[{"_1":2,"_152":-5,"_153":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_131":132},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_124":-5,"_125":11,"_126":17,"_127":11,"_128":-5,"_129":130},"canonicalUrl","https://hub.docker.com/r/futuretea/static-tcpdump/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","futuretea","reponame","static-tcpdump","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2019-09-26T10:13:04.080889Z","description","","is_private","last_updated","2019-09-26T10:18:30.361276Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",255,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# ksniff\n\n[![Build Status](https://travis-ci.org/eldadru/ksniff.svg?branch=master)](https://travis-ci.org/eldadru/ksniff)\n\nA kubectl plugin that utilize tcpdump and Wireshark to start a remote capture on any pod in your\n Kubernetes cluster.\n\nYou get the full power of Wireshark with minimal impact on your running pods.\n\n### Intro\n\nWhen working with micro-services, many times it's very helpful to get a capture of the network\nactivity between your micro-service and it's dependencies.\n\nksniff use kubectl to upload a statically compiled tcpdump binary to your pod and redirecting it's\noutput to your local Wireshark for smooth network debugging experience.\n\n### Demo\n![Demo!](https://i.imgur.com/hWtF9r2.gif)\n\n### Production Readiness\nKsniff isn't production ready yet, running ksniff for production workloads isn't recommended at this point.\n\n## Installation\nInstallation via krew (https://github.com/GoogleContainerTools/krew)\n\n kubectl krew install sniff\n \nFor manual installation, download the latest release package, unzip it and use the attached makefile: \n\n unzip ksniff.zip\n make install\n\n\n\n## Build\n\nRequirements:\n2. go 1.11 or newer\n\nCompiling:\n \n linux: make linux\n windows: make windows\n mac: make darwin\n \n\nTo compile a static tcpdump binary use docker:\n docker build -t futuretea/static-tcpdump .\n\tdocker run -it --rm -v ${PWD}/bin:/mnt futuretea/static-tcpdump mv /static-tcpdump /mnt\n\n\n### Usage\n\n kubectl < 1.12:\n kubectl plugin sniff [-n ] [-c ] [-i ] [-f ] [-o OUTPUT_FILE] [-l LOCAL_TCPDUMP_FILE] [-r REMOTE_TCPDUMP_FILE]\n \n kubectl >= 1.12:\n kubectl sniff [-n ] [-c ] [-i ] [-f ] [-o OUTPUT_FILE] [-l LOCAL_TCPDUMP_FILE] [-r REMOTE_TCPDUMP_FILE]\n \n POD_NAME: Required. the name of the kubernetes pod to start capture it's traffic.\n NAMESPACE_NAME: Optional. Namespace name. used to specify the target namespace to operate on.\n CONTAINER_NAME: Optional. If omitted, the first container in the pod will be chosen.\n INTERFACE_NAME: Optional. Pod Interface to capture from. If omited, all Pod interfaces will be captured.\n CAPTURE_FILTER: Optional. specify a specific tcpdump capture filter. If omitted no filter will be used.\n OUTPUT_FILE: Optional. if specified, ksniff will redirect tcpdump output to local file instead of wireshark.\n LOCAL_TCPDUMP_FILE: Optional. if specified, ksniff will use this path as the local path of the static tcpdump binary.\n REMOTE_TCPDUMP_FILE: Optional. if specified, ksniff will use the specified path as the remote path to upload static tcpdump to.\n\n#### Non-Privileged and Scratch Pods\nTo reduce attack surface and have small and lean containers, many production-ready containers runs as non-privileged user\nor even as a scratch container.\n\nTo support those containers as well, ksniff now ships with the \"-p\" (privileged) mode.\nWhen executed with the -p flag, ksniff will create a new pod on the remote kubernetes cluster that will have access to the node docker daemon.\n\nksniff will than use that pod to execute a container attached to the target container network namespace \nand perform the actual network capture.\n\n### Contribution\nMore than welcome! please don't hesitate to open bugs, questions, pull requests \n\n### Future Work\n1. Instead of uploading static tcpdump, use the future support of \"kubectl debug\" feature\n (https://github.com/kubernetes/community/pull/649) which should be a much cleaner solution.\n \n\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",76489817,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},"content_type","creator",5595818,"full_size",76485714,"id",70229590,"images",[97],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},"architecture","amd64","digest","sha256:59a657f1186622457cad739111b6b4f23735a0687acc006f247986784d1a0332","features","last_pulled","2026-09-11T06:43:44.738115527Z","last_pushed","2019-09-26T10:18:30Z","os","linux","os_features","os_version","size","variant","2019-09-26T10:18:29.997153Z","last_updater","last_updater_username","media_type","latest","repository",7760905,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":133,"_140":141,"_129":150,"_151":11},{"_36":134,"_38":135,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":136,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":137,"_75":11,"_76":139,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":138},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_142":60,"_143":-5,"_144":-5,"_145":146},"count","next","previous","results",[147],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":148,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},[149],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},[],"canDeleteTags","actionData","errors"]

futuretea/static-tcpdump

Tags for futuretea/static-tcpdump