brianvo/network-debug repository overview

⁠Network Debug Toolkit

A comprehensive Docker container with 40+ network debugging tools for DNS, HTTP/HTTPS, TCP/UDP, SSL/TLS, and WebSocket protocols.

⁠Quick Start

docker run -it --rm --cap-add=NET_ADMIN --cap-add=NET_RAW brianvo/network-debug

⁠Included Tools

DNS Tools: dig, nslookup, host, delv, dnsmasq

HTTP/HTTPS: curl, wget, Apache Benchmark, httpx

SSL/TLS: openssl, gnutls-cli

WebSocket: websocat, Python websockets

Packet Capture: tcpdump, tshark, ngrep, tcpflow, netsniff-ng

Network Utilities: nmap, hping3, netcat, socat, iftop, iptraf-ng, mtr

Python Libraries: scapy, dnspython, requests

⁠Usage Examples

DNS Query:

docker run --rm brianvo/network-debug dig @8.8.8.8 example.com

Test HTTPS:

docker run --rm brianvo/network-debug curl -v https://api.example.com

Check SSL Certificate:

docker run --rm brianvo/network-debug openssl s_client -connect example.com:443

Capture Traffic:

docker run -it --rm --cap-add=NET_ADMIN --cap-add=NET_RAW \
  -v $(pwd):/debug brianvo/network-debug \
  tcpdump -i any port 53 -w /debug/dns.pcap

Test WebSocket:

docker run -it --rm brianvo/network-debug websocat wss://echo.websocket.org

Port Scan:

docker run --rm --cap-add=NET_RAW brianvo/network-debug nmap -p 1-1000 example.com

⁠Run Modes

Interactive Shell:

docker run -it --rm --cap-add=NET_ADMIN --cap-add=NET_RAW brianvo/network-debug

With Host Network:

docker run -it --rm --cap-add=NET_ADMIN --cap-add=NET_RAW --net=host brianvo/network-debug

Persistent Storage:

docker run -it --rm --cap-add=NET_ADMIN --cap-add=NET_RAW \
  -v $(pwd)/data:/debug brianvo/network-debug

⁠Use Cases

• API Development and Debugging
• DNS Troubleshooting
• SSL/TLS Certificate Inspection
• Network Performance Testing
• Protocol Analysis and Packet Capture
• Security Auditing and Port Scanning
• WebSocket Application Testing
• Load Testing and Benchmarking
• DevOps and SRE Tasks

⁠Architecture Support

• linux/amd64
• linux/arm64

⁠Required Capabilities

For full functionality:

• NET_ADMIN - Network administration, packet capture
• NET_RAW - Raw socket access for tcpdump, nmap, hping3

Basic HTTP/DNS testing works without these capabilities.

⁠Directory Structure

/debug/
├── logs/           # Log files
├── captures/       # Packet captures
└── ssl-certs/      # SSL certificates

⁠Troubleshooting

Permission denied: Add --cap-add=NET_ADMIN --cap-add=NET_RAW

Access host services: Use host.docker.internal instead of localhost

List all tools: Run tools-list inside the container

Github repo: https://github.com/datvo2k/devops-tools⁠