NEW: Version 39.4 is out, introducing Scripting, L4/L7 hooks, and so much more...

Kubeshark is an API Traffic Analyzer for Kubernetes providing real-time, protocol-level visibility into Kubernetes’ internal network, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters.

Think TCPDump and Wireshark re-invented for Kubernetes

Getting Started

Download Kubeshark's binary distribution latest release and run following one of these examples:

kubeshark tap

kubeshark tap -A

kubeshark tap -n sock-shop "(catalo*|front-end*)"

Running any of the ☝️ above commands will open the Web UI in your browser which streams the traffic in your Kubernetes cluster in real-time.

Homebrew

Homebrew 🍺 users can add Kubeshark formulae with:

brew tap kubeshark/kubeshark

and install Kubeshark CLI with:

brew install kubeshark

Building From Source

Clone this repository and run make command to build it. After the build is complete, the executable can be found at ./bin/kubeshark__.

Documentation

To learn more, read the documentation.

Contributing

We ❤️ pull requests! See CONTRIBUTING.md for the contribution guide.

Code of Conduct

This project is for everyone. We ask that our users and contributors take a few minutes to review our Code of Conduct.