The Inspektor has arrived

All the tools you need to investigate your cluster’s toughest issues
expand

Expanding BPF usage from single nodes to across the entire cluster

layers

Maps low-level Linux resources to high-level Kubernetes concepts

integration

Use stand-alone or integrate into your own tooling

We are a Cloud Native Computing Foundation Sandbox Project.

CNCF website

eBPF-based tooling for investigating the toughest Kubernetes issues

Inspektor Gadget provides a wide selection of BPF tools to dig deep into your Kubernetes cluster

The Gadgets

Find information about all the Inspektor Gadget gadgets organized into their corrosponding categories

Go to the docs »
network-policy

Monitors the network activity in the specified namespaces and records a summary of TCP and UDP traffic in a file

seccomp-profile

Records syscalls that are issued in a specified pod and then uses this information to generate the corresponding seccomp profile

seccomp

Provides a stream of events with syscalls that had their seccomp filters generating an audit log

block-io

Gathers information about the usage of the block device I/O, generating a histogram distribution of I/O latency

cpu

Takes samples of the stack traces

process

Gathers information about running processes

socket

Gathers information about TCP and UDP sockets

block-io

Track the containers generating the most block device input/output

bpf

Track the usage and performance of eBPF programs

file

Track reads and writes by file, with container details

tcp

Track active TCP connections

bind

Trace the kernel functions performing socket binding

capabilities

Trace security capability checks

dns

Trace DNS requests events

exec

Trace process invocation events

fsslower

Trace open, read, write and fsync operations slower than a threshold

mount

Trace mount and umount system calls

network-graph

Monitors the network activity in the specified pods and records the list of TCP connections and UDP streams

oomkill

Trace when OOM killer is triggered and kills a process

open

Trace open system calls.

signal

Trace signals received by processes

sni

Trace Server Name Indication (SNI) from TLS requests

tcp

Trace tcp gadget can be used to monitor tcp connections, as it shows connect, accept and close events related to TCP connections

tcpconnect

Trace connect system calls

Latest Posts