Version 38.1 is out with PCAP export and import, TCP streams and so much more. Read about it here.

Kubeshark is an API Traffic Viewer for Kubernetes providing deep visibility and monitoring of all API traffic and payloads going in, out and across containers and Pods inside a Kubernetes cluster.

Think TCPDump and Wireshark re-invented for Kubernetes

Getting Started

Download Kubeshark's binary distribution latest release and run following one of these examples:

kubeshark tap

kubeshark tap -A

kubeshark tap -n sock-shop "(catalo*|front-end*)"

Running any of the ☝️ above commands will open the Web UI in your browser which streams the traffic in your Kubernetes cluster in real-time.

Homebrew

Homebrew 🍺 users can add Kubeshark formulae with:

brew tap kubeshark/kubeshark

and install Kubeshark CLI with:

brew install kubeshark

Building From Source

Clone this repository and run make command to build it. After the build is complete, the executable can be found at ./bin/kubeshark__.

Documentation

To learn more, read the documentation.

Contributing

We ❤️ pull requests! See CONTRIBUTING.md for the contribution guide.

Code of Conduct

This project is for everyone. We ask that our users and contributors take a few minutes to review our Code of Conduct.