Alpine Tshark

This container is made to dump pcap. You can use this container to dump other containers.

Usage

Dumping mycontainer

docker run --name <mycontainer> <myimage>
docker run -ti --net=container:<mycontainer> danielguerra/alpine-tshark dump.sh

or write a pcap file

docker run -d --net=container:<mycontainer> danielguerra/alpine-tshark dumppcap.sh /pcap/mycontainer.pcap

or send pcap data to a network socket

docker run -d --net=container:<mycontainer> danielguerra/alpine-tshark dumpnc.sh <myip> <myport>