Skip to content

Instantly share code, notes, and snippets.

View ACyphus's full-sized avatar

Alex Cyphus ACyphus

  • Austin, Texas
  • 18:13 (UTC -05:00)
View GitHub Profile
@ACyphus
ACyphus / tcpdump-kubernetes
Created March 6, 2019 19:54 — forked from dcasati/tcpdump-kubernetes
visualize a tcpdump capture from a Kubernetes POD on Wireshark in real time
run tcpdump on a POD and then (live) see that information through wireshark locally on my machine. the magic of ssh and fifo 
Topology
--------
[laptop with wireshark] ------> [AKS Node] ----> [POD (tcpdump is here)]. 
1. create the fifo on your local machine (where wireshark will run)
mkfifo /tmp/remote-capture.fifo
2. execute the following command to send traffic from within a POD to the stdout. This will then be redirected to the fifo locally