Kubeshark
An eBPF-based traffic analyzer that captures and indexes network traffic inside Kubernetes clusters.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About Kubeshark
Kubeshark captures network traffic inside a Kubernetes cluster using eBPF and indexes it at layers 4 and 7 with full Kubernetes context, such as which pod and service sent each request. It can decrypt TLS traffic without needing the keys.
You inspect traffic through a web dashboard, and AI agents can query it through an MCP server. It is installed with a CLI or Helm chart and suits developers and platform engineers debugging API calls between services.
Strengths
- Traffic shown with pod and service context
- Decrypts TLS without keys
- Web dashboard plus MCP access for AI agents
- Helm chart for installation
Limitations
- Only for Kubernetes clusters
- Needs cluster permissions to deploy eBPF capture
Details
- Pricing
- FreeThe open-source project is free to use.
- License
- Open source, license not stated
- Developer
- Kubeshark
- Platforms
- Web, Self-hosted, Command line
- How it runs
- Downloadable app, Self-hosted
- Best suited for
- Platform engineers debugging service-to-service traffic in Kubernetes
- Categories
- Network tools, Container tools, Developer tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Kubeshark
Compare allSoftware that can replace Kubeshark for an important use case, and what changes if you switch.
Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF.
Hubble offers eBPF flow visibility and a service dependency graph for Kubernetes, but requires the cluster to run Cilium and lacks TLS decryption.
Similar software
Related functionality, not necessarily a direct replacement.
netshoot
A Docker and Kubernetes container image packed with network troubleshooting tools for debugging container networking.
Wireshark
The network protocol analyser: capture traffic and read it packet by packet, with dissectors for hundreds of protocols.
Arkime
Store and search captured network traffic through a web interface.
Termshark
Terminal interface for tshark that feels like Wireshark.
tcpdump
The classic command-line packet capture and analysis tool.