Skip to content

Instantly share code, notes, and snippets.

@Nurlan199206
Forked from r0mdau/find-k8snode-interface.sh
Created February 1, 2021 10:52
Show Gist options
  • Save Nurlan199206/37ac63b3e19980b3f78d0fdbdee632e4 to your computer and use it in GitHub Desktop.
Save Nurlan199206/37ac63b3e19980b3f78d0fdbdee632e4 to your computer and use it in GitHub Desktop.
How to get tcpdump for containers inside Kubernetes pods
# find the kube node of the running pod, appear next to hostIP, and note containerID hash
kubectl get pod mypod -o json
# -> save hostIP
# -> save containerID
# connect to the node and find the pods unique network interface index inside it's container
docker exec containerID /bin/bash -c 'cat /sys/class/net/eth0/iflink'
# -> returns index
# locate the interface of the node
ip link |grep ^index:
# -> returns interface
# then GO tcpdump !
tcpdump -i interface
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment