[{"_1":2,"_160":-5,"_161":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_139":140},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_128":-5,"_129":11,"_130":21,"_131":11,"_132":-5,"_133":11,"_134":-5,"_135":136,"_137":91,"_138":-7},"canonicalUrl","https://hub.docker.com/r/futuretea/static-tcpdump/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","futuretea","reponame","static-tcpdump","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2019-09-26T10:13:04.080889Z","description","","is_private","last_updated","2019-09-26T10:18:30.361276Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",265,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# ksniff\n\n[![Build Status](https://travis-ci.org/eldadru/ksniff.svg?branch=master)](https://travis-ci.org/eldadru/ksniff)\n\nA kubectl plugin that utilize tcpdump and Wireshark to start a remote capture on any pod in your\n Kubernetes cluster.\n\nYou get the full power of Wireshark with minimal impact on your running pods.\n\n### Intro\n\nWhen working with micro-services, many times it's very helpful to get a capture of the network\nactivity between your micro-service and it's dependencies.\n\nksniff use kubectl to upload a statically compiled tcpdump binary to your pod and redirecting it's\noutput to your local Wireshark for smooth network debugging experience.\n\n### Demo\n![Demo!](https://i.imgur.com/hWtF9r2.gif)\n\n### Production Readiness\nKsniff isn't production ready yet, running ksniff for production workloads isn't recommended at this point.\n\n## Installation\nInstallation via krew (https://github.com/GoogleContainerTools/krew)\n\n kubectl krew install sniff\n \nFor manual installation, download the latest release package, unzip it and use the attached makefile: \n\n unzip ksniff.zip\n make install\n\n\n\n## Build\n\nRequirements:\n2. go 1.11 or newer\n\nCompiling:\n \n linux: make linux\n windows: make windows\n mac: make darwin\n \n\nTo compile a static tcpdump binary use docker:\n docker build -t futuretea/static-tcpdump .\n\tdocker run -it --rm -v ${PWD}/bin:/mnt futuretea/static-tcpdump mv /static-tcpdump /mnt\n\n\n### Usage\n\n kubectl < 1.12:\n kubectl plugin sniff [-n ] [-c ] [-i ] [-f ] [-o OUTPUT_FILE] [-l LOCAL_TCPDUMP_FILE] [-r REMOTE_TCPDUMP_FILE]\n \n kubectl >= 1.12:\n kubectl sniff [-n ] [-c ] [-i ] [-f ] [-o OUTPUT_FILE] [-l LOCAL_TCPDUMP_FILE] [-r REMOTE_TCPDUMP_FILE]\n \n POD_NAME: Required. the name of the kubernetes pod to start capture it's traffic.\n NAMESPACE_NAME: Optional. Namespace name. used to specify the target namespace to operate on.\n CONTAINER_NAME: Optional. If omitted, the first container in the pod will be chosen.\n INTERFACE_NAME: Optional. Pod Interface to capture from. If omited, all Pod interfaces will be captured.\n CAPTURE_FILTER: Optional. specify a specific tcpdump capture filter. If omitted no filter will be used.\n OUTPUT_FILE: Optional. if specified, ksniff will redirect tcpdump output to local file instead of wireshark.\n LOCAL_TCPDUMP_FILE: Optional. if specified, ksniff will use this path as the local path of the static tcpdump binary.\n REMOTE_TCPDUMP_FILE: Optional. if specified, ksniff will use the specified path as the remote path to upload static tcpdump to.\n\n#### Non-Privileged and Scratch Pods\nTo reduce attack surface and have small and lean containers, many production-ready containers runs as non-privileged user\nor even as a scratch container.\n\nTo support those containers as well, ksniff now ships with the \"-p\" (privileged) mode.\nWhen executed with the -p flag, ksniff will create a new pod on the remote kubernetes cluster that will have access to the node docker daemon.\n\nksniff will than use that pod to execute a container attached to the target container network namespace \nand perform the actual network capture.\n\n### Contribution\nMore than welcome! please don't hesitate to open bugs, questions, pull requests \n\n### Future Work\n1. Instead of uploading static tcpdump, use the future support of \"kubectl debug\" feature\n (https://github.com/kubernetes/community/pull/649) which should be a much cleaner solution.\n \n\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",76489817,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":117,"_118":94,"_119":33,"_120":56,"_57":121,"_122":123,"_124":108,"_125":117,"_126":66,"_127":21},"content_type","creator",5595818,"full_size",76485714,"id",70229590,"images",[101],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":96,"_63":66,"_116":-5},"architecture","amd64","digest","sha256:59a657f1186622457cad739111b6b4f23735a0687acc006f247986784d1a0332","features","last_pulled","2026-10-06T12:27:40.612557228Z","last_pushed","2019-09-26T10:18:30Z","os","linux","os_features","os_version","size","variant","2019-09-26T10:18:29.997153Z","last_updater","last_updater_username","media_type","latest","repository",7760905,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":141,"_148":149,"_135":158,"_159":11},{"_40":142,"_42":143,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":144,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":145,"_79":11,"_80":147,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":146},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_150":64,"_151":-5,"_152":-5,"_153":154},"count","next","previous","results",[155],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":156,"_50":117,"_118":94,"_119":33,"_120":56,"_57":121,"_122":123,"_124":108,"_125":117,"_126":66,"_127":21},[157],{"_102":103,"_104":105,"_106":48,"_107":108,"_109":110,"_111":112,"_113":48,"_114":-5,"_115":96,"_63":66,"_116":-5},[],"canDeleteTags","actionData","errors"]

futuretea/static-tcpdump

Tags for futuretea/static-tcpdump