delonix net capture

Captura de pacotes crua na interface SDN de um container — o tcpdump do próprio host.

Raw packet capture on a container's SDN interface — the host's own tcpdump.

Sem motor de captura próprio: corre o tcpdump do PRÓPRIO HOST dentro da netns do container — o mesmo prefixo join_argv que --net <rede> já usa para lá entrar, sem privilégio novo. Só containers nesta versão: um membro de pod partilha a netns do pod e é recusado, a apontar para o nome do pod. Preflight claro antes de qualquer nsenter se o tcpdump não estiver instalado neste host (install.sh já o traz como dependência opcional).

No capture engine of its own: runs the HOST's own tcpdump inside the container's netns — the same join_argv prefix --net <network> already uses to enter one, no new privilege. Containers only in this version: a pod member shares its pod's netns and is refused, pointing at the pod's name. A clear preflight runs before any nsenter if tcpdump isn't installed on this host (install.sh already brings it as an optional dependency).

📄 Implementação real em Rust: cmd/capture.rs

Usage: delonix net capture [OPTIONS] --write <WRITE> <CONTAINER>

Arguments:
  <CONTAINER>
          Container to capture (must be attached to a custom network — `--net host`/`none` have no netns of their own to enter)

Options:
  -i, --iface <IFACE>
          Interface inside the container's netns
          
          [default: eth0]

      --l18n <en|pt>
          Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand

  -w, --write <WRITE>
          Where to write the capture: a file path, or `-` for stdout

  -c, --count <COUNT>
          Stop after this many packets

      --duration <DURATION>
          Stop after this many seconds (a real `SIGINT`, same as Ctrl-C — ignored if `--count` is reached first)

  -h, --help
          Print help (see a summary with '-h')

EXAMPLES:
  # write a pcap file, stop after 100 packets
  delonix net capture web -w out.pcap -c 100

  # stream straight into Wireshark for 30s
  delonix net capture web -w - --duration 30 | wireshark -k -i -

SEE ALSO:
  delonix net flow · delonix container exec

  delonix › net › capture

ExemplosExamples

Escrever um ficheiro pcap, parar ao fim de 100 pacotes
Write a pcap file, stop after 100 packets
delonix net capture web -w out.pcap -c 100
Transmitir direto para o Wireshark durante 30s
Stream straight into Wireshark for 30s
delonix net capture web -w - --duration 30 | wireshark -k -i -