search

eldadru / ksniff

Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
Apache License 2.0
3.13k stars 186 forks source link

Which default tcpdump filters/plugins are used? #141

Closed torbendury closed 2 years ago

torbendury commented 2 years ago

Hello everyone!

First of all, thanks for this great tool, it recently has been really useful when debugging strange network actions inside k8s.

One question: What is the default tcpdump command used when running kubectl sniff <pod> -c <container>? It seems not every kind of traffic is shown by default.

torbendury commented 2 years ago

Nevermind, it seems I'm kinda blind. Running sniff was sufficient to get the information:

INFO[0001] executing command: '[/tmp/static-tcpdump -i any -U -w - ]' on container: 'OMMITTED', pod: 'OMMITTED', namespace: 'OMMITTED'