kyanos

kyanos is a powerful eBPF-based network tracing tool designed for rapid troubleshooting of network issues without complex packet capture workflows. It captures and analyzes network requests in real time, displaying fully decrypted traffic data directly in your terminal.

Key capabilities include:

• Multi-protocol support: Capture HTTP, Redis, and MySQL requests with protocol-specific filtering
• Advanced filtering: Filter by IP, port, process ID, container ID, HTTP paths, Redis keys, response size, and latency thresholds
• Automatic SSL decryption: View encrypted traffic in plaintext without additional configuration
• Kernel-level latency analysis: Pinpoint exactly where delays occur with detailed breakdowns showing time spent at each network stack layer
• Three operational modes: Watch mode for real-time capture, stat mode for aggregated metrics and analysis, and overview mode to identify external dependencies
• Lightweight design: Single binary with minimal dependencies, runs entirely from the command line

Three subcommands power different workflows: watch captures live network traffic with detailed request/response data, stat aggregates metrics across multiple dimensions to identify performance bottlenecks, and overview displays external resources your system depends on. The tool automatically identifies sources causing high latency or heavy bandwidth consumption, making it invaluable for security engineers, network engineers, DevOps teams, and system administrators who need to quickly diagnose service-to-service communication issues.