networks.

2. Step 2: Match command to action

   Since it lists networks, it shows all Docker networks on the host machine.

3. Final Answer:

   Lists all Docker networks on the host -> Option D

4. Quick Check:

   docker network ls = list networks [OK]

Hint: Remember: 'ls' means list, so it lists networks [OK]

Common Mistakes:

• Confusing network listing with container listing
• Thinking it creates or deletes networks
• Mixing up 'docker network ls' with 'docker ps'

2. Which of the following is the correct syntax to inspect details of a Docker network named my_network?

easy

A. docker network show my_network

B. docker inspect network my_network

C. docker network inspect my_network

D. docker network details my_network

Solution

1. Step 1: Recall Docker network inspection syntax

   The correct command to inspect a network is docker network inspect <network_name>.

2. Step 2: Verify options

   Only docker network inspect my_network matches the correct syntax exactly.

3. Final Answer:

   docker network inspect my_network -> Option C

4. Quick Check:

   docker network inspect = inspect network [OK]

Hint: Use 'docker network inspect' to see network details [OK]

Common Mistakes:

• Swapping order of 'inspect' and 'network'
• Using non-existent commands like 'show' or 'details'
• Confusing with container inspect syntax

3. You run docker exec container1 ping -c 2 container2 to test connectivity. What output indicates successful communication?

medium

A. ping: unknown host container2

B. 2 packets transmitted, 2 received, 0% packet loss

C. 0 packets transmitted, 0 received, 100% packet loss

D. Error: container2 not found

Solution

1. Step 1: Understand ping output

   Successful ping shows packets transmitted and received with 0% packet loss.

2. Step 2: Match output to success

   2 packets transmitted, 2 received, 0% packet loss shows 2 packets sent and received with no loss, indicating success.

3. Final Answer:

   2 packets transmitted, 2 received, 0% packet loss -> Option B

4. Quick Check:

   Ping success = packets received with 0% loss [OK]

Hint: Look for 0% packet loss to confirm connectivity [OK]

Common Mistakes:

• Confusing error messages with success
• Ignoring packet loss percentage
• Assuming any ping output means success

4. You try docker network inspect mynet but get an error: Error: No such network: mynet. What is the most likely cause?

medium

A. The network 'mynet' does not exist on the host

B. You need to run the command inside a container

C. Docker daemon is not running

D. You must use 'docker inspect network mynet' instead

Solution

1. Step 1: Analyze error message

   The error says 'No such network', meaning Docker cannot find a network named 'mynet'.

2. Step 2: Identify cause

   This usually means the network was not created or was removed.

3. Final Answer:

   The network 'mynet' does not exist on the host -> Option A

4. Quick Check:

   Error 'No such network' = network missing [OK]

Hint: Check network list before inspecting to avoid missing network errors [OK]

Common Mistakes:

• Thinking command must run inside container
• Assuming Docker daemon is stopped without checking
• Using wrong command syntax

5. You have two containers, webapp and db, connected to a user-defined network appnet. You want to debug why webapp cannot reach db. Which sequence of commands helps you inspect and test the network connectivity?

hard

A. docker network inspect appnet; docker exec webapp ping -c 3 db

B. docker ps; docker logs webapp; docker network ls

C. docker network create appnet; docker exec db ping -c 3 webapp

D. docker exec webapp ifconfig; docker network rm appnet

Solution

1. Step 1: Inspect the network configuration

   Use docker network inspect appnet to check if both containers are connected properly.

2. Step 2: Test connectivity from webapp to db

   Run docker exec webapp ping -c 3 db to verify if webapp can reach db by name.

3. Final Answer:

   docker network inspect appnet; docker exec webapp ping -c 3 db -> Option A

4. Quick Check:

   Inspect network then ping from source to target [OK]

Hint: Inspect network first, then ping from source container [OK]

Common Mistakes:

• Trying to ping from db to webapp instead of webapp to db
• Creating network again instead of inspecting existing
• Removing network before debugging