sysdig
A Linux command-line tool for exploring and troubleshooting systems by capturing system calls, with container support.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About sysdig
sysdig captures system calls and events on a Linux machine so you can see what processes, files and network connections are doing. It has native support for containers, which helps when troubleshooting workloads that run in Docker or similar environments.
Alongside the sysdig command there is csysdig, an interactive terminal interface for browsing the same data. It suits administrators and developers who need deep visibility when diagnosing problems on a Linux host.
Strengths
- Captures system calls for deep troubleshooting
- Container-aware out of the box
- Interactive csysdig terminal interface
Limitations
- Linux only
- Steep learning curve for filters and captures
Details
- Pricing
- FreeFree to use from its public GitHub repository.
- License
- Open source, license not stated
- Developer
- Draios
- Platforms
- Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Linux administrators troubleshooting processes and containers at the system call level
- Categories
- System monitoring, CLI tools, Container tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to sysdig
Compare allSoftware that can replace sysdig for an important use case, and what changes if you switch.
bpftrace
A high-level tracing language and command-line tool for observing the Linux kernel and processes with eBPF.
bpftrace uses eBPF with a one-line scripting language and ready-made tools for kernel and process tracing, but is not container-aware out of the box.
Inspektor Gadget
eBPF-based tools for inspecting and debugging Kubernetes clusters and Linux hosts.
Inspektor Gadget offers ready-made eBPF gadgets with container and Kubernetes-aware output, aimed at cluster operators debugging workloads at kernel level.
Tracee
A Linux runtime security and forensics tool that traces system events using eBPF.
Tracee traces system events with eBPF and adds built-in security detectors, suiting runtime security and forensics more than general troubleshooting.
Tetragon
An eBPF-based security observability and runtime enforcement tool for Linux hosts and Kubernetes clusters.
Tetragon provides eBPF security observability with real-time runtime enforcement and Kubernetes metadata, aimed mainly at Kubernetes environments.
Similar software
Related functionality, not necessarily a direct replacement.
Process Monitor
Logs every file, registry, process, thread and DLL operation on Windows in real time, which is how you find out why something failed.
Sysmon
A Sysinternals service that logs detailed process, network and file activity to the Windows event log.
Hubble
A network, service and security observability tool for Kubernetes clusters running Cilium, built on eBPF.
atop
A full-screen Linux performance monitor that reports and logs system and per-process resource usage.
below
A Linux resource monitor that records system, cgroup and process statistics and replays them later.
osquery
Query operating-system information using SQL.
