Optimized for Efficiency and Scale
Distributed PCAP-based entirely Storage
Kubeshark’s workers retailer the captured TCP streams within the muse file machine of each node within the cluster as separate PCAP files.
It additionally keeps note of title resolution history with a JSON dump. This PCAP-based entirely workflow enables a seamless exporting and importing
capability of the captured web page online visitors.
Export a PCAP Snapshot
Kubeshark enables exporting any question result to merged PCAP files (a PCAP file per node) that might maybe be downloaded as a TAR file using the button with diskette icon that might maybe be realized very top very top to the filter enter (fragment A).
Clicking this button downloads a .tar.gz file that involves a PCAP file and a file named: name_resolution_history.json per node within the cluster. name_resolution_history.json file contains the historical changes within the mapping of IPs to pod or service names:
NOTE: When going thru a orderly quantity of web page online visitors, this operation can establish a few seconds to full.
Observe the PCAP Snapshot
Kubeshark additionally offers a CLI choice to gape a previously exported PCAP file.
Working the above expose will originate Kubeshark on your browser to conceal the philosophize of the PCAP file.
TIP: You might maybe maybe be ready to gape the service dependency plot of a previously stored PCAP file.
