ptcpdump
  • Documentation
  • About
  • English EN
    • English
    • Chinese
  • Documentation
    • Overview
    • Installation
    • Quickstart
    • Usage Guide
    • Backend Guide
      • Traffic Control (tc)
      • cgroup-skb
      • Socket Filter
      • Tracepoint BTF (tp-btf)
    • Scenario Playbook
      • Loopback ICMP Smoke Test
      • Attach to an Existing SSH Session
      • Launch and Trace a Curl Run
      • Find Outbound HTTP Callers
      • Watch Containers Reach Out
      • Identify DNS Query Processes
      • Filter Traffic by Kubernetes Pod
      • Grab Packets in a Fresh Network Namespace
      • Baseline SYN Capture
      • Parent Process Insight
      • Filter by Process Name
      • Filter by Process ID
      • Read an Existing PcapNG
      • Write a PcapNG for Later
      • Stream Capture to Stdout
      • Inspect ARP Probes
      • Capture Remote ICMP
      • Trace Traffic on a TUN Interface
      • Capture Across Multiple NetNS
      • Detect Newly Created NetNS
      • Launch Curl Against a Domain
      • Inspect NATed Container Traffic
      • Rotate Capture Files by Size
      • Rotate with File Count Limit
      • Docker Integration Capture
      • Containerd Integration Capture
      • Kubernetes Integration Capture
      • Backend Matrix Coverage
    • Troubleshooting
View page source Edit this page Create child page Create documentation issue
On this page
  • Example Library
  1. Documentation
  2. Scenario Playbook

Scenario Playbook

Real-world capturing playbooks that mirror our README highlights and automated tests. Each scenario spells out when you’d use ptcpdump and the exact command to run.

Example Library

  • Loopback ICMP Smoke Test
  • Attach to an Existing SSH Session
  • Launch and Trace a Curl Run
  • Find Outbound HTTP Callers
  • Identify DNS Query Processes
  • Watch Containers Reach Out
  • Filter Traffic by Kubernetes Pod
  • Grab Packets in a Fresh Network Namespace

Loopback ICMP Smoke Test

Attach to an Existing SSH Session

Launch and Trace a Curl Run

Find Outbound HTTP Callers

Watch Containers Reach Out

Identify DNS Query Processes

Filter Traffic by Kubernetes Pod

Grab Packets in a Fresh Network Namespace

Baseline SYN Capture

Parent Process Insight

Filter by Process Name

Filter by Process ID

Read an Existing PcapNG

Write a PcapNG for Later

Stream Capture to Stdout

Inspect ARP Probes

Capture Remote ICMP

Trace Traffic on a TUN Interface

Capture Across Multiple NetNS

Detect Newly Created NetNS

Launch Curl Against a Domain

Inspect NATed Container Traffic

Rotate Capture Files by Size

Rotate with File Count Limit

Docker Integration Capture

Containerd Integration Capture

Kubernetes Integration Capture

Backend Matrix Coverage