Alternatives to Kubeshark
An eBPF-based traffic analyzer that captures and indexes network traffic inside Kubernetes clusters. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Kubeshark
An eBPF-based traffic analyzer that captures and indexes network traffic inside Kubernetes clusters.
Replacements
Listings that take over the same core job as Kubeshark.
Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF.
Hubble offers eBPF flow visibility and a service dependency graph for Kubernetes, but requires the cluster to run Cilium and lacks TLS decryption.
Similar software
Related functionality, not a direct replacement.
netshoot
A Docker and Kubernetes container image packed with network troubleshooting tools for debugging container networking.
Wireshark
The network protocol analyser: capture traffic and read it packet by packet, with dissectors for hundreds of protocols.
Arkime
Store and search captured network traffic through a web interface.
Termshark
Terminal interface for tshark that feels like Wireshark.
tcpdump
The classic command-line packet capture and analysis tool.
