Want to see Kubeshark in action right now? Visit this live demo deployment of Kubeshark.

**Kubeshark** is an API traffic analyzer for Kubernetes, providing deep packet inspection with complete API and Kubernetes contexts, retaining cluster-wide L4 traffic (PCAP), and using minimal production compute resources. ![Simple UI](https://github.com/kubeshark/assets/raw/master/png/kubeshark-ui.png) Think [TCPDump](https://en.wikipedia.org/wiki/Tcpdump) and [Wireshark](https://www.wireshark.org/) reimagined for Kubernetes. Access cluster-wide PCAP traffic by pressing a single button, without the need to install `tcpdump` or manually copy files. Understand the traffic context in relation to the API and Kubernetes contexts. #### Service-Map w/Kubernetes Context ![Service Map with Kubernetes Context](https://github.com/kubeshark/assets/raw/master/png/kubeshark-servicemap.png) #### Export Cluster-Wide L4 Traffic (PCAP) Imagine having a cluster-wide [TCPDump](https://www.tcpdump.org/)-like capability—exporting a single [PCAP](https://www.ietf.org/archive/id/draft-gharris-opsawg-pcap-01.html) file that consolidates traffic from multiple nodes, all accessible with a single click. 1. Go to the **Snapshots** tab 2. Create a new snapshot 3. **Optionally** select the nodes (default: all nodes) 4. **Optionally** select the time frame (default: last one hour) 5. Press **Create**

Once the snapshot is ready, click the PCAP file to export its contents and open it in Wireshark. ## Getting Started Download **Kubeshark**'s binary distribution [latest release](https://github.com/kubeshark/kubeshark/releases/latest) or use one of the following methods to deploy **Kubeshark**. The [web-based dashboard](https://docs.kubeshark.com/en/ui) should open in your browser, showing a real-time view of your cluster's traffic. ### Homebrew [Homebrew](https://brew.sh/) :beer: users can install the Kubeshark CLI with: ```shell brew install kubeshark kubeshark tap ``` To clean up: ```shell kubeshark clean ``` ### Helm Add the Helm repository and install the chart: ```shell helm repo add kubeshark https://helm.kubeshark.com helm install kubeshark kubeshark/kubeshark ``` Follow the on-screen instructions how to connect to the dashboard. To clean up: ```shell helm uninstall kubeshark ``` ## Building From Source Clone this repository and run the `make` command to build it. After the build is complete, the executable can be found at `./bin/kubeshark`. ## Documentation To learn more, read the [documentation](https://docs.kubeshark.com). ## Contributing We :heart: pull requests! See [CONTRIBUTING.md](CONTRIBUTING.md) for the contribution guide.